Winny (getwinny.com) is operated by Smarthi LLC. For questions about this policy, email pavan@getwinny.com.
Winny is a Model Context Protocol (MCP) server. You connect it to an AI client you already use, and that client — not Winny — handles your conversations. This policy covers only the data Winny itself stores.
What data we collect
Account info: Name, email, and profile picture from Google OAuth. Used for authentication and to identify your account.
Career data: Work experiences, bullet points, education, certifications, skills, summary fragments, notes, and career goals. This reaches Winny only when your AI client calls a Winny tool on your behalf.
Generated resumes: Tailored resumes created through the MCP tools, stored so the viewer link and PDF download work.
Purchase status: Whether your account has been unlocked, and the date your trial began. Stored against your email address. We never see or store your card number — Stripe handles payment entirely.
What we do NOT collect
No cookies, trackers, or analytics pixels
No browsing behavior or device fingerprinting
No IP address logging beyond standard Cloudflare infrastructure
No conversation history — your chats stay with your AI provider and never reach Winny
How your data is stored
Your career profile is stored in an isolated Cloudflare Durable Object tied to your Google account. No other user — and no admin — can access your data. It is encrypted at rest and in transit.
Stripe: Processes the one-time unlock payment. Your card details go directly to Stripe and never touch Winny's servers. See Stripe's privacy policy.
Your AI client: Whichever MCP client you connect (Claude, or another) sends tool calls to Winny and receives the results. Your conversation with that client is governed by that provider's privacy policy, not this one.
Data sharing
Your data is never sold. Your profile is never shared with employers, recruiters, or any third party without your explicit permission. If we ever introduce features that connect you with companies, you will choose to opt in. It will never happen without your knowledge.
AI training
Winny never uses your data to train AI models. We do not fine-tune, distill, or otherwise use your career data for model development. Whether your AI client trains on your conversations is governed by that provider's terms — check them if it matters to you.
Your rights
Export: Ask Winny "export my profile" to get a full JSON export of all your career data.
Delete: Individual items (experiences, bullets) are soft-deleted first, so you can undo. Ask Winny "delete all my data" for a full reset — a one-time backup is kept in your isolated storage in case you change your mind, then cleared on subsequent resets.
Access: Ask Winny to show your profile at any time through your AI client.
Correction: Ask Winny to update or delete any item through your AI client.
For data requests that can't be handled in-app, email pavan@getwinny.com.
Data retention
Career profile: Stored until you delete it or delete your account.
Generated resumes: Stored for 90 days in shared storage (so viewer links keep working), and permanently in your Durable Object until you delete them.
Purchase status: Retained for as long as your account exists, so your unlock is never lost. It deliberately survives a full profile reset — otherwise clearing your data would destroy something you paid for.
Payment records: Retained by Stripe per their retention policy.
Children
Winny is not intended for users under 16. We do not knowingly collect data from minors.
Changes to this policy
If this policy changes, the updated version will be posted here with a new date. Material changes will be communicated by email where I have an address for you.