Privacy Policy

Who we are

Winfolio FZE is a private company registered in the United Arab Emirates. For privacy questions, contact privacy@winfolio.com.

What we collect

• ·Contact details you submit through the brief form (name, email, company, project description).
• ·Account credentials and activity if you use our client portal (email, hashed password, sign-in timestamps, IP address, user-agent).
• ·Basic analytics about how the public site is used (pages viewed, referrer, country) — aggregated and never tied to a named visitor.

Why we collect it

To respond to briefs, to operate your sprint and the systems we build for you, to send transactional emails (quotes, invoices, agreements, notifications), and to keep the service secure and lawful.

Legal basis

We process personal data on the basis of (a) the contract we have with you, (b) our legitimate interest in operating and improving the service, and (c) your consent where required — for example for non-essential cookies.

Sharing

We never sell personal data. We share data only with the processors needed to run the service: Supabase (database, auth), Cloudflare (hosting, CDN), Stripe (payments), Resend (email delivery). Each is bound by its own data processing terms.

Retention

Brief submissions are retained for up to 24 months. Client account data is retained for the life of the engagement and for up to 7 years afterwards for tax and audit purposes. You may request earlier deletion at any time.

Your rights

You may request access to, correction of, or deletion of your personal data. Email privacy@winfolio.com and we will respond within 30 days.

International transfers

Data may be processed in the EU, UK, US, and UAE depending on the processor. We rely on standard contractual clauses or equivalent safeguards.

Changes

If we make material changes to this policy we will update the date above and, for active clients, notify you by email.