Privacy Policy

Last updated: April 2026

1. What we collect

We collect your email address, the pipeline data you enter (opportunities, contacts, notes), and basic usage logs (pages visited, actions taken). We do not collect payment card numbers — all billing is handled by Stripe.

2. How we use it

We use your data solely to provide the WinPath service. We never sell your data to third parties, use it for advertising, or share it with anyone except the service providers listed below.

3. Data storage

Your data is stored securely on Supabase (PostgreSQL) with row-level security enabled on every table. This means only you — and teammates you explicitly invite — can access your pipeline data. Supabase infrastructure is hosted on AWS in the US East region.

4. AI processing

RFP text and documents you submit for AI analysis are sent to Anthropic's API for processing. We do not train models on your data. Anthropic's privacy policy governs their handling of API inputs. We recommend removing sensitive personally identifiable information from RFP text before submitting for analysis.

5. Cookies

We use session cookies for authentication only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You cannot opt out of session cookies as they are required for the app to function.

6. Your rights

You can delete your account and all associated data at any time from the Settings page. Deletion is permanent and immediate. You can also contact us to request a data export.

7. Contact

Questions about this privacy policy? Email us at support@winpathgov.com