WinFlip

Privacy Policy

Last updated:October 16, 2026

This Privacy Policy explains how Project Icarus AI, Inc. ("WinFlip," "we," "us") collects, uses, shares, and protects information when you use the WinFlip website (winflip.ai) and the WinFlip application (comms.winflip.ai), together the "Service."

1. Information we collect

Account information. Name, email address, password (stored hashed), organization or campaign name, and role on your team.

Content you provide. Drafts, messages, comments, team chat, approvals, schedules, voice profile settings, and materials you upload or link (such as speeches, documents, past posts, YouTube links, and videos).

Google Drive data. If you choose to connect Google Drive, we access only the files you select or authorize so they can be imported into your materials library. See Section 4.

Connected social accounts. If you connect accounts such as Facebook, Instagram, LinkedIn, or Bluesky, we receive the tokens and basic profile details needed to publish the posts you approve.

Usage and device data. Log data such as IP address, browser type, pages viewed, and actions taken, used to keep the Service secure and working.

Payment information. Payments are handled by our payment processor. We do not store full card numbers.

2. How we use information

  • To provide the Service: learning your voice, drafting messages, organizing materials, running approvals, and scheduling sends you approve.
  • To operate your account, team permissions, and support requests.
  • To secure the Service, prevent abuse, and fix problems.
  • To send service notices, such as account, security, and billing emails.
  • To comply with legal obligations.

We do not sell your personal information. We do not use your content to train general-purpose AI models.

3. AI processing

To generate drafts and suggestions, relevant content you provide may be sent to AI service providers that process it on our behalf under contractual confidentiality and data-protection terms. These providers may not use your data to train their own models.

4. Google user data and Google Drive

When you connect Google Drive, WinFlip requests only the permissions needed to let you pick files and import them into your materials library.

What we access: the files you select (or the files and metadata covered by the permission you grant), such as file name, type, and content.

How we use it: solely to import, read, transcribe, and organize those files in your WinFlip workspace so they can inform drafts written in your voice. We use it for no other purpose.

Sharing: we do not share Google user data with third parties except AI and hosting providers needed to deliver this feature, as required by law, or as part of a merger or acquisition with notice to you.

Storage and protection: imported content is stored encrypted in transit and at rest, accessible only to members of your workspace and authorized staff when needed for support or security.

Retention and deletion: imported files remain until you delete them or your account. You can disconnect Google at any time in your settings or at myaccount.google.com/permissions. On disconnection we delete stored access tokens; on account deletion we delete imported Google data within 30 days.

Limited Use disclosure: WinFlip's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train generalized AI or machine learning models, and do not allow humans to read it unless you give consent, it is needed for security, or it is required by law.

5. How we share information

  • Your team: content is shared with members of your workspace based on their access level.
  • Service providers: hosting, database, AI, email, analytics, and payment providers who process data on our behalf.
  • Platforms you connect: approved posts are sent to the social or email platforms you choose.
  • Legal reasons: when required by law or to protect rights and safety.
  • Business transfers: in a merger, acquisition, or sale of assets.

6. Data retention

We keep your information while your account is active. When you delete your account, we delete or anonymize your data within 30 days, except where we must keep it for legal, tax, or security reasons.

7. Security

We use encryption in transit (HTTPS) and at rest, access controls, and role-based permissions. No system is perfectly secure, but we work to protect your data.

8. Your choices and rights

You can access, correct, export, or delete your data, and disconnect connected accounts at any time. Depending on where you live (for example, California), you may have additional rights. To make a request, email us athello@winflip.ai.

9. Cookies

We use essential cookies to keep you signed in and secure, and limited analytics to understand how the Service is used. You can control cookies in your browser settings.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their information.

11. Changes

We may update this policy. We will post the new date above and notify you of significant changes.

12. Contact

Project Icarus AI, Inc. (WinFlip)
Email:hello@winflip.ai