Windo Privacy Policy
Last Updated: June 12, 2026
Introduction
Welcome to Windo, a contextual AI workspace that helps you maintain persistent context across different AI tools and projects. This Privacy Policy explains how we collect, use, store, and protect your information when you use our memory management services.
By using Windo, you agree to the collection and use of information in accordance with this policy.
Important Notice: Windo may process sensitive information including health-related data and other personal information you choose to upload. If you intend to process sensitive personal data, please review the "Sensitive Data Processing" section below carefully.
Scope and Applicability
This Privacy Policy applies when Windo ("we", "us", "Windo") acts as the data controller of your personal information. Windo is operated by Imad Eddine Taieb Errahmani, a sole proprietor doing business as Windo. This includes:
Information collected through our website at trywindo.com
Information collected when you create and manage your Windo account
Information collected through your use of the Windo services
Data Controller vs. Data Processor
When you upload content and documents to Windo, you maintain control over that content. We process this content on your behalf to provide our memory extraction and search services. You are responsible for ensuring you have the right to upload and process any information you provide to Windo.
Third-Party Services
This Privacy Policy does not apply to third-party services, websites, or applications that you may choose to connect with Windo. Those services have their own privacy policies.
Information We Collect
Account and Authentication Information
Account Registration
Name and email address. Authentication and credential management are handled by Clerk, our third-party authentication provider. We do not collect or store your password.
Third-Party Authentication
If you sign up using Google or Apple, Clerk collects authentication information provided by those services, including your name, email address, and profile identifier, on our behalf.
Email Verification
We require email verification to activate your account, which is also managed through Clerk.
User-Uploaded Content
We collect and process the following information when you use Windo:
Documents and Files
Any files you upload to Windo, including but not limited to: PDF documents, Microsoft Office files (Word, Excel, PowerPoint), text files, images, and other document formats
File Metadata
File names, user identifiers (userId), workspace identifiers (spaceId), and upload timestamps
Payment Information
If you subscribe to a paid plan, Paddle collects and processes your payment information as our Merchant of Record. We may receive limited subscription and transaction details from Paddle that are necessary to activate, manage, support, and account for your subscription, such as transaction identifiers, subscription status, billing email, billing country, tax or VAT status, and transaction history.
Payment Processing
Payment information is processed by Paddle, our Merchant of Record and payment processor. We do not collect or store your full credit card number or other full payment credentials on our servers. Paddle acts as an independent data controller for payment data collected during checkout. Please refer to Paddle's privacy policy at https://www.paddle.com/legal/privacy for details on how your payment data is handled.
Extracted and Processed Information
Document Text Content
Text extracted from your uploaded files for processing
Memory Statements
AI-extracted semantic information from your content, including: preferences and user settings, tasks and action items, ideas and concepts, problems and blockers, facts and objective information, decisions and commitments, goals and desired outcomes, and contextual background information
Tags and Classifications
Automatically assigned categories and metadata
Document Segments
Portions of your documents processed for efficient analysis
Context Autocapturing
Your explicit consent is required before any capture begins. When you first install Windo on macOS, the application requests permission to use the macOS Accessibility API. This is a standard macOS system prompt that you must explicitly approve. Without this permission, no context capture takes place. You can revoke this permission at any time through macOS System Settings under Privacy and Security.
Context capture only activates after you have granted this permission and enabled the feature within the application. Once active, Windo automatically extracts text from your active applications and visited websites to build your contextual memory. You have granular control over exactly what Windo is and is not allowed to capture at all times — see Section 2.6 for the full set of controls available to you.
What we capture
- Application Activity: the name and state of applications you are actively using, where capture is enabled for that app
- Website and Domain Activity: URLs and page content from websites you visit, except any domains or categories you have blocked
- Captured Context: text content extracted from your active screen. Windo captures text only. We do not capture, store, or transmit screenshots or images of your screen.
- Pause State: whether capture is currently paused and, if so, the scheduled resume time
What we never capture
Screenshots, images, or any visual representation of your screen. All capture is text-only.
