Wynter Privacy Policy

Last Updated date: Aug 26 2026

WYNTER PRIVACY POLICY

Wynter, Inc. ("Wynter," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information in connection with our platform, website, and services (collectively, the "Services"). It also explains the choices you have about how your information is used.

This Privacy Policy is incorporated into and forms part of our Terms and Conditions available at https://wynter.com/policies/wynter-app-terms-and-conditions.

Wynter, Inc.
901 S MoPac Expy
Barton Oaks Plaza 1
Suite 300
Austin, TX 78746, USA
support@wynter.com

1. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

  • Customers — businesses and their employees, contractors, and authorized users who sign up for and use Wynter to conduct research.
  • Panelists and Participants — individuals who join our B2B research panel, take surveys, or participate in interviews ("Participants").
  • Website Visitors — anyone who visits https://wynter.com or related pages.

Where our Customers use the Services to process personal information about their own end-users or research subjects, our Customers are the controllers of that information, and Wynter acts as a processor on their behalf. In those cases, the Customer's privacy policy governs.

2. INFORMATION WE COLLECT

2.1 Information you provide

Account Information. When you register, we collect your name, work email, company, job title, and password. For paid accounts, we collect billing information through our payment processor.

Customer Content. When you use the Services, you submit research materials (URLs, copy, images, survey questions, audience specifications, interview plans) and receive research results. We refer to this as "Customer Data."

Participant Information. Participants provide profile information during panel registration and verification, including name, work email, LinkedIn profile URL, company, job title, seniority level, industry, company size, and geographic location. Participants also submit responses, ratings, and recorded interview audio/video and transcripts during research sessions.

Communications. When you contact us, we keep a record of the correspondence.

2.2 Information we collect automatically

Usage Data. Pages viewed, features used, timestamps, referring URLs, and actions taken in the platform.

Device and Log Data. IP address, browser type and version, operating system, device identifiers, and approximate geo-location derived from IP.

Cookies and Similar Technologies. We use cookies and similar tracking technologies. See our Cookie Policy for details.

2.3 Information from third parties

We may receive information from payment processors, enrichment providers, LinkedIn (for Participant verification), and analytics providers.

3. HOW WE USE INFORMATION

We use the information described above for the following purposes:

3.1 To provide the Services

  • Authenticate accounts, process payments, and deliver platform features.
  • Match Participants to Customer research projects based on audience criteria.
  • Deliver research results to Customers.
  • Provide customer support.

3.2 To operate, secure, and improve the Services

  • Monitor performance, debug, prevent fraud and abuse, and maintain security.
  • Analyze usage to improve features and user experience.
  • Train, evaluate, and improve machine learning models, algorithms, and AI-powered features that are used to provide and enhance the Services.

3.3 Aggregated and de-identified data

We create Aggregated Data — data that has been anonymized, de-identified, or combined with data from other sources such that it does not identify any individual, Customer business, or proprietary content. We may use Aggregated Data for any lawful purpose, including operating and improving the Services, training AI and ML models, developing new products and features, publishing industry research, benchmarks, and reports, and commercializing such data and insights. Aggregated Data is not considered personal information under this Privacy Policy.

3.4 Communications

  • Send transactional messages (account notices, billing, research project updates).
  • Send product updates, newsletters, and marketing communications where permitted. You can opt out of marketing at any time using the unsubscribe link.

3.5 Legal and compliance

  • Comply with legal obligations, enforce our Terms, and protect the rights, property, and safety of Wynter, our users, and others.

4. AI AND MACHINE LEARNING

Wynter uses machine learning and AI as part of the Services — for example, to categorize responses, surface insights, generate summaries, and improve the platform over time. We want to be transparent about how this works:

  • What we use to train our models. We may use Customer Data, Participant Responses, and platform activity — in aggregated, de-identified, or pseudonymized form wherever reasonably possible — to train, evaluate, fine-tune, and improve the machine learning models, algorithms, and AI features that power the Services.
  • What we do not do. We do not sell personal information. We do not use Customer-identifiable proprietary content (such as a Customer's specific test materials, brand assets, or audience targeting) to train AI models that are made publicly available as standalone products outside the Services. We do not disclose Customer-identifiable proprietary content to other Customers or to third parties, except as described in Section 5 or with consent. We do not use the content of your interactions with third-party AI assistants connected to the Services to train our models.
  • Automated decisions. The Services do not make automated decisions that produce legal or similarly significant effects about you without human involvement.

5. HOW WE SHARE INFORMATION

We do not sell personal information. We share information only as described below:

Service providers and sub-processors. Hosting, analytics, payment processing, email delivery, transcription, AI/ML infrastructure, customer support tools,  and similar vendors that process information on our behalf under written agreements. A current list of sub-processors is available on request.

Customers (for Participant information only). Participants' responses and, where applicable, interview recordings and transcripts are delivered to the Customer that commissioned the research. Participants acknowledge this when joining a research session.

Third-party integrations you connect. Where you or your organization connects the Services to a third-party tool or AI assistant, we transmit data to that third party at your direction and under the permissions you approve. These providers are not Wynter's sub-processors and act under their own terms and privacy policies. See Section 6 (Integrations and AI Assistants).

Legal requirements. When required by law, regulation, legal process, or government request, or to protect the rights, safety, and property of Wynter, our users, or others.

Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality commitments and this Privacy Policy.

With consent. In other cases with your consent or at your direction.

