Privacy Policy
Last updated: 26 June 2026
Winuss is operated by Aditya Deshmukh ("Winuss", "we", "us"). This Privacy Policy explains what personal data we collect about you when you use Winuss, how we use it, and the choices you have. For the personal data you submit through Winuss, we act as the data controller.
1. Data we collect
- Account data: name, email address, login credentials and the firm you belong to.
- Workspace data: client names, contact information, task descriptions, comments and other content you enter into the Service.
- Support data: messages you send us and metadata about those interactions.
- Usage and device data: log files, IP address, browser type, pages visited and timestamps, collected to operate and secure the Service.
- Cookies: session cookies needed to keep you signed in; we do not use advertising cookies.
Payment card details are collected directly by Paddle and are not stored on our servers.
2. How we use your data
- To create and operate your account and workspace.
- To provide the features of the Service, including task assignment, notifications and email reminders.
- To prevent fraud, abuse and security incidents.
- To improve the Service and diagnose issues.
- To respond to support requests.
- To send service announcements and, where you have opted in, product updates.
3. Legal basis
We process personal data under the following legal bases, depending on the context: performance of our contract with you, our legitimate interests in operating and improving the Service, compliance with legal obligations, and consent where consent is required (for example, for optional marketing communications).
4. How we share data
We share personal data only with:
- Paddle, our Merchant of Record, for processing payments, managing subscriptions, calculating and remitting taxes, and issuing invoices and refunds.
- Infrastructure subprocessors that host and operate the Service (cloud hosting, database, email delivery, error tracking).
- Professional advisers such as legal and accounting providers, under confidentiality.
- Authorities where we are required by law to disclose data.
5. International transfers
Some of our subprocessors may be located outside India. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
6. Retention
We retain account and workspace data for as long as your firm has an active account, and for a reasonable period afterward to comply with legal and tax obligations. When data is no longer needed, it is deleted or anonymised.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to withdraw consent, and to data portability. You may also lodge a complaint with your local data protection authority. To exercise these rights, contact us through your Winuss workspace.
8. Security
We use industry-standard technical and organisational measures, including encryption in transit, row-level security in our database, role-based access controls and audit logging, to protect personal data.
9. Cookies
We use only essential cookies that are necessary for authentication and to keep you signed in. We do not use advertising or third-party tracking cookies.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.
11. Contact
Privacy questions can be sent to the contact listed in your Winuss workspace. Payment data handled by Paddle is also covered by Paddle's own privacy notice.