Winnow Career Concierge ("we", "our", "us") operates the Winnow platform at winnowcc.ai and our mobile app. This policy explains what data we collect, why we collect it, and how we protect it.
Information We Collect
Account information: Your name, email address, and password when you register.
Resume & profile data: Resume files you upload (PDF/DOCX) and the professional data extracted from them — work experience, education, skills, and contact details.
Job preferences: Target roles, preferred locations, salary expectations, and remote work preferences.
Usage data: Pages visited, features used, and interaction patterns — used to improve the platform.
Phone number: If you opt in to SMS notifications, we collect your mobile phone number.
Device information: Device type, OS, and app version for troubleshooting.
How We Use Your Information
- Match you with relevant job opportunities using our AI scoring engine
- Generate tailored, ATS-optimized resumes and cover letters
- Provide Interview Probability Scores and dashboard analytics
- Improve our matching algorithms and platform quality
- Send transactional emails (job alerts, account notices) — never spam
- Send SMS/text messages about job matches and application updates (only if you opt in)
SMS / Text Messaging
Winnow offers an optional SMS notification program called Winnow Job Alerts & Application Updates. By opting in, you consent to receive automated text messages about new job matches, application status updates, career alerts, and account security notifications at the mobile phone number you provide.
Opt-in: You may opt in to SMS notifications from your Account Settings page or the SMS Consent page. Consent is not a condition of purchasing any goods or services from Winnow.
Message frequency: Message frequency varies. You may receive up to 10 messages per week depending on job matching activity. Some weeks you may receive fewer or no messages.
Message and data rates may apply. Check with your mobile carrier for details about your text messaging plan.
Opt-out: Reply STOP to any message to stop receiving texts. You will receive a one-time confirmation and no further messages will be sent. You can also disable SMS notifications in your Account Settings.
Help: Reply HELP to any message for assistance, or email support@winnowcc.ai.
Data handling: Your phone number is stored securely and used solely for delivering SMS notifications you have consented to. We do not sell, rent, or share your phone number or SMS opt-in consent with third parties for promotional or marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We may share your phone number and SMS consent status only with third-party service providers that assist us in delivering messages (such as our messaging platform provider, Telnyx, and telecommunications carriers) and only for the purpose of transmitting messages on our behalf. See Third-Party Services below.
Supported carriers include AT&T, T-Mobile, Verizon, and others. Carriers are not liable for delayed or undelivered messages. For full SMS terms, see our SMS Messaging Terms & Consent page.
Data Storage & Security
Your data is stored on Google Cloud Platform with encryption at rest (AES-256) and in transit (TLS 1.2+). Resume files are stored in Google Cloud Storage with restricted access controls. We never log raw resume text in application logs.
Winnow does not store credit card numbers or payment credentials. All payment processing is handled by Stripe, a PCI DSS Level 1 certified processor. Card data never touches Winnow's servers.
Third-Party Services
| Service | Purpose | Privacy / DPA |
|---|---|---|
| Anthropic (Claude AI) | Resume parsing, job matching, and resume generation | View |
| Stripe | Payment processing — we never store card details | View |
| Auth0 | Secure authentication and OAuth login | View |
| Google Cloud Platform | Infrastructure, storage, and compute | View |
| Sentry | Error tracking — personal data is scrubbed | View |
| PostHog | Anonymous product analytics | View |
| Telnyx | SMS / text message delivery (opt-in only) | View |
Data Retention & Deletion
Your data is retained while your account is active. You may export all your data or permanently delete your account at any time from Settings → Account. Account deletion removes all stored data — resumes, profiles, matches, and generated content — within 30 days.
Your Rights
You have the right to access your data (via data export), correct it (via profile editing), delete it (via account deletion), and opt out of analytics tracking. California residents may have additional rights under CCPA. EU residents may have rights under GDPR. Contact us to exercise any of these rights.
To opt out of analytics tracking, reject non-essential cookies via the cookie consent banner on your first visit. You can also enable your browser's Do Not Track setting or clear your cookies from Settings. PostHog respects the Do Not Track header when enabled.
California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:
- Right to Know: You may request details about the categories and specific pieces of personal information we collect.
- Right to Delete: You may request deletion of your personal information (available via Settings > Delete Account).
- Right to Opt-Out of Sale: Winnow does not sell your personal information to third parties. We do not share personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise these rights, email hello@winnowcc.ai with the subject line "CCPA Request" or use the data export and account deletion features in your Settings.
Children's Privacy
Winnow is not intended for users under 16. We do not knowingly collect data from minors. If you believe a minor has provided us data, please contact us immediately.
Changes to This Policy
We may update this policy as the platform evolves. When we make material changes, we'll notify you by email or an in-app notice. The "Last updated" date at the top will always reflect the current version.