Privacy Policy
Last updated 30 September 2026
This policy explains what data wingig.ai collects, why, who it is shared with, and the rights you have over it under the GDPR.
1. Who is responsible
The controller for your data is Jonas Misiūnas, Hermann-Löns-Weg 15, 76275 Ettlingen, Germany. For any privacy question or request, contact info@wingig.ai.
2. What we collect
Information you provide
- Account details — your email address, and a display name if you choose to set one. If you sign in with Google or GitHub, we receive your email address and basic profile information from them.
- Content you submit — the job posts, profile summaries, and proposals you paste into the generator, scorer, or profile builder.
- Saved proposals — proposals you explicitly choose to save, along with the job post and profile text used to create them.
Information collected automatically
- Usage counters — to enforce the daily and monthly usage limits we store counters against either your user ID or, if you are not signed in, an irreversible cryptographic hash of your IP address. We do not store raw IP addresses for this purpose.
- Score statistics — each time a proposal is scored we record the numbers only: the overall and per-dimension scores, how many issues were flagged, and whether a job post was included. No text and no identifier is stored with them. We use them to show how a score compares with others.
- Reply reports — if you tell us whether a proposal got a reply, we store that answer and the proposal's score, linked to your account if you are signed in.
- Technical logs — our hosting provider records standard request logs, including IP address and browser type, for security and reliability.
- Local storage — we keep an unsent draft of your current work in your browser so it survives a refresh. It never leaves your device unless you generate.
Payment information
Payments are handled entirely by Stripe. We never see or store your card details. We retain only your Stripe customer identifier, your plan, and your credit balance.
3. What we do with it, and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Providing the service — generating, scoring, and saving proposals | Performance of a contract, Art. 6(1)(b) |
| Managing your account and authentication | Performance of a contract, Art. 6(1)(b) |
| Processing payments and keeping billing records | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) |
| Enforcing usage limits and preventing abuse | Legitimate interests, Art. 6(1)(f) |
| Score statistics and reply reports — showing how a score compares, and checking whether scores predict replies | Legitimate interests, Art. 6(1)(f) |
| Keeping the service secure and available | Legitimate interests, Art. 6(1)(f) |
We do not sell your data, and we do not use it for advertising or profiling.
4. AI processing — what leaves our systems
When you generate, refine, or score a proposal, the job post and profile text you submitted are sent to Anthropic PBC in the United States, which operates the AI model that produces the result. Do not paste anything into wingig.ai that you would not be comfortable sharing with a third-party processor — including passwords, financial details, or confidential client information.
Anthropic processes this content to return a result to us. We do not use your content to train AI models, and we have no arrangement permitting our providers to do so.
5. Who else processes your data
| Processor | Purpose | Data | Location |
|---|---|---|---|
| Vercel Inc. | Website and API hosting | Requests to the site, IP addresses, technical logs | United States / EU |
| Supabase Inc. | Account database and authentication | Email address, display name, saved proposals, usage counters | EU (Frankfurt) / United States |
| Anthropic PBC | AI generation and scoring of proposals | Job post text and profile text you submit | United States |
| Stripe Payments Europe, Ltd. | Payment processing and subscriptions | Email address, payment details, billing records | Ireland / United States |
| Google LLC / GitHub, Inc. | Optional sign-in providers | Email address and basic profile, only if you use them to sign in | United States |
6. International transfers
Some of these providers are based in the United States. Where data is transferred outside the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses or an equivalent safeguard under Chapter V of the GDPR.
7. How long we keep it
- Account data and saved proposals — until you delete them or close your account.
- Usage counters — a rolling record tied to the day it was created; not retained long term.
- Score statistics — kept without a time limit; they contain no text and no identifier.
- Reply reports — if linked to your account, until you close it.
- Billing records — retained as required by German commercial and tax law, which can be up to ten years.
- Content you do not save — job posts and proposals you generate but never save are not stored in our database.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Correct anything inaccurate
- Have your data erased
- Restrict or object to how we process it
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
You can delete your account and all associated data yourself at any time from the Account page. For anything else, email info@wingig.ai and we will respond within 30 days.
You also have the right to complain to a supervisory authority. In Germany this is the data protection authority of your federal state.
9. Cookies
We use only what is necessary to run the service: a session cookie to keep you signed in, and browser local storage to hold your unsent draft. We do not use advertising cookies, analytics cookies, or third-party trackers, which is why you are not asked for cookie consent.
10. Children
wingig.ai is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
If we change this policy we will update the date at the top of this page. Material changes affecting how we use your data will be notified by email.