Privacy Policy
Last updated November 4, 2026
This policy explains what information Winmap (“Winmap”, “we”, “us”) collects when you use winmap.io and the Winmap app, how we use it and the choices you have. We keep it short because we collect only what we need to run the product.
What we collect
- Account details: your email address and password. Passwords are stored as secure hashes by our sign-in provider; we can’t read them.
- Workspace content: what you and your teammates add, such as workspace names, angles, concepts, hooks, formats, CTAs, copy, creative names, metrics, notes, attached ad files and AI summaries.
- Team information: the email addresses of people you invite and each member’s role.
- Billing details: your plan, billing period and subscription status, plus the customer and subscription IDs Stripe gives us. Your card details go straight to Stripe; we never see or store them.
- Affiliate details: if you join the affiliate program, your referral code, PayPal email and the commissions you’ve earned. When someone signs up through an affiliate link, we record which affiliate referred them; affiliates see counts and amounts, never who you are.
- Usage and technical data: how many AI analyses each workspace has used, and the standard logs our hosting providers keep, such as IP address, browser type and the time of a request.
How we use it
- To run Winmap: sign you in, save and sync your boards, and show results to your team.
- To run AI analysis when you ask for it, and to count it against your plan’s monthly limit.
- To bill paid plans and manage subscriptions, and to credit and pay affiliates.
- To send emails about your account, such as confirmations, password resets and important changes to the Service.
- To keep Winmap secure, fix problems and prevent abuse.
We don’t sell your personal information, share it for advertising, or use your content to train AI models.
AI analysis
When you choose to analyze an ad, we send the image (or a few frames from a video) and your workspace’s saved variable names to Anthropic, which returns suggested tags and a summary. Anthropic processes this to provide the result and, under its commercial terms, doesn’t use it to train its models. Nothing is sent for AI analysis unless you ask for it.
Who we share it with
We use these service providers to run Winmap. They process data for us under their own security and privacy commitments:
| Provider | What it does for Winmap |
|---|---|
| Supabase | Database, sign-in and file storage for your account and workspaces |
| Vercel | Hosts the website and app |
| Stripe | Processes payments and manages subscriptions |
| Anthropic | AI analysis of ad files you choose to analyze |
| Resend | Sends account emails, such as sign-up confirmation and password resets |
People you invite to a workspace can see that workspace’s content. We may also share information if the law requires it, to protect Winmap or its users, or as part of a sale or merger of the business, in which case this policy continues to apply.
Cookies and browser storage
Winmap uses your browser’s storage only to keep you signed in, to save the demo board on your device, and to remember an affiliate’s referral code for 60 days if you arrived through their link. We don’t use advertising or tracking cookies. Stripe sets its own cookies on its checkout and billing pages to prevent fraud.
How long we keep it
We keep your information while your account is open. If you delete a workspace or ask us to delete your account, we remove its content within 30 days. We keep billing records for as long as tax and accounting law requires.
Security
Data is encrypted in transit and at rest by our providers. Workspace content is only available to that workspace’s members, and attached files are stored privately and shown through short-lived links. No system is perfectly secure, so please use a strong, unique password.
Your choices and rights
You can see and edit your workspace content in the app at any time. Email hello@winmap.io to get a copy of your information, correct it or delete your account. Depending on where you live (for example in the EU, UK or California), you may have further rights, such as to object to or restrict how we use your information, or to complain to your local data protection authority. We will answer within 30 days and won’t treat you differently for using these rights.
Where data is stored
Winmap and its providers are based in the United States, and your information may be processed there or in other countries where they operate. Where the law requires it, these transfers rely on safeguards such as standard contractual clauses.
Children
Winmap is for businesses and isn’t meant for anyone under 16. We don’t knowingly collect information from children.
Changes to this policy
If we change this policy we’ll update the date at the top, and if the change is significant we’ll tell you by email or in the app before it takes effect.
Contact
Questions or requests about your privacy: hello@winmap.io.