Privacy Controls
Windo gives you granular, real-time control over what is captured. Your privacy choices take effect immediately and persist across sessions. You can access Privacy Controls at any time from within the application.
Filter sites, apps, and categories, or pause capture in one tap. Your privacy choices stay with you.
Category Filters
Exclude entire categories of activity (for example, social media, finance, health) so Windo never captures content from those categories. When a category toggle is turned off, no app or website belonging to it is captured, regardless of individual app settings.
App-Specific Filters
Enable or disable capture on a per-application basis. If you turn capture off for a specific app, Windo will not record any activity from that app even if its category is otherwise enabled.
Website and Domain Exclusions
Block specific websites or domains from being captured. Any domain you add to your exclusion list is ignored by the capture engine immediately and permanently until you remove it.
Pause-Capture Menu
Pause all capture for a fixed duration. Choose from preset intervals (minutes or hours). Capture resumes automatically when the timer expires, or you can resume manually at any time before it ends.
Accessing Privacy Controls
The "Open Privacy Controls" button is available from the same screen where you view captured context, so you can refine what is allowed without navigating away. All changes take effect instantly.
Context Deletion
You can remove already-captured context at any granularity directly from the Privacy Controls screen. Three scopes are available, each presented with an explicit irreversibility warning:
| Option | What it does |
|---|---|
| Delete Last Hour of Context | Permanently erases all captured data from the previous 60 minutes. This action cannot be undone. |
| Delete Last Day of Context | Permanently erases all captured data from the previous 24 hours. This action cannot be undone. |
| Delete All Context | Permanently removes your entire captured context history. This action cannot be undone. |
Captured context deletions take effect immediately and are not subject to a recovery period. Once confirmed, the data cannot be retrieved. This is distinct from the standard 30-day recovery period that applies to uploaded documents, memories, and account data (see Section 9.3).
Usage Information
Search Queries
Queries you submit to retrieve context from your stored information
Query Results
The context and memories returned in response to your searches
Workspace Information
Names, descriptions, and overview content for your spaces
Analytics Data
Through PostHog, we collect usage analytics to understand how you interact with our service and to improve product features
Automatically Generated Technical Data
Search Indexes
Technical representations of your content to enable fast and accurate search
Timestamps
Creation and modification dates for all stored records
Processing Metadata
Internal data structures used to optimize retrieval performance
Error and Performance Data
Through Sentry, we collect error reports and performance metrics to maintain service quality
System Monitoring
Through New Relic, we monitor API performance and system health
Communication Information
Support Requests
When you contact us via email at [email protected], we collect your email address, message content, and any information you provide
Marketing Communications
If you subscribe to our newsletters or product updates, we collect your email address and communication preferences
Social Media
If you interact with us on Twitter/X or LinkedIn, we may collect information you choose to share publicly
How We Use Your Information
To Provide and Improve Our Services
Context Retrieval
To help you find relevant information from your past work and conversations
Semantic Search
To enable intelligent search across your documents and memories using advanced AI search technology
Memory Extraction
To identify and store key information, decisions, and context from your documents and autocaptured context
Query Enhancement
To improve search results using historical patterns and workspace overviews
Cross-Tool Integration
To maintain a persistent semantic work layer that can be accessed across different AI tools and platforms
Service Improvement
To maintain and improve the quality of our memory extraction and retrieval services through anonymized, aggregated analytics
User Research
To conduct user research studies to better understand user needs and improve product features
For Account Management and Support
Account Administration
To create and manage your account, authenticate your identity, and provide access to our services
Customer Support
To respond to your inquiries, troubleshoot issues, and provide technical support
Billing and Payments
To process payments, manage subscriptions, and send transaction confirmations
For Communication and Marketing
Product Updates
To send you important information about service updates, new features, and changes to our policies
Marketing Communications
To send you newsletters, promotional materials, and information about our services (you can opt-out at any time via the unsubscribe link in our emails)
User Engagement
To understand how you use our services and communicate relevant tips and best practices
For Security and Compliance
Security Monitoring
To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities
Legal Compliance
To comply with applicable laws, regulations, legal processes, or government requests
System Reliability
To monitor system performance, diagnose technical issues, and maintain service availability
Aggregated and De-Identified Data
We may aggregate or de-identify your personal information so that it can no longer identify you. We use this information for product development and improvements, research and analysis, and general business operations.
