Legal · Privacy

Privacy Policy

A transparent overview of the personal data WinProducts uses to deliver secure product and creator intelligence.

Current versionEffective August 11, 2026Last updated August 11, 2026
01

Scope and controller

This Privacy Policy explains how WinProducts (“WinProducts”, “we”, “us”) handles personal data when you visit winproducts.io, create an account, use product intelligence features, contact support, or purchase a subscription.

WinProducts is operated by Burkisoy Enterprises LLC, a New Mexico limited liability company. Burkisoy Enterprises LLC is the controller for the account and service-use data described here. For privacy requests, email winproductsio@gmail.com with “Privacy” in the subject line.

02

Data we collect

Account and identity data

Your email address, display name, profile image or avatar settings, authentication provider, account identifiers, sign-in timestamps, and account preferences. If you use Google sign-in, Google sends us the profile information you authorize; we do not receive your Google password.

Usage and research activity

Searches, filters, saved products and videos, viewed records, feature interactions, credit usage, generated analyses, and operational events needed to provide, secure, and improve the Service.

Device, network, and security data

IP address, browser and device information, request timestamps, cookie or local-storage identifiers, security challenge results, and diagnostic logs. We use this data to protect accounts, prevent abuse, and maintain reliability.

Billing and support data

Subscription status, plan, invoice and transaction references, billing country, and support messages. Card details are handled by our payment processor; WinProducts does not store full payment card numbers or security codes.

Public market data

The Service includes licensed or publicly available TikTok Shop market information about products, shops, creators, and content. This can include public creator names, public profile images, captions, public identifiers, and observed or estimated performance metrics. We use this data for market intelligence—not identity verification, employment, lending, insurance, housing, or other eligibility decisions.

03

How we collect data

  • From you: when you register, configure a profile, contact support, or submit a research request.
  • Automatically: when your browser or device interacts with the Service.
  • From authentication and payment providers: when they confirm identity, subscription, or payment status.
  • From licensed providers and public sources: for public e-commerce and social-commerce market intelligence.
04

Why we use data

  • Provide accounts, authentication, saved research, product discovery, creator intelligence, and AI-assisted analysis.
  • Operate subscriptions, credits, billing records, and customer support.
  • Secure the Service, detect fraud or automated abuse, enforce limits, and investigate incidents.
  • Measure performance, fix errors, and improve features and user experience.
  • Comply with legal obligations and establish, exercise, or defend legal claims.
  • Send service messages and, where permitted and chosen by you, product updates or marketing communications.

Depending on your location and the activity, our legal bases may include performance of a contract, compliance with law, legitimate interests in operating and securing the Service, and consent where consent is required.

05

When we share data

We do not sell your personal data. We may share limited data with:

  • Infrastructure and security providers that host, deliver, store, monitor, and protect the Service.
  • Authentication providers such as Google and our managed authentication platform.
  • Email providers that deliver login codes and service messages.
  • Payment processors that process subscriptions, invoices, fraud checks, and refunds.
  • AI service providers when you request an AI analysis. We send only the product, video, market, and prompt context needed to generate the requested output.
  • Professional advisers and authorities when reasonably necessary for legal compliance, security, or claims.
  • A successor organization in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and legal safeguards.

Our processors may include Cloudflare, Hetzner, Supabase, Resend, Google, OpenAI, and the payment provider identified at checkout. Their role and availability can change as our infrastructure evolves.

06

Cookies and local storage

We use strictly necessary cookies and similar storage for authentication, session continuity, security challenges, interface preferences, and fraud prevention. Some providers may set their own necessary cookies during sign-in, payment, or security verification.

Blocking necessary storage can prevent login, saved research, or security features from working. We will request consent before using non-essential advertising or analytics cookies where the law requires it.

07

Retention

We keep personal data only for as long as reasonably necessary to provide the Service, maintain security and business records, meet legal and tax obligations, resolve disputes, and enforce agreements. Retention varies by data type. Account content is generally kept while the account is active; billing records, fraud signals, backups, and legal records may remain longer where required or justified. We delete or de-identify data when it is no longer needed and technically feasible.

08

International transfers

Burkisoy Enterprises LLC operates WinProducts from New Mexico, United States, and its service providers may process data in the United States and other countries, including the European Economic Area. Where an international transfer requires safeguards, we use an available lawful mechanism such as contractual protections, adequacy decisions, or another transfer mechanism recognized by applicable law.

09

Security

We use organizational and technical controls designed to protect data, including encrypted transport, access controls, private media delivery, restricted service credentials, rate limits, and security monitoring. No internet service can guarantee absolute security. Protect your login method and notify us promptly if you suspect unauthorized access.

10

Your privacy rights

Depending on applicable law, you may have the right to:

  • learn whether and how we process your personal data;
  • access, correct, or update your data;
  • request deletion, restriction, or de-identification;
  • object to certain processing or withdraw consent;
  • receive portable data where technically and legally applicable;
  • learn the recipients of transferred data and request notice of corrections or deletion;
  • object to a result based solely on automated processing where the law provides that right; and
  • complain to a competent data protection authority or seek compensation where legally available.

Send requests to winproductsio@gmail.com. We may verify your identity before responding. You can also request review of public creator information if you believe it is inaccurate or should be removed.

11

Children

WinProducts is a business research service and is not directed to children. You must be at least 18 years old to create an account or purchase a plan. Contact us if you believe a child provided personal data to the Service.

12

Changes and contact

We may update this Policy as the Service, providers, or law changes. We will publish the new date here and provide additional notice when a material change requires it.

Questions or requests: winproductsio@gmail.com. Please do not email passwords, full card numbers, or one-time login codes.