6. INTEGRATIONS AND AI ASSISTANTS

Wynter offers integrations that let you connect the Services to third-party tools, including AI assistants that support the Model Context Protocol ("MCP"). These integrations are optional and are enabled only when you or your organization's administrator chooses to connect them.

How the connection works. When you connect Wynter to a third-party AI assistant, you authenticate through OAuth. Wynter issues an access token scoped to your own account and the permissions you approve at the time of connection. We do not receive or store your credentials for the third-party service. You can revoke the connection at any time from your Wynter account settings or from the third-party tool, which invalidates the token.

What the integration can access. A connected AI assistant can request the same data you can access in the Wynter platform, subject to the permissions granted at connection. This may include your account information, your research projects and their configuration, and the results of research you have commissioned. The integration does not expose data belonging to other Wynter customers, and does not expose Participant contact information.

What we log. We log which tools are invoked, timestamps, response status, and your account identifier. We do not store the content of your conversations with the AI assistant.

Where your data goes. Data returned through the integration is delivered to the third-party AI assistant you connected. Once it leaves the Services, that data is handled under the third party's own terms and privacy policy, not this one. The third party may store, process, or use it in ways Wynter does not control, including as part of your conversation history with that assistant. Review the provider's privacy policy before connecting. We are not responsible for the privacy or security practices of third-party AI providers.

Writes and actions. Some integration tools can create or modify data in your Wynter account, for example launching a test or updating a project. Actions taken through a connected assistant are attributed to your account and are treated the same as actions you take directly in the platform. You remain responsible for actions initiated through integrations you have authorized.

Your organization's control. Where your Wynter account is administered by an employer or other organization, that organization may permit or restrict which integrations are available, and may have visibility into integration usage.

7. LEGAL BASES FOR PROCESSING (EEA, UK, AND SWITZERLAND)

If you are in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:

  • Contract — to provide the Services you or your employer have requested.
  • Legitimate interests — to operate, secure, and improve the Services; to develop Aggregated Data and improve our AI/ML models; to communicate with you about the Services; and to protect our business, where these interests are not overridden by your rights.
  • Consent — for marketing communications where required, for certain cookies, and for other processing that requires consent. You may withdraw consent at any time.
  • Legal obligation — to comply with applicable law.

8. DATA RETENTION

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary:

  • Account information is retained while your account is active and for a reasonable period after closure.
  • Customer Data is retained per Customer's subscription and as needed for operational, security, and legal purposes.
  • Participant profile information is retained while the Participant remains in our panel, plus a reasonable period thereafter.
  • Interview recordings and transcripts are retained per the terms disclosed to Participants at the time of collection.
  • Aggregated Data may be retained indefinitely, as it does not identify you.
  • Integration activity logs, which record that a connected application made a request and the size of the response but not its contents, are retained for 15 days and deleted thereafter. Connection records, which record which member of your team authorised a connection, to which application, and when it was last used, are retained for the life of the connection and for 365 days after it is disconnected or expires, then deleted.

9. INTERNATIONAL DATA TRANSFERS

Wynter is based in the United States and processes information in the US and in other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers — including the European Commission's Standard Contractual Clauses and the UK Addendum — to protect personal information transferred out of the EEA, UK, or Switzerland.

10. YOUR RIGHTS

Depending on where you live, you may have the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to correct inaccurate or incomplete information.
  • Deletion — ask us to delete your information, subject to legal exceptions.
  • Portability — receive your information in a structured, machine-readable format.
  • Objection and restriction — object to or ask us to restrict certain processing.
  • Withdraw consent — where processing is based on consent.
  • Opt out of marketing — at any time via the unsubscribe link or by contacting us.
  • Complain to a regulator — if you believe we have violated applicable law.


To exercise these rights, contact support@wynter.com. We will respond within the time period required by applicable law. We may need to verify your identity before fulfilling the request.

If you are a Customer's end-user or research subject and wish to exercise rights over data that a Customer controls, please contact the Customer directly. We will assist Customers in responding to such requests.

11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have the rights listed in Section 10, and additionally:

  • Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
  • Right to delete personal information we have collected, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing. We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under the CPRA.
  • Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that trigger this right.
  • Right to non-discrimination for exercising your rights.

To exercise these rights, email support@wynter.com. You may also designate an authorized agent to make a request on your behalf.

12. SECURITY

We maintain technical, administrative, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and regular security reviews. No system is 100% secure; we cannot guarantee absolute security. More about our security practices is available at https://wynter.com/security.

13. CHILDREN'S DATA

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us at support@wynter.com and we will delete it.

14. THIRD-PARTY LINKS

Our Services may link to third-party websites and services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with your information.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-product notice at least thirty (30) days before the changes take effect (or a shorter period as required by law or to address security or legal concerns). Non-material changes are effective when posted.

Application to previously collected information. Updated terms of this Policy apply to information we collect, process, and maintain on and after the Effective Date, and — to the fullest extent permitted by applicable law — also apply to information we previously collected. This includes our ability to create and use Aggregated Data and to train, evaluate, and improve machine learning models and AI features as described in Sections 3 and 4. If you have concerns about how these terms apply to information you previously provided, contact us at support@wynter.com within thirty (30) days of the Last Updated date above, and we will review your request in good faith.

Your continued use of the Services after the Effective Date constitutes acceptance of the updated Policy.

16. DATA CONTROLLER AND CONTACT

Data Controller. Wynter, Inc.
Contact support@wynter.com
Mail: 901 S MoPac Expy, Barton Oaks Plaza 1, Suite 300, Austin, TX 78746, USA