We do not attempt to re-identify de-identified data except where necessary to verify the effectiveness of our de-identification processes.
How We Store Your Information
Storage Infrastructure
Your information is stored using the following systems:
Cloud File Storage (Backblaze B2)
Original uploaded files are stored in Backblaze B2 cloud storage. Files are organized by user and workspace: uploads/{userId}/{spaceId}/{fileName}. Files remain in storage until you explicitly delete them.
Vector Database
We maintain specialized databases for efficient storage and retrieval:
Document Storage: Processed portions of your documents
Memory Storage: Extracted semantic memories with statements, types, and tags
Workspace Storage: Workspace metadata including names, descriptions, and overview content
Query History: Your search queries and results for improved future searches
Data Fields Stored
For each memory, we store: user identifier and workspace identifier, memory statement and content, memory type and tags, source file information, creation and update timestamps, and technical indexes for search functionality.
Data Location
File Storage
Backblaze B2 data centers (see Backblaze's privacy policy for geographic locations)
Vector Database
Self-hosted Milvus instance on our secure infrastructure
Application Infrastructure
Hosted on secure servers with CloudFlare CDN for content delivery
AI Models and Processing
AI Models We Use
BGE-M3 Embeddings Model
Used to generate semantic embeddings from your text, enabling intelligent meaning-based search across your memories and documents.
Cohere Reranking Model
Improves the accuracy and relevance of search results by reordering retrieved content based on contextual relevance.
Third-Party AI Services
OpenAI API
Purpose: Memory extraction and query processing
Data Sent: Document text chunks and user queries are sent to OpenAI's API for processing
OpenAI Enterprise API: We use OpenAI's Enterprise API with zero data retention, which means OpenAI does not use your data to train their models
OpenAI's Data Use: Please refer to OpenAI's privacy policy at https://openai.com/policies/privacy-policy
Your Control: Content you upload may be processed through OpenAI's language models to extract memories
Google Gemini (For Specific Features)
Purpose: Alternative language model for specific features and content processing
Data Sent: Document content and queries may be sent to Google's Gemini API for certain features
Google's Data Use: Please refer to Google's privacy policy for their data handling practices
Important: We do not use your data to train our own AI models. Your uploaded content and extracted memories are used solely to provide services to you.
Third-Party Services and Data Sharing
Service Providers
We share your information with the following third-party service providers to operate our business and provide our services:
Authentication
Clerk: User authentication, credential management, and email verification
Information Shared: Name, email address, and authentication tokens
Privacy Policy: https://clerk.com/privacy
Cloud Storage and Infrastructure
Backblaze B2: Cloud storage for your uploaded files
Information Shared: Uploaded files and file metadata
Privacy Policy: https://www.backblaze.com/company/privacy.html
CloudFlare: Content delivery network and security services
Information Shared: Technical connection data, IP addresses
Privacy Policy: https://www.cloudflare.com/privacypolicy/
AI Processing
OpenAI: AI-powered memory extraction and natural language processing
Information Shared: Document text chunks and search queries
Enterprise API with zero data retention
Privacy Policy: https://openai.com/policies/privacy-policy
Google Gemini: Alternative AI processing for specific features
Information Shared: Document content and queries for certain features
Privacy Policy: https://policies.google.com/privacy
Hugging Face Hub: Downloading open-source AI model weights
Information Shared: None - we only download model weights
No user data is transmitted to Hugging Face
Payment Processing
Paddle: Payment processing, subscription management, and Merchant of Record services
Information Shared: information necessary to create, fulfill, support, or administer your subscription and related transactions, such as your email address, selected plan, transaction identifiers, subscription status, and support-related billing information. Note that Paddle acts as an independent data controller for payment data, not merely a processor on our behalf. When you make a purchase, you are transacting directly with Paddle as the Merchant of Record.
