Privacy

What we collect

• The early-access form Your name, work email and company, what you tell us about where your support escalations go, and, if you say, which tools and main database you use.
• The privacy request form Your email address, the request you choose and any details you add.
• With each form The time it was sent, and the address and title of the page it was sent from. The plugin that stores submissions, Flamingo, also keeps your name and email address in an address book.
• Server logs Like most web servers, ours logs each request: your IP address, the time, the page requested, the page you came from and your browser’s user-agent string.

Form submissions are stored without your IP address or user-agent string. Sending a form is up to you; no law or contract requires it. The early-access form’s required fields are your name, work email, company and where your escalations go, so we can reply and understand the request; the tools question is optional. The privacy form’s required fields are your email address and the request, so we can act on it; details are optional. A form won’t send without its required fields. If you don’t send a form, we hold nothing about you beyond the server logs.

Why, and on what basis

• Early-access applications and other questions To reply to you and, if you want one, to discuss a pilot. For visitors in the EU and the UK, the basis is our legitimate interest in answering inquiries about our business.
• Privacy requests To handle them, which the law requires of us.
• Server logs To keep the site running and secure, which is our legitimate interest.

We don’t sell your information or use it for advertising, and we make no automated decisions about you.

Cookies, analytics and third parties

• The public pages set no cookies, and run no analytics or tracking.
• They load nothing from other websites: the fonts, styles and scripts all come from winnfield.ai.
• Signing in to the site’s admin area sets WordPress’s own sign-in cookies. Only the site’s administrators use it.
• The server contacts WordPress.org to check for software updates. Those checks send the site’s address and the versions of its software, and nothing about visitors.

Where it’s kept, and who sees it

On the server that runs this website: an Amazon Lightsail server in AWS’s US East (N. Virginia) region, in the United States. If you’re outside the US, sending a form means your information is stored and handled there. Form submissions stay in the site’s database and aren’t sent to any other service. Only Winnfield’s site administrators can see them. When we reply to you by email, your address and our messages are also held by our email provider.

How long we keep it

• Applications, other questions and address-book entries Until you ask us to delete them, or until we no longer need them to answer your inquiry or discuss a pilot you asked about.
• Privacy requests Until we no longer need a record that we handled them, for example to answer a question or complaint about how we did.
• Email we exchange with you As long as we need it for the conversation.
• Server logs 14 days.
• Backups The server is backed up daily and the seven most recent backups are kept, so deleted information normally leaves them within a week.

Your rights

You can ask to see what we hold about you, have it corrected or deleted, restrict or object to our use of it, or receive a copy to take elsewhere. Use the form below. We may need to confirm the request came from you, usually by writing to the address you give, before we show or delete anything. We’ll reply without undue delay and within one month; if a request is complex we may take up to two months more, and we’ll tell you if so.

If you’re in the EU or the UK, you can also complain to your data protection authority.

Who we are

Winnfield runs winnfield.ai. The forms on this site are the way to reach us.

Changes

If this page changes, for example if we ever add analytics, we’ll update it first, with a new date.