Privacy Policy

Information that we may collect includes, but is not limited to: (i) name, address, email and phone number; (ii) payment information; and (iii) usage information pertaining to your use of the Services.

We may collect your Personal Information for the following purposes (the “Purposes”): (i) to provide the Services; (ii) to conduct internal reviews and improvements relating to the Services; (iii) to keep a record for legal purposes; and (iv) to carry out any other purpose which is disclosed to you and for which you consent, or is otherwise permitted by applicable law.

We may collect Information from you, and any devices you use, through: (i) your access and use of the Services; (ii) our use of cookies and similar technologies to track and analyze user activity; and (iii) our use of web analytics services. We may also collect Information from third parties. We will protect any Personal Information we receive according to the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the Personal Information and applicable laws. We only collect and use Personal Information to the extent necessary to fulfill the Purposes.

We may disclose Personal Information as follows: (i) to third-party service providers in order to help us fulfill the Purposes (e.g., payment processors, web analytics services); (ii) to affiliates or third parties in the event of a proposed reorganization, merger, transfer or other disposition of all or any portion of our business, assets or equity, subject in each case to customary confidentiality agreements; and (iii) to the extent disclosure is required or permitted by applicable law.

We only disclose Personal Information to the extent necessary to fulfill the Purposes. We take reasonable measures to ensure that the rules set forth in this Privacy Policy are complied with when we disclose Personal Information to third parties. This may include, without limitation, obtaining contractual guarantees from third parties to implement appropriate technical and organizational measures in accordance with applicable law. Personal Information may be stored and processed in any country where we have facilities or in which we engage third party service providers. By using our Services, and/or otherwise providing us your Personal Information, you consent to the transfer of your Personal Information to countries outside of your country of residence. While such information is outside of Canada it is subject to the laws of the country in which it is held, which may have different Personal Information protection laws, and may be subject to disclosure to the governments, courts, law enforcement or regulatory agencies of such other country. However, our practices regarding your Personal Information will at all times continue to be governed by this Privacy Policy.

When a business connects its account we receive: the account’s ID, username, name, profile picture, biography, website, follower and following counts; its posts and their captions, pictures, likes and comments; account insights (for example reach, views and interactions); comments and messages sent to the account; and an access token that lets us act for the account.

We use this data only to provide the features the business asked for: publishing the posts it approves, showing its insights and posts in its WingZ dashboard, and reading and replying to its comments and messages. We do not sell it, we do not use it for advertising, and we do not share it except with service providers who host our systems, and as required by law.

The access token is stored encrypted on our servers and is never shown in a browser. We keep the connection only while the account stays connected. Disconnecting the account in WingZ, or removing WingZ from the account’s Instagram settings, deletes the token straight away.

To have your Instagram data deleted, follow the steps on our Data Deletion page or email hossein@wingz.ai. We handle this data in line with the Meta Platform Terms and Developer Policies.

When you sign in with Google, we receive your name, email address, and profile picture. When a business connects its Google Calendar, we receive access to view and edit events on its calendars, including event times, titles, descriptions, locations, and attendees, and an access token that lets us act for the account.

We use this data only to provide the features the business asked for: finding open time slots so appointments are not double booked, and creating, updating, and cancelling appointments on the business’s calendar when its customers book, reschedule, or cancel through WingZ. We do not sell Google user data, we do not use it for advertising, and we do not use it to train artificial intelligence or machine learning models. Humans at WingZ do not read this data unless the business gives us permission to help with a support request, it is needed for security or to comply with the law, or it has been anonymized for internal operations.

We do not share Google user data with third parties except with service providers who host our systems and only as needed to provide WingZ, and as required by law.

Access tokens are stored encrypted on our servers and are never shown in a browser. We keep only the calendar information needed to provide the booking features, and we keep the connection only while the calendar stays connected. Disconnecting Google Calendar in WingZ, or removing WingZ from your Google Account at https://myaccount.google.com/permissions, stops our access and deletes the token straight away.

To have your Google data deleted, email hossein@wingz.ai and we will delete it within 30 days.

WingZ’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.