Privacy Policy
Last updated:October 30, 2026
This Privacy Policy explains how Project Icarus AI, Inc. ("WinFlip," "we," "us") collects, uses, shares, and protects information when you use the WinFlip website (winflip.org) and the WinFlip application (comms.winflip.ai), together the "Service."
1. Information we collect
Newsletter subscriptions: we store your email address, selected website language, subscription date, and the subscription notice version. We use this information to manage requested newsletter updates. To unsubscribe or request deletion, contact hello@winflip.ai.
Account information. Name, email address, password (stored hashed), organization or campaign name, and role on your team.
Content you provide. Drafts, messages, comments, team chat, approvals, schedules, voice profile settings, and materials you upload or link (such as speeches, documents, past posts, YouTube links, and videos).
Google Drive data. If you choose to connect Google Drive, we access only the files you select or authorize so they can be imported into your materials library. See Section 4.
Connected social accounts. If you connect accounts such as Facebook, Instagram, LinkedIn, or Bluesky, we receive the tokens and basic profile details needed to publish the posts you approve.
Usage and device data. Log data such as IP address, browser type, pages viewed, and actions taken, used to keep the Service secure and working.
Payment information. Payments are handled by our payment processor. We do not store full card numbers.
2. How we use information
- To provide the Service: learning your voice, drafting messages, organizing materials, running approvals, and scheduling sends you approve.
- To operate your account, team permissions, and support requests.
- To secure the Service, prevent abuse, and fix problems.
- To send service notices, such as account, security, and billing emails.
- To comply with legal obligations.
We do not sell your personal information. We do not use your content to train general-purpose AI models.
3. AI processing
To generate drafts and suggestions, relevant content you provide may be sent to AI service providers that process it on our behalf under contractual confidentiality and data-protection terms. These providers may not use your data to train their own models.
4. Google user data and Google Drive
When you connect Google Drive, WinFlip requests only the permissions needed to let you pick files and import them into your materials library.
What we access: the files you select (or the files and metadata covered by the permission you grant), such as file name, type, and content.
How we use it: solely to import, read, transcribe, and organize those files in your WinFlip workspace so they can inform drafts written in your voice. We use it for no other purpose.
Sharing: we do not share Google user data with third parties except AI and hosting providers needed to deliver this feature, as required by law, or as part of a merger or acquisition with notice to you.
Storage and protection: imported content is stored encrypted in transit and at rest, accessible only to members of your workspace and authorized staff when needed for support or security.
Retention and deletion: imported files remain until you delete them or your account. You can disconnect Google at any time in your settings or at myaccount.google.com/permissions. On disconnection we delete stored access tokens; on account deletion we delete imported Google data within 30 days.
Limited Use disclosure: WinFlip's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train generalized AI or machine learning models, and do not allow humans to read it unless you give consent, it is needed for security, or it is required by law.
5. How we share information
- Your team: content is shared with members of your workspace based on their access level.
- Service providers: hosting, database, AI, email, analytics, and payment providers who process data on our behalf.
- Platforms you connect: approved posts are sent to the social or email platforms you choose.
- Legal reasons: when required by law or to protect rights and safety.
- Business transfers: in a merger, acquisition, or sale of assets.
6. Data retention
We keep your information while your account is active. When you delete your account, we delete or anonymize your data within 30 days, except where we must keep it for legal, tax, or security reasons.
7. Security
We use encryption in transit (HTTPS) and at rest, access controls, and role-based permissions. No system is perfectly secure, but we work to protect your data.
8. Your choices and rights
You can access, correct, export, or delete your data, and disconnect connected accounts at any time. Depending on where you live (for example, California), you may have additional rights. To make a request, email us athello@winflip.ai.
9. Cookies
Google Analytics measures website use, including page visits and engagement. Google receives page URLs, referrer information, device and browser data, IP address, and cookie identifiers. We do not send newsletter emails, campaign materials, or Google Drive data to Analytics. Analytics and advertising have separate choices in Advertising settings. In consent regions or when location cannot be determined, Analytics stays blocked until you accept it; elsewhere ordinary Analytics is enabled unless you reject or send a supported browser privacy opt-out signal. You can withdraw either choice there at any time, including in other open tabs. Your visitor identifier, timestamp, region, choices, and notice wording and version are saved in your browser, preserving earlier acceptance after withdrawal.
This website uses the Meta Pixel to measure page views and advertising performance on Facebook and Instagram and support ad optimization. Meta may receive page URLs, referrer information, IP address, device and browser data, and cookie or advertising identifiers. We do not enable advanced matching or send contact information to Meta. Meta tracking follows your Advertising settings choices, including rejection and withdrawal.
This website uses the Reddit Pixel to measure page visits and advertising performance and support ad optimization. Reddit may receive page URLs, referrer information, IP address, device and browser data, and cookie or advertising identifiers. We do not enable advanced matching or send contact information to Reddit. Reddit tracking follows your Advertising settings choices, including rejection and withdrawal.
This website also uses the OpenAI advertising pixel to measure advertising activity. OpenAI may receive page URLs, referrer information, device and browser data, IP address, and advertising identifiers. Depending on the pixel settings, its automatic matching may collect hashed contact information entered in website forms. This pixel is separate from AI processing in the WinFlip application and follows the same Advertising settings choices as Google Ads.
On this website, Google Ads measures visits and sign-up button clicks, not completed registrations. Google may receive device and browser information, IP address, page URLs, and cookie or advertising identifiers for advertising measurement and ad optimization. We do not send your email, campaign materials, or Google Drive data for this tracking.
In regions requiring consent, Google advertising tracking stays off until you accept. Elsewhere it is enabled unless you reject or send a supported browser privacy opt-out signal. Advertising settings at the bottom of every page lets you reject or withdraw consent at any time. We keep a browser-stored record of your visitor identifier, choice, date, region, notice version and wording, including earlier acceptance when you withdraw.
We use essential cookies to keep you signed in and secure, and limited analytics to understand how the Service is used. You can control cookies in your browser settings.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their information.
11. Changes
We may update this policy. We will post the new date above and notify you of significant changes.
12. Contact
Project Icarus AI, Inc. (WinFlip)
Email:hello@winflip.ai
