Wynter Privacy Policy

WYNTER PRIVACY POLICY

Wynter, Inc. ("Wynter," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information in connection with our platform, website, and services (collectively, the "Services"). It also explains the choices you have about how your information is used.

This Privacy Policy is incorporated into and forms part of our Terms and Conditions available at https://wynter.com/policies/wynter-app-terms-and-conditions.

Wynter, Inc.
901 S MoPac Expy
Barton Oaks Plaza 1
Suite 300
Austin, TX 78746, USA
[email protected]

1. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

Where our Customers use the Services to process personal information about their own end-users or research subjects, our Customers are the controllers of that information, and Wynter acts as a processor on their behalf. In those cases, the Customer's privacy policy governs.

2. INFORMATION WE COLLECT

2.1 Information you provide

Account Information. When you register, we collect your name, work email, company, job title, and password. For paid accounts, we collect billing information through our payment processor.

Customer Content. When you use the Services, you submit research materials (URLs, copy, images, survey questions, audience specifications, interview plans) and receive research results. We refer to this as "Customer Data."

Participant Information. Participants provide profile information during panel registration and verification, including name, work email, LinkedIn profile URL, company, job title, seniority level, industry, company size, and geographic location. Participants also submit responses, ratings, and recorded interview audio/video and transcripts during research sessions.

Communications. When you contact us, we keep a record of the correspondence.

2.2 Information we collect automatically

Usage Data. Pages viewed, features used, timestamps, referring URLs, and actions taken in the platform.

Device and Log Data. IP address, browser type and version, operating system, device identifiers, and approximate geo-location derived from IP.

Cookies and Similar Technologies. We use cookies and similar tracking technologies. See our Cookie Policy for details.

2.3 Information from third parties

We may receive information from payment processors, enrichment providers, LinkedIn (for Participant verification), and analytics providers.

3. HOW WE USE INFORMATION

We use the information described above for the following purposes:

3.1 To provide the Services

  • Authenticate accounts, process payments, and deliver platform features.
  • Match Participants to Customer research projects based on audience criteria.
  • Deliver research results to Customers.
  • Provide customer support.

3.2 To operate, secure, and improve the Services

  • Monitor performance, debug, prevent fraud and abuse, and maintain security.
  • Analyze usage to improve features and user experience.
  • Train, evaluate, and improve machine learning models, algorithms, and AI-powered features that are used to provide and enhance the Services.

3.3 Aggregated and de-identified data

We create Aggregated Data — data that has been anonymized, de-identified, or combined with data from other sources such that it does not identify any individual, Customer business, or proprietary content. We may use Aggregated Data for any lawful purpose, including operating and improving the Services, training AI and ML models, developing new products and features, publishing industry research, benchmarks, and reports, and commercializing such data and insights. Aggregated Data is not considered personal information under this Privacy Policy.

3.4 Communications

  • Send transactional messages (account notices, billing, research project updates).
  • Send product updates, newsletters, and marketing communications where permitted. You can opt out of marketing at any time using the unsubscribe link.

3.5 Legal and compliance

  • Comply with legal obligations, enforce our Terms, and protect the rights, property, and safety of Wynter, our users, and others.

4. AI AND MACHINE LEARNING

Wynter uses machine learning and AI as part of the Services — for example, to categorize responses, surface insights, generate summaries, and improve the platform over time. We want to be transparent about how this works:

  • What we use to train our models. We may use Customer Data, Participant Responses, and platform activity — in aggregated, de-identified, or pseudonymized form wherever reasonably possible — to train, evaluate, fine-tune, and improve the machine learning models, algorithms, and AI features that power the Services.
  • What we do not do. We do not sell personal information. We do not use Customer-identifiable proprietary content (such as a Customer's specific test materials, brand assets, or audience targeting) to train AI models that are made publicly available as standalone products outside the Services. We do not disclose Customer-identifiable proprietary content to other Customers or to third parties, except as described in Section 5 or with consent.
  • Automated decisions. The Services do not make automated decisions that produce legal or similarly significant effects about you without human involvement.

