Version of 21 October 2026
Privacy notice
You write down work that matters to you, often about people and clients who never agreed to be online. We treat it that way.
What we never do
- Log in to, read or automate your LinkedIn account, or post anything for you.
- Sell, rent or share what you write.
- Use your notes, wins, drafts or style notebook to train AI models, ours or anyone else's.
- Show you ads or track you across other sites.
What we collect, and why
Your account: your email address. Sign-in is by a one-time code or link sent to it; there is no password. To sign you in.
Your settings: your role, topics, tone, employer rules, never-mention list and no-go topics. To check every draft against them.
Your record: the notes you write, the wins drawn from them, drafts, opportunities you log and profile suggestions. To suggest posts, keep your record and prepare your profile, CV and appraisal summaries.
Your style notebook: short notes about how you write (“says ‘we’ for team results”, “no emojis”), learned from your sample posts and from the changes you make before posting. Style only, never what your posts say. Used only for your drafts; see, change or clear it in Settings → How you write.
Usage records: which AI step ran, its token count and cost. No content. To keep each plan within its fair-use allowance. We also count how features are used, as totals with none of your text, to improve the product.
We process this to provide the service you asked for, with your consent, which you give when you set up your account.
Other people's names
Your notes may mention colleagues and clients. With “Keep other people's names out of my record” on (the default), names are replaced by roles before a note is saved, and terms on your never-mention list are never stored in notes.
Where your data is, and who helps us
Your data is stored on our own server in Mumbai, India, with encrypted nightly backups. To read a note or write a draft, the text is sent to an AI model host under zero-data-retention terms: it is processed and not kept. That host may be outside your country.
| Service | What it does | Where |
|---|---|---|
| Hostinger | Runs our server (the app and its database) and sends sign-in emails | Mumbai, India. Hostinger's weekly server backups are kept outside India (Malaysia) |
| Google Drive | Keeps encrypted copies of our nightly backups | Encrypted before upload: Google can't read them |
| OpenRouter | Routes AI requests to the model host | Zero data retention |
| Google Cloud Vertex AI | Runs the Claude model that reads your notes | Zero data retention; may be outside India |
| Paddle | Payments and sales tax, when billing opens | Card details never reach us |
How long we keep it
Until you delete it, or your account. Deleting your account removes your data from our database straight away; database backups roll off within 30 days. Usage records are kept for accounting without anything that identifies you.
Your rights
- See and download everything: Settings → Plan, data and privacy → Download everything.
- Correct anything by editing it in the app.
- Delete your account and everything in it, at any time, from the same page. This also withdraws your consent.
- Nominate someone to exercise these rights for you, and complain to us or to your data protection authority (in India, the Data Protection Board; in the UK, the ICO).
Email privacy@c7xai.in for anything here. We reply within 30 days.
If something goes wrong
If a breach affects your data, we tell you and the relevant authorities without undue delay, as the law in your country requires.
Changes and age
Winwall is for professionals aged 18 and over. If this notice changes in a way that matters, we'll ask you to agree again before you continue.