Privacy Policy

AI Sales Brain processes meeting recordings, work documents, and account data to produce call outcomes and answer employees from company knowledge.

Access and company separation

Each company operates in a separate tenant boundary. Employees sign in by invitation, email code, password, or Google. Company OWNER and ADMIN roles can see all company calls; ordinary employees see company calls and their own private calls.

Information we process

We process account and company membership data, meeting recordings and transcripts, generated outcomes, tasks, follow-ups, uploaded documents, employee questions, and technical logs. Zoom and Telegram provide data only after the corresponding integration is connected.

How we use the information

We use data for authentication, meeting capture and processing, result generation, search over authorised material, and company-knowledge answers. We do not sell data or use it for advertising. Required excerpts may be sent to infrastructure and AI providers listed in the Data Processing terms.

Limited Use disclosure

AI Sales Brain’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google API Services User Data Policy

Google Calendar data

Google Calendar is connected separately and only after the user gives explicit consent. We request only free/busy information to calculate availability and access to events in calendars the user owns to create, update, and remove user-managed meetings. We do not request Gmail, Drive, attachments, or broad calendar read access.

Use, access, and transfer of Google data

Google Calendar data is used only by the scheduling and employee-coordination subsystem to calculate availability and manage events at the user’s direction. Raw, aggregated, anonymized, and derived Google Calendar data is not transferred to external AI/ML providers or local AI models, is not included in AI prompts, and is not used to create, train, or improve AI/ML models. Free/busy results are processed only within AI Sales Brain infrastructure at Hetzner. We do not sell Google data or use it for advertising or lending. Personnel do not view Google data unless the user explicitly requests support, access is required for a security investigation, or disclosure is required by law.

Google data retention and deletion

OAuth tokens are encrypted at rest and retained until the integration is disconnected. Free/busy results are processed transiently and are not retained as a copy of the calendar. Identifiers for app-created events are retained only to synchronize or remove those events. Disconnecting Google Calendar revokes access and deletes stored tokens; related data is also deleted when the account is deleted. Step-by-step instructions are available on the Google Calendar management page. Manage and delete Google Calendar data

Internet search

The employee knowledge agent answers only from company material. Internet search is disabled when the company knowledge base does not contain an answer.

Data retention & storage

The application, database, semantic index, recordings, and files are hosted at Hetzner HEL1 in Helsinki, Finland. Processing locations, AI providers, storage limitations, and deletion periods are listed in the Data Processing terms.

Security

Data is transmitted over TLS. Integration secrets are encrypted. Access is checked against active company membership and the user role.

Your data rights

Depending on applicable law, you may request access, correction, export, restriction, or deletion of your personal data and withdraw consent for an optional integration. Send the request from the relevant account email to info@wiin.agency. To protect the data, we may require identity and tenant-authority verification.

Contact

Questions or data requests: info@wiin.agency.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.