Privacy Policy

1. Overview

Windorion (“we”, “us”) provides a demand-discovery service that surfaces high-intent signals from public online communities. This policy applies to information we process when you use the Service and our website.

2. Information we collect

We collect the following categories of information:

• Account information — when you sign in with GitHub or Google, we receive your name, email address, and avatar from that provider. We do not receive or store your provider password.
• Workspace data — the communities you connect, your saved leads, tags, notes, and preferences.
• Public community content — publicly accessible posts and discussions we retrieve from sources you choose to monitor, in order to detect and score relevant signals.
• Usage & device data — log data, approximate location derived from IP, browser type, and how you interact with the Service, used for security and product improvement.

3. How we use information

We use information to:

• Provide, operate, and secure the Service and detect demand signals relevant to you.
• Generate scores and draft suggested replies.
• Communicate with you about your account, including service and (with your consent) product updates.
• Improve and develop features, troubleshoot, and prevent abuse.
• Comply with legal obligations.

We do not sell your personal information.

4. Public & third-party data

When you connect a community source, we retrieve publicly available content to identify relevant signals. We process this content to operate the Service and respect the access rules and rate limits of each source platform. We do not access private messages or content you are not authorized to view.

5. Sharing & disclosure

We share information only in limited circumstances:

• Service providers — vendors who host infrastructure, process payments, or provide analytics under contractual confidentiality obligations.
• Legal & safety — when required by law or to protect the rights, safety, and security of users, the public, or Windorion.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer retention is required by law. You can request deletion at any time.

7. Security

We use industry-standard safeguards — encryption in transit, access controls, and least-privilege practices — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you of material incidents as required by law.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights from Settings or by contacting us. You may also opt out of non-essential emails at any time.

9. Cookies

We use essential cookies to keep you signed in and remember preferences (such as light/dark theme), and limited analytics cookies to understand product usage. You can control cookies through your browser settings.

10. International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

11. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced via email or in-app notice before taking effect. The “last updated” date above reflects the most recent revision.

12. Contact

For privacy questions or requests, contact us at legal@windorion.app.