Introduction

WindShift ("we", "our", or "us") is designed for confidential work. Customers may store highly confidential materials in the platform, and this Privacy Policy summarizes how we protect that information.

Information We Handle

We limit information handled by WindShift to what is needed to provide, secure, support, and operate the services, including:

Account information (name, email, company)
Customer-submitted workspace materials, which remain confidential and are stored and processed securely only to generate requested outputs
De-identified or anonymized service and security records needed to operate and protect the platform
Communication preferences

How We Use Your Information

We use customer information only for purposes tied to the services and the applicable agreement, including to:

Provide, operate, secure, and support the services
Run customer-requested workflows inside secure workspaces
Keep customer materials confidential; we do not use them for independent analysis, marketing, or unrelated business purposes
Do not sell, share, or disclose customer materials except as needed to provide the services, with authorized service providers under confidentiality obligations, or as required by law
Send you technical notices and support messages
Respond to your requests and inquiries
Protect against fraudulent or illegal activity
Use de-identified, aggregated operational analytics only where not linked to a customer, workspace, or identifiable person

Model Training

We do not use customer documents, deal materials, prompts, outputs, or other customer-provided confidential content to train foundation models.

Data Security

Customer data and personal data are treated as confidential information. We use reasonable technical and organizational safeguards, including access controls and encryption in transit and at rest, to help prevent unauthorized access, use, or disclosure.

Data Retention

We retain customer information only as needed to provide the services, comply with legal obligations, and administer the applicable agreement. WindShift is not a data-archiving service, and customers remain responsible for maintaining their own backups.

Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing where applicable law provides that right
Export your data

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@windshift.io