In addition to the data we share with Paddle, Paddle independently collects data from you during the checkout process, including payment method details, billing address, geolocation, device and browser information, and purchase history. This data is collected and controlled by Paddle and is outside Windo's control. Please refer to Paddle's privacy policy for the full scope of data they collect and how it is used.
Privacy Policy: https://www.paddle.com/legal/privacy
Analytics and Monitoring
PostHog: Product analytics and usage tracking
Information Shared: Usage patterns, feature interactions, anonymized user behavior
Privacy Policy: https://posthog.com/privacy
Sentry: Error tracking and performance monitoring
Information Shared: Error logs, stack traces, system performance data
Privacy Policy: https://sentry.io/privacy/
New Relic: Application performance monitoring
Information Shared: API performance metrics, system health data
Privacy Policy: https://newrelic.com/termsandconditions/privacy
Communications
Amazon SES: Email delivery service
Information Shared: Email addresses, email content (transactional and marketing)
Privacy Policy: https://aws.amazon.com/privacy/
Optional Services
LangSmith: AI operation tracing (only if you provide an API key)
Information Shared: AI operation tracing data for debugging
Privacy Policy: https://www.langchain.com/privacy
No Sale of Data
We do not sell, rent, or trade your personal information or content to third parties for their marketing purposes. We do not share your data for advertising purposes.
Other Disclosures
We may also share your information in the following circumstances:
Business Transfers
In connection with any merger, sale of company assets, acquisition, financing, or other business transaction, your information may be transferred to the acquiring entity. If such a transfer occurs, we will notify you before your information is transferred, give you the option to delete your data before the transfer, and ensure the acquiring entity continues to honor this Privacy Policy.
Legal Requirements
To comply with applicable laws, regulations, legal processes, or enforceable governmental requests
Protection of Rights
To protect the rights, property, or safety of Windo, our users, or the public, including to detect, prevent, or address fraud, security, or technical issues, enforce our Terms of Service or other agreements, and respond to claims of violation of third-party rights.
With Your Consent
With your explicit consent for any other purpose
Legal Compliance and Future Privacy Enhancements
Our Privacy-First Philosophy
We are committed to building a system where user privacy is protected by design, not just by policy.
Current Architecture
At present, to provide AI-powered memory extraction and semantic search, we process your content on our servers. During this processing phase, we may be subject to valid legal requests for data disclosure.
Future End-to-End Encryption
We are actively developing end-to-end encryption capabilities that will ensure: only you hold the keys to decrypt your data, we cannot access your encrypted content even if legally compelled, and AI processing occurs client-side or using privacy-preserving techniques.
Transparency Commitment
Once we implement end-to-end encryption, we will update this policy to reflect our technical inability to access user data.
Personal Identifying Information (PII)
Windo is designed to minimize exposure of personal identifying information. When context capture is active, PII is detected and filtered out locally on your device before any data is transmitted to our servers or processed by external AI services.
What Counts as PII
Personal identifying information includes, but is not limited to:
Direct Identifiers
Full name, email address, phone number, home address, national ID or social security number, passport or driver's license number
Financial Identifiers
Credit card numbers, bank account numbers, and other financial account details
Health Information
Medical record numbers, health conditions, prescription details, and other health-related identifiers
Other Sensitive Identifiers
Biometric data, login credentials, and any other information that could directly identify a person
On-Device PII Filtering
Before captured context leaves your device, Windo runs a local PII detection pass. Identified PII is stripped from the text before it is sent to our servers or to any third-party AI service. This means:
- PII is never transmitted to our servers as part of captured context
- PII is never sent to OpenAI, Google Gemini, or any other external AI service
- The filtering happens entirely on your device and does not require a network connection
Uploaded Documents
For content you manually upload, PII filtering is not automatically applied. You are responsible for ensuring you have the right to upload and process any content, including obtaining necessary consents if the content contains others' personal information.
Our Commitment
We do not use PII or any other personal data to train AI models. All data is processed solely to provide services to you. If you are subject to HIPAA, GDPR, or other regulations governing personal data, please contact us at [email protected] to discuss whether Windo's current architecture meets your compliance requirements.
Cookies and Tracking Technologies
What Are Cookies
Cookies are small text files stored on your device that help us provide and improve our services. We use cookies and similar tracking technologies on our website and application.
Types of Cookies We Use
Essential Cookies
Required for the service to function. Examples: Authentication, security, session management
Performance Cookies
Help us understand how you use our service. Examples: PostHog analytics, error tracking via Sentry
Functionality Cookies
Remember your preferences and settings. Examples: Language preferences, workspace settings, UI customization
Third-Party Cookies
We use the following third-party services that may set cookies:
PostHog: For product analytics and usage tracking
CloudFlare: For security and content delivery
Sentry: For error tracking and performance monitoring
Managing Cookies
Currently, we do not offer a cookie consent banner or preference center. However, you can manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Blocking essential cookies may prevent you from using certain features of our service. To learn more about managing cookies, visit www.aboutcookies.org
Future Enhancement: We plan to implement a cookie preference center to give you more control over non-essential cookies.
Data Retention and Deletion
Retention Period
Active Data
Your data is retained until you explicitly delete it. We do not apply a time-based retention period to active data.
Captured Context Deletion
When you delete captured context using the context delete feature (Delete Last Hour, Delete Last Day, or Delete All Context), the data is immediately and permanently removed from our servers. We do not retain it, and no recovery period applies.
Other Deleted Data
When you delete uploaded documents, memories, or your account, we retain the data for 30 days to allow for recovery if needed. After this period, it is permanently deleted and cannot be recovered.
Backups
Backup copies are retained for 30 days, after which they are permanently purged.
Your Deletion Rights
You have the right to delete your data at any time through our self-service features:
Individual Memories
Delete specific memories through the UI
Workspace Deletion
Delete all memories associated with a specific workspace (self-service)
Batch Deletion
Delete multiple memories simultaneously
File Removal
Remove uploaded files from cloud storage
Complete Account Deletion
Delete your entire account and all associated data through the UI or by contacting us
Deletion Process
Captured context (via Privacy Controls)
When you use the context delete feature, deletion is immediate. The data is permanently removed from our servers at the moment you confirm the action. No recovery period applies and the data cannot be retrieved.
Uploaded documents, memories, and account data
- Data is marked for deletion and enters a 30-day recovery period
- After 30 days, the data is permanently removed from our vector database
- Associated files are removed from Backblaze B2 storage
- Vector embeddings and metadata are permanently deleted
- Backup copies are purged after the backup retention period
- Deletion is permanent and cannot be undone after the recovery period
Data Security
We implement appropriate technical and organizational measures to protect your information:
Security Measures
We implement comprehensive security measures to protect your information:
Regular Security Audits
We conduct ongoing security assessments of our systems
Penetration Testing
Planned regular testing to identify and address vulnerabilities
SOC 2 Type I Compliance
Currently in progress to achieve SOC 2 Type I certification
Future Certifications
We are working toward ISO 27001 and HIPAA compliance
Access Controls
User Isolation
All data is strictly filtered by user identifier and workspace identifier
Query Filtering
Database queries automatically filter results to show only your data
Authentication
API access requires proper authentication credentials
Application Keys
Secure storage credentials protect access to your files
Processing Security
Embedding Processing
BGE-M3 is used for generating text embeddings. Document conversion and AI model inference are handled on our servers before any data is sent to external parties.
