Winly

Privacy Policy

Last updated: December 6, 2025

1. Introduction

Sunai LLC ("we", "our", or "us") operates Winly (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. We respect your privacy and are committed to protecting your personal data.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

  • Name and email address
  • Password (encrypted)
  • Payment information (processed securely through Stripe)
  • Profile information you choose to provide

2.2 Usage Data

We automatically collect certain information when you use the Service:

  • Meeting session data and transcripts
  • AI-generated suggestions and analytics
  • Device information and browser type
  • IP address and approximate location
  • Usage patterns and preferences

2.3 Audio Data

During negotiation meetings, we process audio data to provide real-time transcription and AI assistance. This data is processed in real-time and may be stored temporarily to provide the Service features.

3. How We Use Your Information

We use the collected information for various purposes:

  • To provide and maintain the Service
  • To process your subscription and payments
  • To provide real-time AI assistance and analytics
  • To send you service-related notifications and updates
  • To improve and personalize your experience
  • To detect, prevent, and address technical issues
  • To comply with legal obligations

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption of data in transit and at rest
  • Secure password hashing using bcrypt
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Secure payment processing through Stripe

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Service Providers: With third-party service providers who assist us in operating the Service (e.g., OpenAI for AI processing, Stripe for payments, Resend for emails)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly agree to share your information

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Account information: Until account deletion
  • Meeting transcripts and analytics: As long as your account is active
  • Payment records: As required by law (typically 7 years)
  • Usage logs: 90 days

7. Your Rights

You have the following rights regarding your personal data:

  • Access: Request access to your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to processing of your data
  • Restriction: Request restriction of processing

To exercise these rights, please contact us at legal@sunaius.com

8. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information:

  • Session cookies for authentication
  • Preference cookies to remember your settings
  • Analytics cookies to understand usage patterns

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Third-Party Services

Our Service uses third-party services that may collect information:

  • OpenAI: For AI processing and analysis
  • Stripe: For payment processing
  • Resend: For email communications
  • Neon: For database hosting

These services have their own privacy policies. We encourage you to review their policies.

10. Children's Privacy

Our Service is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to such transfers.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification for material changes

You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

© 2025 Winly @ Sunai LLC. All rights reserved.