Privacy Policy

• Sample requests. When you request the free sample we collect your email, and optionally your name, company, and website.
• Orders. When you buy a report, payment is handled by Stripe. We receive order metadata (tier, amount, email) but not your full card number.
• Correspondence. If you email us, we keep that correspondence to answer you.
• Usage data. If you consent to analytics, we collect aggregate usage data through Google Analytics 4 (see section 2).

We use Google Analytics 4 to understand which pages convert. Analytics cookies and the GA script load only after you consent through the cookie banner. If you decline, no analytics cookies are set and the GA script does not run. You can change your choice at any time by clearing the consent and reloading.

GA4 collects information such as a truncated IP address, pages viewed, approximate location, device and browser type, and referral source. We do not use this data to identify you personally. Google processes this data as a service provider; see Google’s own privacy resources for details.

• to send the free sample you requested (a single email, no marketing sequence unless you opt in);
• to fulfil and deliver reports you order, and to support you;
• to respond to your messages;
• with consent, to measure and improve the site.

Where GDPR applies, we rely on: performance of a contract (to deliver reports you order), consent (for analytics and any marketing email), and legitimate interest (to answer enquiries and secure the site).

We use a small set of processors and do not sell your data. They are:

• Stripe, payment processing;
• Resend, transactional email delivery;
• Google Analytics, site analytics (with consent);
• Amazon Web Services, hosting and file storage.

Winnow cites content that people have posted publicly on Reddit. We reproduce short verbatim quotes for the purpose of citation and commentary, alongside a link to the original public post. We may show a public username as it appears on the source post.

We do not, and the report must not be used to:

• deanonymize, dox, or attempt to identify the real-world identity of any poster;
• enrich, append, or cross-reference a poster against other personal data;
• contact a poster in a way that violates Reddit’s rules or applicable law.

Takedown. If you are the author of a quoted post and want it removed from current and future issues, email editor@winnowhq.com with the source link. We will remove it from materials we control within 7 business days and confirm when done.

We keep order records as long as needed for tax and accounting obligations. Sample-request emails are kept until you ask us to delete them or they are no longer useful. Analytics data is retained for the period configured in GA4, currently 14 months.

Depending on where you live (for example under GDPR or CCPA) you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email editor@winnowhq.com. We do not sell personal information.

We use reputable processors and reasonable technical measures to protect data in transit and at rest. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Our processors may store and process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the processors’ standard contractual clauses.

The Service is for business users and is not directed to anyone under 16. We do not knowingly collect data from children.

We may update this policy; the “Last updated” date reflects the latest version. Questions or requests: editor@winnowhq.com. Data controller: Ayomide Emmanuel Olabisi trading as Winnow Research.