Privacy Policy

Effective date: February 21, 2026

This policy is provided for informational purposes and does not constitute legal advice. Consult a qualified attorney for legal guidance specific to your situation.

1. Introduction

Wingman is operated by Kasovy LLC, a Wyoming (USA) limited liability company. This Privacy Policy describes how we collect, use, store, and protect your information when you use the Wingman platform ("the Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

  • Phone number — used for authentication and WhatsApp communication.
  • Business information — business name, description, and other details you provide to build your Site.
  • WhatsApp messages — messages you send to the Wingman agent, including text and media attachments.
  • Media files — images, documents, and other files you share via WhatsApp, stored on Cloudflare R2.
  • Site content — website code, text, and design elements generated for your Site.
  • Form submission data — data submitted by visitors to forms on your Site.
  • Billing information — payment details processed by Stripe. We do not store full credit card numbers on our servers.
  • Usage and analytics data — information about how you interact with the Service, including timestamps, feature usage, and error logs.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process your WhatsApp messages and generate Site content via AI
  • Manage your subscription and process payments
  • Send you service-related notifications via WhatsApp
  • Provide customer support
  • Monitor and prevent abuse or violations of our Terms of Service
  • Analyze usage patterns to improve the Service

4. AI & Automated Processing

Your WhatsApp messages and business information are processed by AI models (Anthropic's Claude, Google's Gemini, and OpenAI) to interpret your instructions and generate website content. This processing is automated — your messages are not reviewed by humans by default. AI-generated output is deployed to your Site only after the system processes your instructions. You should review all published content for accuracy.

5. Third-Party Services & Data Sharing

We share your information with the following third-party services solely to operate the Service:

  • Stripe — processes payments and stores billing information, subject to Stripe's Privacy Policy.
  • Cloudflare — hosts your Site (Pages), stores media files (R2), and provides edge computing (Workers) and CDN services.
  • WasenderAPI — facilitates WhatsApp messaging between you and the Wingman agent. This is an unofficial WhatsApp API not endorsed by Meta.
  • GitHub — stores your Site's source code in a dedicated repository managed by Wingman.
  • Anthropic — processes your messages through Claude AI models to generate website content and respond to your instructions.
  • Google — processes your messages through Gemini AI models for content generation and instruction handling.
  • OpenAI — processes your messages through OpenAI models for content generation and instruction handling.

We do not sell your personal information to third parties. We do not share your data with advertisers.

6. Data Storage & Security

Your account and business data is stored in a PostgreSQL database. Media files are stored on Cloudflare R2 object storage. All data is encrypted in transit using TLS. We implement industry-standard security measures to protect your information, including infrastructure-level protections provided by Cloudflare. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Conversation history with the Wingman agent is maintained in Cloudflare Durable Objects to preserve context for ongoing site management. After account deletion, we remove your data as described in Section 9. Some data may be retained as required by law or for legitimate business purposes (such as billing records).

8. Your Rights

You have the right to:

  • Access your personal data stored by the Service
  • Export your Site content and data
  • Delete your account and associated data (via account settings or by contacting us)
  • Correct inaccurate information by updating your profile or messaging the agent

To exercise any of these rights, use your account settings or contact us at [email protected].

9. Account Deletion

You may request account deletion through your account settings or by contacting us. Upon deletion:

  • Your account data and profile information will be permanently removed
  • Your Site's GitHub repository will be deleted
  • Your WhatsApp conversation history will be cleared
  • Media files stored on Cloudflare R2 will be deleted
  • Billing records may be retained as required by law
  • Cached content on edge networks may persist temporarily until cache expiration

10. Cookies & Tracking

Wingman uses session cookies to maintain your authenticated state when accessing the web dashboard. We do not use third-party advertising cookies or cross-site tracking technologies.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to remove it.

12. International Data

Wingman is operated from the United States and uses Cloudflare's global network for content delivery. If you are a Merchant located in the UAE or any other country outside the United States, your data may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Service, you consent to these transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via WhatsApp message or through a notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy, contact us at [email protected].