Wino Account Privacy Policy

Your account connects your settings and purchases. Optional Wino Intelligence processes mail only with your permission.

Version 2026-10-04 · Last updated October 4, 2026

Who is responsible

Burak Kaan Köse operates Wino and is responsible for the personal data described here. For privacy questions or requests, email wino@bkaan.dev. This policy covers Wino Account, the account website, and Wino Intelligence. The Wino Mail Privacy Policy covers the mail app and Google user data.

Your account data

We process your email address, sign-in and security records, settings you sync, connected mailbox details, purchases, subscription status, and Intelligence permissions and usage. This information comes from you, your Wino app, and payment providers. We use it to run your account, sync settings, deliver purchases, provide support, and protect the service. We do not sell your data or use it for advertising.

Wino Intelligence is optional

Creating an account or buying Intelligence does not give permission to process your mail. You choose whether to enable Intelligence. Permission applies to your whole Wino Account, not to individual mailboxes. In Wino Mail you can also choose which mailboxes are sent for processing. You can withdraw permission in Wino Mail or your account dashboard at any time. Ordinary mail features keep working without Intelligence.

How Intelligence handles mail

Intelligence uses only the message content needed for the features you enable or request. Attachments, mailbox passwords, and mail-provider access tokens are not sent for AI processing.

Mail sent for processing is encrypted during transfer and while stored. Wino decrypts it temporarily to perform the requested processing with its AI providers. Encrypted uploads are removed when the job finishes. All AI calls use Zero Data Retention (ZDR), with training disabled: providers do not retain the content of those calls or use it to train models.

Completed Intelligence results are encrypted for your device. Wino servers cannot decrypt those stored results. We keep them only so your device can download them, for up to 24 hours after the job finishes, and delete them earlier once the app confirms receipt. We do not read or reuse stored results for promotion, advertising, training, or any other purpose.

Your choices and data retention

You can withdraw Intelligence permission for your account from Wino Mail or your account dashboard. Withdrawing permission stops further processing for all of your mailboxes and starts deletion of your Intelligence data held by Wino. In Wino Mail you can also stop processing for an individual mailbox. It does not change the lawfulness of processing that happened before withdrawal. Downloaded results remain on your device until removed through the app.

We keep account data while it is needed to provide your account. Email us to request account deletion. We retain only records still needed for legal obligations, billing disputes, or security, for as long as those purposes require. The separate 24-hour limit above applies to completed Intelligence results.

Why we may process data

We process account and purchase information to provide the service you request (performance of a contract). We rely on your consent for optional Intelligence processing, legal obligations for required financial records, and our legitimate interest in preventing fraud and keeping the service secure. Account details are needed to create and operate an account; Intelligence permission is optional.

Service providers and cookies

We use providers for hosting, account emails, payments, and AI processing. They receive the information needed for those services. We may also disclose information where required by law. Some providers may process data outside the European Economic Area. Contact us for details about the providers, processing locations, and safeguards for international transfers.

We use Microsoft Azure Translator for text translation and Vercel AI Gateway to route AI requests to model providers. These services also apply their own privacy terms. See the Microsoft Privacy Statement and Vercel Privacy Notice.

The account website uses cookies to keep you signed in and manage email confirmation. It also remembers your theme choice in your browser. These functions support the website and your preferences.

Your privacy rights

Where GDPR applies, you can request access to your data, correction, deletion, a portable copy, or a restriction on processing. You can also object to processing based on legitimate interests and withdraw consent. Email wino@bkaan.dev to exercise these rights. We may need to verify your identity. We respond within one month; if a lawful extension is needed, we will explain why within that month. You can complain to the data protection authority where you live or work. Intelligence helps organize your mail; we do not use it to make decisions about you with legal or similarly significant effects.

Changes

We will update this page when our practices change and give notice of material changes. If a change requires new consent for Intelligence, we will ask for it before that processing starts.