Privacy Policy

Winsen.ai is a website operated by Winsen Labs (a brand of Fanpit Technologies Private Limited). When this policy refers to “we,” “us,” or “Winsen,” it means Winsen Labs.

For privacy questions, contact hello@winsen.ai.

This policy covers what we collect when you visit winsen.ai and submit an access request, and it summarizes how customer data is handled in Winsen One deployments. For customers, the details of data processing are set in your agreement and data processing terms.

• Access-request data. If you submit the contact or access-request form, we collect the information you provide: name, work email, company, organisation type, role, what you need help with, deployment preference, and timeline. We store this, send you an acknowledgement by email, and use it to respond to your request and contact you about Winsen.
• Analytics (PostHog). If you accept analytics cookies, we collect product analytics through PostHog: page views, clicks, browser/device info, approximate location from IP. You can decline or revoke this in our cookie banner.
• Vercel Analytics. We use Vercel's privacy-friendly analytics for traffic measurement. It does not use cookies and does not track users across sites.
• Operational logs. Standard server logs (IP, user agent, timestamps) for security and debugging, retained for up to 30 days.

• We do not sell or rent your data.
• We do not run advertising trackers or third-party advertising pixels.
• We do not collect special-category personal data through this site.

We use the minimum cookies needed for the site to work: theme preference, session, and your cookie-consent choice. Optional analytics cookies are set only if you accept them. The cookie banner is the source of truth: if you choose “Essential only,” PostHog operates in a no-tracking memory mode and we do not write analytics cookies.

When your organisation uses Winsen One, AI employees process the business data you connect and provide: emails, documents, records, and similar working material. That processing runs on Platos, Winsen's runtime, operated by Winsen. Our commitments:

• Never mixed. Your data is never combined with another customer's data.
• Never used for training. Your data is never used to train AI models.
• Exportable. You can export your data.
• Residency on custom arrangements. On deployments in your infrastructure or in a dedicated isolated unit, your data resides in your environment or your dedicated unit.

We use a small number of service providers to run the site and the service:

• Hosting and infrastructure providers for the site and the service.
• Email delivery providers for access-request acknowledgements and updates.
• Analytics providers for site analytics (product analytics only with your consent).

Customers can request the current sub-processor list for their deployment at any time.

You can request access to, correction of, or deletion of your data at any time by emailing hello@winsen.ai. If you are an EU/UK resident, you also have rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.

We keep access-request information until you ask us to delete it, or for up to two years after we cease all communication with you, whichever is shorter. Analytics data is retained for up to 12 months in PostHog. Retention for customer deployment data is set in your agreement.

If we make material changes, we'll update the date at the top and, where appropriate, notify you by email.