5. HOW WE SHARE INFORMATION

We do not sell personal information. We share information only as described below:

Service providers and sub-processors. Hosting, analytics, payment processing, email delivery, transcription, AI/ML infrastructure, customer support tools, and similar vendors that process information on our behalf under written agreements. A current list of sub-processors is available on request.

Customers (for Participant information only). Participants' responses and, where applicable, interview recordings and transcripts are delivered to the Customer that commissioned the research. Participants acknowledge this when joining a research session.

Legal requirements. When required by law, regulation, legal process, or government request, or to protect the rights, safety, and property of Wynter, our users, or others.

Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality commitments and this Privacy Policy.

With consent. In other cases with your consent or at your direction.

6. LEGAL BASES FOR PROCESSING (EEA, UK, AND SWITZERLAND)

If you are in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:

  • Contract — to provide the Services you or your employer have requested.
  • Legitimate interests — to operate, secure, and improve the Services; to develop Aggregated Data and improve our AI/ML models; to communicate with you about the Services; and to protect our business, where these interests are not overridden by your rights.
  • Consent — for marketing communications where required, for certain cookies, and for other processing that requires consent. You may withdraw consent at any time.
  • Legal obligation — to comply with applicable law.

7. DATA RETENTION

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary:

  • Account information is retained while your account is active and for a reasonable period after closure.
  • Customer Data is retained per Customer's subscription and as needed for operational, security, and legal purposes.
  • Participant profile information is retained while the Participant remains in our panel, plus a reasonable period thereafter.
  • Interview recordings and transcripts are retained per the terms disclosed to Participants at the time of collection.
  • Aggregated Data may be retained indefinitely, as it does not identify you.

8. INTERNATIONAL DATA TRANSFERS

Wynter is based in the United States and processes information in the US and in other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers — including the European Commission's Standard Contractual Clauses and the UK Addendum — to protect personal information transferred out of the EEA, UK, or Switzerland.

9. YOUR RIGHTS

Depending on where you live, you may have the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to correct inaccurate or incomplete information.
  • Deletion — ask us to delete your information, subject to legal exceptions.
  • Portability — receive your information in a structured, machine-readable format.
  • Objection and restriction — object to or ask us to restrict certain processing.
  • Withdraw consent — where processing is based on consent.
  • Opt out of marketing — at any time via the unsubscribe link or by contacting us.
  • Complain to a regulator — if you believe we have violated applicable law.


To exercise these rights, contact [email protected]. We will respond within the time period required by applicable law. We may need to verify your identity before fulfilling the request.

If you are a Customer's end-user or research subject and wish to exercise rights over data that a Customer controls, please contact the Customer directly. We will assist Customers in responding to such requests.

10. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have the rights listed in Section 9, and additionally:

  • Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
  • Right to delete personal information we have collected, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing. We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under the CPRA.
  • Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that trigger this right.
  • Right to non-discrimination for exercising your rights.

To exercise these rights, email [email protected]. You may also designate an authorized agent to make a request on your behalf.

11. SECURITY

We maintain technical, administrative, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and regular security reviews. No system is 100% secure; we cannot guarantee absolute security. More about our security practices is available at https://wynter.com/security.

12. CHILDREN'S DATA

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us at [email protected] and we will delete it.

13. THIRD-PARTY LINKS

Our Services may link to third-party websites and services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with your information.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-product notice at least thirty (30) days before the changes take effect (or a shorter period as required by law or to address security or legal concerns). Non-material changes are effective when posted.

Application to previously collected information. Updated terms of this Policy apply to information we collect, process, and maintain on and after the Effective Date, and — to the fullest extent permitted by applicable law — also apply to information we previously collected. This includes our ability to create and use Aggregated Data and to train, evaluate, and improve machine learning models and AI features as described in Sections 3 and 4. If you have concerns about how these terms apply to information you previously provided, contact us at [email protected] within thirty (30) days of the Last Updated date above, and we will review your request in good faith.

Your continued use of the Services after the Effective Date constitutes acceptance of the updated Policy.

15. DATA CONTROLLER AND CONTACT

Data Controller. Wynter, Inc.
Contact [email protected]
Mail: 901 S MoPac Expy, Barton Oaks Plaza 1, Suite 300, Austin, TX 78746, USA