Privacy

Winsly is a private career tool, run by We Got Company LLC, which does business as Winsly AI (“Winsly”, “we”). This page says what it keeps about you, why, who helps run it and can see it, what goes public, and how you take your data with you or delete it.

What Winsly keeps

• Your account: your email address, your name, your sign-in sessions, and the apps you connect (Claude, ChatGPT) with when each was last used. If you sign in with Google or LinkedIn, also the ID of that account and the address of the photo it shares, but no access to the account itself.
• What you give it: resumes, LinkedIn exports, reviews and links you upload; the facts, wins, proof and stories in your profile; your goals; the people you add; and your conversations with your advisor.
• What it makes for you: scored roles, applications, resume versions, your next-level bar and review case, and what your advisor remembers (which you can see and edit at Advisor → Memory).
• Meetings you bring in (Add a meeting, or from a connected assistant): the cards you save, each with the line of the meeting it came from, and what you agreed. The transcript itself isn’t kept: Winsly reads it once and keeps only a fingerprint of it, so the same meeting isn’t read twice. A read you don’t save is deleted after 14 days.
• How you use it: notifications and whether they were opened, your plan and what you’ve used of it, and basic records of each request so problems can be fixed.
• How you found Winsly: the site that sent you (a search engine, an assistant, a post), the first page you opened, and any campaign tags in the link, kept with your account when you sign up. And if you choose a paid plan before it opens, whether you asked to hear when it does.
• Feedback you send: your message, a screenshot of the screen you were on (unless you leave it out), and the app’s recent activity (pages opened, clicks, errors and requests) so the problem can be found.

How it’s used

Only to run Winsly for you: to find and score roles, write applications, keep your record of wins, and give your advisor the context it needs. Winsly doesn’t sell your data, doesn’t show you ads, and never sends anything you haven’t seen and sent yourself. It emails you about a paid plan only if you asked to hear when it opens. Where people come from is counted only to see which sites send people to Winsly. The only email it sends to someone else is a request you wrote to: asking someone to verify a win or write a reference, sent when you press Send, after you’ve seen the exact email.

Who helps run it

• Cloudflare hosts Winsly and stores its data and files, and sends its email.
• Anthropic provides the AI that reads your materials, scores roles, writes drafts and powers your advisor. What’s needed for each task is sent to Anthropic’s API, which doesn’t use it to train its models.
• Public job boards and company career pages are read to find roles. Nothing about you is sent to them.
• Google and LinkedIn, only if you sign in with them. They tell Winsly your name, email address and photo when you sign in. Winsly asks for nothing else, can’t read or post anything there, and keeps no key to your account. Disconnect either one in Settings → Account → Sign-in methods.
• Assistants you connect. If you connect Claude or ChatGPT in Settings → Connected apps, it can read what you allowed (your wins, next-level bar, review case, profile and roles), log wins you ask it to, and send a meeting you share for Winsly to read, saving the cards you confirm. What it reads goes to that company under your own agreement with them. Disconnect it any time.

Who at Winsly can see it

• Winsly’s admins can see your account details (email, plan and usage), feedback you send, and the emails and notifications Winsly sent you.
• To fix a problem, an admin can sign in to your account as you, without an admin’s rights while they do. Each time is recorded.

Public pages

• A page you publish is public at its own address. It shows only what you choose and what passes Winsly’s checks: never your phone number, your email only if you choose, and an employer you keep private only by its description.
• A proof file goes on a page only if you choose “Show the proof file” for that win. The page keeps its own copy, deleted when you remove the win or delete the page.
• Pages are hidden from search engines unless you turn that on. Unpublishing takes a page offline; deleting it deletes its files. A page’s address is never given to anyone else.
• Sites that show link previews (Slack, LinkedIn, messages) keep their own copy of a page’s preview image.
• If you write to someone through their page, your name, email and message go to them in Winsly. Views are counted without cookies and without keeping IP addresses.

People you ask

When you ask someone to verify a win or write a reference, Winsly emails them the request you saw, from “your name via Winsly”, with replies going to you. Here’s what Winsly keeps about them, and what they can do:

• Their name and how they know your work, as you entered them, and the person in your References.
• Their email address, until the request’s link expires (30 days). After that, Winsly keeps only a one-way hash of it: enough to honor “Don’t email me again” and to count whether a request led to an account, not enough to email them.
• Their answer: that your win is right, a fix they suggested, that they can’t speak to it, or the reference they wrote, and how they chose their name to show. It becomes part of your record, shown where you use it (“Verified by Priya N., peer”).
• Whether they opened the link, answered and signed up, so Winsly can tell whether requests work.
• They can stop all of it in one click. Every request carries “Don’t email me again”; after that, nobody can send them a request through Winsly. Their link changes or withdraws their answer until it expires.
• If their address already has a Winsly account, the request also shows up in their Winsly.

Your choices

• Export your profile any time from Settings → Account.
• Remove a file you imported from You → Resume → Imported files. The file is deleted; what Winsly already added to your profile from it stays until you remove it.
• Delete your account from Settings → Account. Everything in it — your profile, wins, goals, roles, applications, advisor history, files and pages — is deleted right away. Kept: cost records with no link to you, and your pages’ addresses (which can include your name), retired so an old link never shows someone else. Cloudflare’s database keeps a 30-day restore history, so deleted data leaves it within 30 days.
• Choose which notifications you get, and how, in Settings → Notifications.
• Disconnect an assistant you connected in Settings → Connected apps.
• Mark anything in your profile as private, so it never appears in an application.

Cookies

Winsly uses one cookie to keep you signed in. While you sign in with Google or LinkedIn, a second one lasts 5 minutes, so the sign-in comes back to the browser that started it.

The first time you open a page on winsly.ai, a third one remembers how you got there: the site that sent you, the first page, and any campaign tags. It’s Winsly’s own, lasts 90 days, and is read only by Winsly, to know where the people who sign up come from. It isn’t set if your browser sends Global Privacy Control, or if you’re in the EU, the EEA, the UK or Switzerland. There are no advertising cookies, and nothing from other companies tracks you here.

Questions

Write to support@winsly.ai. If this page changes in a way that matters, Winsly will tell you in the app first.