Input Sanitization
File paths and user inputs are sanitized to prevent injection attacks
Network Security
API Protection
FastAPI endpoints with timeout protection (8 minutes for document capture, 1 minute for retrieval)
Secure Connections
Communication with external services uses encrypted connections
Environment Variables
Sensitive configuration stored in environment variables, not in code
Incident Response
In the event of a data breach affecting your personal information:
We will notify affected users within 24 hours of discovering the breach
We will provide information about what data was affected
We will offer guidance on protective measures you can take
We will report the incident to relevant authorities as required by law
Limitations
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
Your Rights and Choices
Access and Control
You have the following rights regarding your data:
Access
View and retrieve all your stored memories and metadata through the UI
Local Access
Access your data as local markdown files
Modification
Update workspace information and settings
Deletion
Delete individual memories, entire workspaces, or all your data through self-service features
Workspace Organization
Organize data into separate workspaces with distinct space identifiers
Data Portability
Export Through UI
You can export your data through our user interface
Export Formats
Data is available in markdown format and original file formats
Original Files
Your original uploaded files remain available for download
Note on Embeddings
Vector embeddings are mathematical representations and may not be directly portable to other systems
Marketing and Communication Preferences
For full details on how we communicate with you and how to manage your preferences, see Section 20.
Opt-Out Options
LangSmith Tracing
Tracing is only enabled if you provide an API key
Analytics
Currently, PostHog analytics helps us improve the product. We plan to add opt-out options in the future
Third-Party AI
OpenAI and Google Gemini integration are required for memory extraction functionality
Technical Details and Transparency
System Architecture
Windo operates using modern, scalable infrastructure:
Application Framework
Secure web services in containerized environments
Database Systems
Specialized databases optimized for semantic search and memory storage
File Storage
Enterprise cloud storage (Backblaze B2) for original documents
AI Processing
Combination of embedding models and third-party AI services
Data Processing Pipeline
Content enters the pipeline through two paths:
Uploaded documents
- Upload: Files are securely stored in cloud storage
- Processing: Documents are converted to text and analyzed
- Memory Extraction: Key information is identified and extracted using AI
- Indexing: Processed information is stored for efficient retrieval
- Retrieval: Advanced search technology helps you find relevant context when needed
Autocaptured context
- Capture: Text is extracted from your active applications and websites on your device
- PII Filtering: Personal identifying information is stripped locally before any data leaves your device
- Transmission: Filtered text is securely sent to our servers
- Memory Extraction: Key information is identified and extracted using AI
- Indexing: Processed information is stored for efficient retrieval
- Retrieval: Advanced search technology helps you find relevant context when needed
Environmental Configuration
The following environment variables control data handling:
OPENAI_API_KEY: OpenAI API credentials
B2_APPLICATION_KEY_ID, B2_APPLICATION_KEY: Backblaze B2 credentials
MILVUS_URI: Vector database connection string
LANGSMITH_API_KEY: Optional telemetry service (disabled if not set)
Children's Privacy
Windo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] so we can delete such information.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
By using Windo, you consent to the transfer of your information to:
Backblaze B2 data centers (various global locations)
OpenAI servers (United States)
Any other third-party service providers mentioned in this policy
We ensure that such transfers comply with applicable data protection laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
Material Changes
If we make material changes to how we handle your personal information, we will notify you by posting a prominent notice on our service and sending you an email notification (if you have provided an email address).
Your Continued Use
Your continued use of Windo after any changes to this Privacy Policy constitutes your acceptance of such changes.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Company: Windo, operated by Imad Eddine Taieb Errahmani (sole proprietor)
Email: [email protected]
Website: https://trywindo.com
For privacy-specific inquiries, data access requests, or to exercise your privacy rights, please email us at [email protected] with "Privacy Request" in the subject line.
Data Protection Rights (GDPR/CCPA/Other Regulations)
Depending on where you are located, you may have additional rights:
European Union and United Kingdom (GDPR)
Current Status
Windo is not currently offered to residents of the European Union, the European Economic Area, or the United Kingdom. We plan to offer Windo in these territories once we have completed our GDPR and UK GDPR compliance work, and we will update this policy at that time.
