Privacy Policy

Last updated: May 24, 2026

This Privacy Policy explains what information WinflowAI collects when you visit winflowai.com, why we collect it, who we share it with, and the rights you have over it. It covers our website only — not data collected under a separate client engagement, which is governed by the signed services agreement for that engagement.

WinflowAI is a sole proprietorship operated by Keith Uy, based in California, USA. For any privacy questions or requests, email keith@winflowai.com.

1. Information We Collect

Information you give us:

Information collected automatically:

Marketing list:

We don't currently maintain an email marketing list. If we add you to one in the future — for example, after you submit the contact form or book a call — we'll tell you at the point of collection and give you a way to opt out (including an unsubscribe link in every marketing email). We will not add you to a marketing list without notice.

2. How We Use Your Information

We use the information described above to:

3. How We Share Your Information

We do not sell your personal information. We share it only with:

4. Cookies and Tracking

The Site uses only essential cookies set by our hosting provider (Netlify) for session integrity and security. We do not currently run third-party analytics, advertising trackers, or cross-site tracking pixels. If that changes, we'll update this policy and, where required, ask for your consent.

5. Your California Privacy Rights (CCPA/CPRA)

If you're a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") gives you the following rights:

To exercise any of these rights, email keith@winflowai.com. We may need to verify your identity (for example, by confirming the email address tied to your request) before we can respond. You can also designate an authorized agent to submit a request on your behalf, with written authorization.

6. EU, UK, and Other International Users

If you're visiting from the European Economic Area, the United Kingdom, or another jurisdiction with its own privacy laws, you may have additional rights under your local law — including rights of access, rectification, erasure, restriction, portability, and objection. The lawful basis for processing your information is either your consent (when you submit a form) or our legitimate interest in operating and securing the Site. To exercise these rights, email keith@winflowai.com.

Note: information you submit is processed and stored in the United States. By using the Site, you understand and consent to this transfer.

7. Data Retention

We keep contact form submissions and related correspondence for as long as needed to respond to your inquiry and for a reasonable business records period after — typically up to three years. Hosting logs are retained for the period set by Netlify's standard log retention. You can ask us to delete your information at any time by emailing keith@winflowai.com.

8. Security

We use reasonable technical and organizational measures to protect the information we collect, including HTTPS for site delivery and reputable service providers for storage. No method of transmission over the internet or electronic storage is 100% secure, however, and we can't guarantee absolute security.

9. Children's Privacy

The Site isn't directed to children under 13, and we don't knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we'll delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. For material changes, we'll make reasonable efforts to notify you (for example, by a notice on the Site or by email if we have your address).

11. Contact

Questions or requests about this Privacy Policy? Email keith@winflowai.com.