Privacy Policy

Published Winch legal document. This version is the current Privacy Policy for the Winch Legal / Trust platform.

This Privacy Policy explains how Winch collects, uses, shares, and protects personal data when people use Winch websites, applications, APIs, widgets, and related services.

Data we collect

Winch may collect account information, contact details, authentication data, workspace membership data, billing metadata, product usage data, buyer conversation data, uploaded documents, support communications, and technical logs.

How we use data

Winch uses personal data to provide the service, authenticate users, operate workspaces, process support requests, secure the platform, troubleshoot issues, comply with legal obligations, and improve product reliability.

AI processing

Winch may process customer-provided content, buyer messages, catalog data, and operational context through AI providers to generate responses, extract document content, route workflows, and assist commerce operations.

Legal bases

Depending on the context, Winch may process data based on contract performance, legitimate interests, consent, compliance with legal obligations, or another applicable legal basis.

Sharing and subprocessors

Winch may share data with infrastructure, hosting, payment, authentication, AI, analytics, email, support, and security providers that help operate the service. Current subprocessors are listed in the Subprocessors document.

International transfers

Winch may process data in countries where Winch or its subprocessors operate. Where required, Winch uses appropriate safeguards for international transfers.

Retention

Winch keeps personal data for as long as needed to provide the service, meet legal obligations, resolve disputes, maintain security, and enforce agreements. Retention periods may vary by data type and customer configuration.

Rights

Depending on location, users may have rights to access, correct, delete, restrict, object to, or export personal data. Requests can be sent through the contact channel published on the Winch website.

Cookies and storage

Winch uses cookies and browser storage for necessary service operation and, where enabled, for functionality, measurement, and marketing. Details are available in the Cookie Policy.

Changes

Winch may update this Privacy Policy. Material changes may be notified by email, in-app notice, or another appropriate method.

Contact

Privacy questions can be sent to Winch through the contact channel published on the Winch website.