Data Privacy Framework
We are in progress of obtaining certification under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks.
Your Rights Under GDPR
Once we begin serving these territories, under the General Data Protection Regulation, EU and UK residents will have the right to:
Access your personal data
Rectify inaccurate personal data
Request erasure of your personal data ("right to be forgotten")
Restrict processing of your personal data
Data portability
Object to processing
Withdraw consent at any time
Lodge a complaint with your local data protection authority
EU Representative
We do not currently have an EU representative but will appoint one when we begin serving EU customers.
California (CCPA)
Under the California Consumer Privacy Act, California residents have the right to:
Know what personal information is collected
Know whether personal information is sold or disclosed and to whom
Opt-out of the sale of personal information (Note: We do not sell personal information)
Access your personal information
Request deletion of your personal information
Non-discrimination for exercising your CCPA rights
Your Privacy Choices
We are planning to add a "Your Privacy Choices" mechanism to make it easier for California residents to exercise their rights.
Canada (PIPEDA)
Current Status
We serve Canadian customers and are working toward full PIPEDA compliance.
Canadian residents have the right to:
Access their personal information held by us
Request correction of inaccurate personal information
Withdraw consent to processing (subject to legal and contractual restrictions)
File a complaint with the Privacy Commissioner of Canada
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days).
Compliance and Certifications
Current Compliance Status
We are actively working toward compliance with major privacy and security standards:
SOC 2 Type I: Currently in progress
ISO 27001: Planned for future implementation
HIPAA: Planned for future implementation (important for health data processing)
GDPR / UK GDPR: Working toward compliance ahead of offering Windo in the EU and UK (Windo is not currently offered in these territories)
CCPA: Implementing compliance measures for California residents
PIPEDA: Working toward compliance for Canadian customers
Data Privacy Framework
We are in the process of obtaining certification under:
EU-U.S. Data Privacy Framework
Swiss-U.S. Data Privacy Framework
Once certified, we will update this policy to reflect our certification status.
Security Practices
Regular Security Audits: Ongoing security assessments
Penetration Testing: Planned regular testing schedule
Incident Response Plan: 24-hour notification timeline for data breaches
Bug Bounty Program: Not currently available (planned for future)
Specific Use Cases and Examples
What Data Looks Like
Example Memory Statement:
{
"statement": "User prefers dark mode for all development tools",
"type": "Preference",
"tags": ["development", "settings"],
"source": "chat",
"userId": "user-123",
"spaceId": "workspace-456"
}
How Retrieval Works
When you search for context (e.g., "dark mode settings"):
- Your query is processed using AI technology
- Our search system finds relevant memories from your workspace
- Results are strictly filtered to show only your data
- The most relevant information is returned to you
- Your data is completely isolated - no other user can access your memories
Marketing and Communication
How We Communicate With You
We may send you the following types of communications:
Transactional Emails
Essential service communications (account confirmations, password resets, billing notifications)
Product Updates
Information about new features, improvements, and service changes
Marketing Emails
Newsletters, promotional content, and product announcements
Support Communications
Responses to your inquiries and support requests
Opting Out
Marketing Emails
Click "Unsubscribe" in any marketing email
Product Updates
Contact us at [email protected] to adjust preferences
Transactional Emails
Cannot be disabled as they are essential for service operation
Social Media
We maintain presence on:
Twitter/X: For product announcements and community engagement
LinkedIn: For professional networking and company updates
When you interact with us on social media, those platforms' privacy policies apply to your interactions.
Appendix: Technical Glossary
Semantic Search
AI-powered search that understands the meaning and context of your queries, not just keywords
Memory Statement
A single piece of extracted information from your documents (e.g., a preference, decision, or fact)
Workspace (Space)
An organizational unit that groups related memories and documents together
Vector Database
A specialized database optimized for AI-powered similarity search
Document Segment
A portion of a document that has been processed and analyzed
By using Windo, you acknowledge that you have read and understood this Privacy Policy.