Privacy Policy

This policy explains how the operator of Wyndos ("Wyndos", "we") uses personal data. Contact: support@wyndos.io.

Two kinds of data

• Your account details (business owners and team members). Wyndos decides how this is used, so we are the controller. This policy covers it.
• Your customers' details that you add to Wyndos. The business using Wyndos is the controller and we only process it for them, under the data processing terms in our Terms of Service. If you are a customer of a window cleaner who uses Wyndos, please contact them about your details. We will pass on any request we receive.

What we collect about account holders

• Name, email, password (stored only as a secure hash), business name, phone, address and website.
• What you tell us at sign-up (rough number of customers, team size, how you take payment, how you heard about us).
• Billing details: Stripe holds your card details. We only see the subscription status and the last few digits.
• Support messages and attachments you send us.
• Security records: sign-ins, support access logs and server logs (including IP addresses).

Why we use it (and the legal basis)

• To provide your account and the service, and to bill you (contract).
• To keep Wyndos secure, fix problems, answer support and improve the service (legitimate interests).
• To keep tax and accounting records (legal obligation).

We send service emails only: sign-up, password reset, receipts, important changes and the notifications you choose in your account. We don't send marketing emails, we don't use advertising or tracking cookies, and we never sell personal data.If we ever want to send marketing, we will ask first.

Who we share it with

Only the companies that help us run Wyndos, under contracts that protect the data:

We may also share data if the law requires it. Where data leaves the UK, we rely on UK adequacy rules or approved contract terms.

How long we keep it

• Account and business data: while your account is open. When you close it, it is deleted straight away and drops out of backups within 35 days.
• Billing records: 6 years, as tax law requires.
• Support messages: up to 2 years after the issue is closed.
• Server and security logs: up to 90 days.

Bank statements

When you match payments from a bank statement, the file is read on your own device. It is never uploaded to or stored by Wyndos. Only the payments you confirm are recorded, as payments against your customers.

Your rights

You can ask to see, correct or delete your data, to restrict or object to how we use it, or to get a copy to take elsewhere. Email support@wyndos.io. We will reply within one month. You can also complain to the ICO: ico.org.uk/make-a-complaint.

Security

Data is sent over encrypted connections, passwords are hashed, sensitive settings are encrypted, access is limited and logged, and backups are kept off the main server. No system is perfectly secure; if something goes wrong we will act quickly and tell the people affected as the law requires.

Cookies

We only use cookies needed to sign you in and keep you secure. See our Cookie Policy.

Changes

If we change this policy in a way that matters, we will tell account holders before it applies.