Privacy Policy & Data Security
Last Updated: September 30, 2026 · Effective Date: September 30, 2026
At WinStash ("we", "our", or "the Service"), we believe your professional accomplishments and workplace records belong exclusively to you. This Privacy Policy details our unwavering commitment to confidential data isolation, our strict zero-training policy, and how you retain total ownership over your data.
1. Zero AI Model Training Guarantee (Strict No-Training Policy)
Your raw notes and career transformations are NEVER used to train public or proprietary AI models.
- All AI synthesis requests are processed via stateless enterprise API agreements (Google Cloud Vertex / Gemini Enterprise API).
- Neither WinStash nor our foundational LLM providers retain your prompts or completion outputs for machine learning model training or algorithmic tuning.
- Your company's proprietary projects, internal metrics, and code references remain confidential to your private workspace.
2. Information We Collect and Process
We adhere strictly to the principle of data minimization. We only collect information essential for service delivery:
Email address, full name, and avatar URL provided via secure Google OAuth authentication. We never store or access your Google password.
Raw weekly brain-dump notes and synthesized outputs (Weekly Snippets, Brag Sheet Items, and STAR Portfolio stories) you choose to save.
3. Security Architecture & Data Retention
Your data is hosted in high-availability Google Cloud Platform (GCP) infrastructure protected by industry-standard security protocols:
4. Anonymous Career Benchmarking (Opt-In Policy)
WinStash may offer anonymized industry benchmark insights (e.g. median project impact velocity across Staff Engineers). Participation in aggregate benchmarking is strictly opt-in (Default: Disabled / False):
- No personal identifiers (names, emails, company names, or dates) are ever included in benchmarks.
- Only non-identifiable, aggregated classification counts (e.g. "Efficiency" vs "Revenue") are processed.
- You may toggle your participation status anytime within your account settings.
5. Your Rights: 1-Click Export and Permanent Deletion
Under global data protection regulations (including GDPR, CCPA, and Korean PIPA), you retain complete sovereignty over your data:
- 1-Click Backup Export: You can download a complete, readable JSON copy of all your weekly notes, brag sheets, and STAR portfolio cards anytime from the Settings menu.
- Permanent Account Purge: You may permanently delete individual records directly inside the app, or request a complete wipe of your user profile, backups, and credentials by emailing our data privacy desk.
6. AI-Generated Output & Professional Disclaimer
WinStash leverages advanced Large Language Models (LLMs) to synthesize raw notes into structured professional artifacts (Weekly Snippets, XYZ Brag Documents, and STAR Case Studies). By using the Service, you acknowledge and agree to the following terms:
- Reference and Draft Purposes Only: All AI-generated suggestions, summaries, and metrics are intended exclusively as drafts for personal review and reference. They do not constitute certified career coaching, legal advice, or official employment verification.
- No Guarantee of Factual Accuracy: While our algorithms strive for high fidelity, AI models may occasionally misinterpret nuance or extrapolate quantitative figures. WinStash does not warrant or guarantee the complete factual accuracy or veracity of synthesized output.
- User Responsibility to Verify: You retain sole responsibility for reviewing, fact-checking, and editing all synthesized content before submitting it to managers, promotion committees, recruiters, or public platforms such as LinkedIn.
7. Contact Us & Data Requests
If you have questions, feedback, or wish to submit a data erasure or access request, please reach out directly to our team: