Privacy Policy

Last updated March 17, 2026

This privacy notice for Winston AI inc. (“Company,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at https://gowinston.ai, or any website of ours that links to this privacy notice
• Use our platform to analyze text or images (including AI detection, plagiarism checking, fact-checking, grammar analysis, and essay grading)
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@gowinston.ai.

Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Winston AI inc. and the Services, the choices you make, and the products and features you use. This includes text and images you submit for analysis through any of our features (AI detection, plagiarism checking, fact-checking, grammar analysis, essay grading, and others).

Do we process any sensitive personal information? We may process information that qualifies as sensitive personal information under applicable law, including images that users upload to our platform for analysis. Such images may contain personal data about the uploader or third parties, and may include intimate or sensitive visual content. We treat uploaded content with heightened protection as described in this notice.

Do we receive any information from third parties? We do not receive personal information about you from third parties, except as described in this notice (e.g., social login providers).

How do we process your information? We process your information to provide, improve, and administer our Services — including analyzing text and images you submit through our AI detection, plagiarism checking, fact-checking, grammar analysis, and essay grading features — communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We maintain organizational and technical security measures including encrypted storage for uploaded content and access controls. However, no electronic transmission over the internet can be guaranteed 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at privacy@gowinston.ai. We will consider and act upon any request in accordance with applicable data protection laws.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us, including text and images you submit for analysis through our features.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Names
• Email addresses
• Usernames
• Passwords

User-Submitted Content. Our Services include multiple text and image analysis features: AI detection, plagiarism checking, fact-checking, grammar analysis, and essay grading. To use these features, you submit content — text and/or images — to our platform. This means:

• We collect and store any text or images you submit for analysis through any of our features.
• Submitted text and images are stored to generate and display analysis reports in your user dashboard.
• Submitted text may contain personal information about you or third parties (for example, essays or documents authored by or referencing real individuals).
• Uploaded images may contain personal information about you or third parties, including visual depictions of real individuals.
• Some uploaded images may qualify as sensitive personal information under applicable privacy law (for example, images depicting individuals in sensitive, intimate, or private contexts).
• Text submitted for analysis is not shared with or compared against other users’ submissions — each submission is analyzed independently.
• By submitting content, you represent that you have the legal right to submit that content to our Services and that doing so does not violate any applicable law or the rights of any third party.

Sensitive Information. We may process information that qualifies as sensitive personal information where users upload images containing such data. We treat such information with heightened care and restrict access to authorized personnel on a need-to-know basis. We do not use submitted content for any purpose beyond providing and improving our Services, except where required by law or as described in this notice.

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy notice here: https://stripe.com/privacy.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Google or other social media account. If you choose to register in this way, we will collect the information described in the section “HOW DO WE HANDLE YOUR SOCIAL LOGINS?” below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings, and information about your activity in the Services (such as date/time stamps, pages and files viewed, searches, and other actions you take).
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services, including your IP address, browser type, hardware model, Internet service provider, operating system, and system configuration information.
• Location Data. We collect location data such as information about your device’s location derived from your IP address. You can opt out of allowing us to collect this information by disabling location settings on your device, though this may affect certain aspects of our Services.

2. How Do We Process Your Information?

In Short: We process your information to provide our text and image analysis services, improve our platform, communicate with you, and comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, and to keep your account in working order.
• To provide content analysis services. We process text and images you submit to perform AI detection, plagiarism checking, fact-checking, grammar analysis, essay grading, and other analysis features, and to return results to you. This is the core purpose for which submitted content is collected and used.
• To generate and store analysis reports. We store your submitted content and associated analysis results to create persistent reports accessible in your user dashboard. If you delete a report, the associated submitted content is deleted from active storage. If you delete your account, all associated submitted content and reports are deleted as described in Section 7.
• To improve our Services. We may use aggregated, de-identified analytics from usage patterns to improve our analysis accuracy and platform performance. We do not use your individually identifiable submitted content to train AI models without your explicit consent.
• To communicate with you. We may process your information to send you service-related communications, respond to your inquiries, and provide customer support.
• For security and fraud prevention. We may process your information to detect, investigate, and prevent fraudulent transactions and other illegal activities.
• To save or protect an individual’s vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
• To comply with legal obligations. We may process your information where required by applicable law, including responding to lawful requests from government authorities and complying with mandatory reporting obligations.

3. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases:

• Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our AI detection services.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If the information is publicly available and is specified by the regulations

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Service Providers. We may share your information with third-party service providers who perform services on our behalf, such as cloud storage, payment processing, and analytics. These providers are contractually obligated to protect your information and may only use it as directed by us.
• Legal Requirements. We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Protection of Rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. How Do We Handle Your Social Logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Google login). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the provider but will often include your name, email address, and profile picture.

We will use the information we receive only for the purposes described in this privacy notice. We are not responsible for other uses of your personal information by your third-party social media provider, and we recommend you review their privacy notice.

7. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law.

Account data (name, email, account settings) is retained for the duration of your account plus up to six (6) months following the start of any idle period, or until you request deletion, whichever comes first.

User-submitted content (text and images submitted for analysis through any of our features):

• Submitted content is stored for as long as the associated analysis report exists in your dashboard.
• If you delete a report, the submitted content associated with that report is deleted from active storage within 30 days.
• If you delete your account, all submitted content and associated reports are deleted from active storage within 30 days of account deletion.
• Submitted content may persist in encrypted backup systems for up to 90 days following deletion from active storage, after which it is permanently purged.
• We do not retain submitted content after the applicable retention period has expired except where required by law (e.g., to comply with a preservation order).

Log and usage data is retained for up to 12 months for security and analytics purposes, after which it is deleted or anonymized.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (e.g., because data is stored in backup archives), we will securely store and isolate it from further processing until deletion is possible.

8. How Do We Keep Your Information Safe?

In Short: We implement specific technical and organizational security measures to protect your personal information, including user-uploaded content.

We have implemented appropriate technical and organizational security measures designed to protect your personal information, including:

• Encrypted storage. User-submitted content (text and images) is stored in encrypted, access-controlled cloud storage. Data is encrypted at rest and in transit.
• Access controls. Access to user-submitted content is restricted to authorized Winston AI personnel on a strict need-to-know basis. We do not permit general employee access to user content.
• Periodic security assessments. We conduct periodic security reviews and assessments of our infrastructure and data handling practices.
• Vendor security. Third-party service providers who handle your data are selected for their security practices and are contractually required to maintain appropriate safeguards.

Despite these measures, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

9. Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age, and we prohibit the upload of any content depicting minors in a sexual manner.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to such minor dependent’s use of the Services.

Prohibited imagery involving minors. Users are strictly prohibited from uploading any image depicting a minor (anyone under 18 years of age) in a sexual or exploitative context. This constitutes a violation of our Terms of Service and applicable law, including child protection legislation. We use technical measures to detect child sexual abuse material (CSAM) in uploaded content and will report any such content to the relevant authorities (including the Canadian Centre for Child Protection and the National Center for Missing & Exploited Children) as required by law. Accounts found to have uploaded such material will be immediately terminated and reported.

If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@gowinston.ai.

10. User-Uploaded Content & Third-Party Data

In Short: When you submit text or images for analysis, that content may contain personal data about people who are not Winston AI users. This section explains your obligations and theirs.

When users submit content to our platform — whether text (such as an essay or document) or images — that content may reference or depict individuals other than the submitter who have not agreed to Winston AI’s Terms of Service or this privacy notice. We acknowledge this reality and address it as follows:

Submitter obligations. By submitting content to our Services, you represent and warrant that:

• You have the legal right to submit the content (e.g., you authored the text, you are the subject of the image, you have the consent of all persons referenced or depicted, or you have another lawful basis for submission);
• Submitting the content does not violate any applicable law, including privacy laws, intellectual property laws, or laws prohibiting non-consensual intimate imagery;
• You will not upload images depicting minors in a sexual or exploitative context.

Third-party data subjects. If submitted content contains personal data about a third party (a person who is not the submitter and not a Winston AI user), that third party may have rights regarding their data under applicable privacy law. Winston AI acts as a data processor with respect to such content — you, the submitter, are the data controller for that content.

Deletion requests from third parties. If you are a third party whose personal data appears in content submitted to our platform and you wish to request deletion, please contact us at privacy@gowinston.ai with a description of the content and your relationship to it. We will review and respond to such requests in accordance with applicable law. We cannot always fulfill third-party deletion requests (for example, where the data is part of a report tied to another user’s active account), but we will handle such requests in good faith.

No commercial use of submitted content. We do not sell, license, or otherwise commercially exploit user-submitted text or images. We do not use submitted content to build or train AI models without explicit, opt-in consent from the submitter.

11. Prohibited Content

Users may not upload content that:

• Depicts any minor (anyone under 18 years of age) in a sexual or exploitative context. This is illegal in most jurisdictions and will result in immediate account termination and reporting to law enforcement.
• Constitutes non-consensual intimate imagery (NCII) — including “deepfake” intimate imagery generated by AI — without the consent of the person(s) depicted.
• The uploader does not have the legal right to submit (e.g., stolen images, images subject to third-party copyright or privacy rights that preclude this use).
• Would otherwise violate applicable law or Winston AI’s Terms of Service.

Violation of these prohibitions may result in immediate account suspension, content removal, and reporting to law enforcement where required. These prohibitions do not fully absolve users of legal responsibility — they shift moral and legal liability to the party who uploaded prohibited content and demonstrate Winston AI’s commitment to responsible platform operation.

12. Law 25 / Quebec Privacy Rights

In Short: If you are a Quebec resident, you have specific rights under Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Loi 25), as amended by Bill 64.

Designated Privacy Officer. As required by Law 25, Winston AI has designated a Privacy Officer responsible for overseeing compliance with Quebec privacy law and handling privacy-related requests. You may contact the Privacy Officer at:

Privacy Officer, Winston AI inc. 215 Mont-Royal Ouest, Suite 201 Montreal, Quebec H2T 2T2 Canada privacy@gowinston.ai

Your rights under Law 25. If you are a Quebec resident, you have the following rights:

• Right of access. You may request a copy of the personal information we hold about you, in a commonly used technological format.
• Right of rectification. You may request correction of any personal information about you that is inaccurate, incomplete, or ambiguous.
• Right to deletion. You may request that we delete your personal information, subject to legal and contractual limitations.
• Right to data portability. You may request that we transmit your personal information to you or to another organization in a structured, commonly used technological format.
• Right to object to automated decisions. If we make a decision based exclusively on automated processing of your personal information that has a significant impact on you, you have the right to be informed of this and to request human review.
• Right to de-indexation. Where personal information about you has been made publicly available and its dissemination causes you harm, you may request that access be restricted.

To exercise any of these rights, please contact us at privacy@gowinston.ai. We will respond to your request within the timeframe required by applicable law (30 days for most requests under Law 25).

Privacy Impact Assessments (PIAs). Winston AI conducts Privacy Impact Assessments for any new project, product, or data use that poses a high risk to privacy rights, as required by Law 25. Our content analysis features involving user-submitted text and images have been reviewed under this framework.

Data retention and deletion. Please see Section 7 for specific retention periods. Quebec residents have the right to request deletion of their personal information subject to legal limitations.

13. What Are Your Privacy Rights?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us at privacy@gowinston.ai.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are located in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at privacy@gowinston.ai. This will not affect the lawfulness of processing before its withdrawal.

Opting out of marketing and promotional communications. You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails we send, or by contacting us using the details provided in Section 17.

Account Information

If you would like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases within the timeframe described in Section 7. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, please email us at privacy@gowinston.ai.

14. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

15. Do California Residents Have Specific Privacy Rights?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

CCPA Privacy Notice

The California Code of Regulations defines a “resident” as: (1) every individual who is in the State of California for other than a temporary or transitory purpose; and (2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose. All other individuals are defined as “non-residents.”

If this definition of “resident” applies to you, we must adhere to certain rights and obligations regarding your personal information.

What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, email address, unique personal identifier, online identifier, Internet Protocol address, and account name	YES
B. Personal information categories listed in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	NO
C. Protected classification characteristics under California or federal law	Gender and date of birth	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	YES
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	YES
G. Geolocation data	Device location (derived from IP address)	YES
H. Audio, electronic, visual, thermal, olfactory, or similar information	Images uploaded by users for analysis (AI detection and other features)	YES
I. Professional or employment-related information	Business contact details, job title, work history, and professional qualifications	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from other personal information	Inferences drawn from any of the collected personal information listed above to create a profile about an individual’s preferences and characteristics	NO
L. Sensitive Personal Information	User-submitted images that may contain sensitive visual data	YES

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of receiving help through our customer support channels, participating in customer surveys or contests, and facilitation in the delivery of our Services and responding to your inquiries.

How do we use and share your personal information?

More information about our data collection and sharing practices can be found in this privacy notice.

You may contact us by email at privacy@gowinston.ai or by referring to the contact details at the bottom of this document.

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf, following the same strict privacy protection obligations mandated by the CCPA.

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be “selling” of your personal information.

Winston AI inc. has not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Winston AI inc. will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your rights with respect to your personal data

Right to request deletion of the data. You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law.

Right to be informed — Request to know. Depending on the circumstances, you have a right to know: whether we collect and use your personal information; the categories of personal information that we collect; the purposes for which the collected personal information is used; whether we sell or share personal information to third parties; the categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose; and the specific pieces of personal information we collected about you.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights. We will not discriminate against you if you exercise your privacy rights.

Right to Limit Use and Disclosure of Sensitive Personal Information. As noted above, we do collect and process sensitive personal information (including user-submitted images that may contain sensitive visual content). You have the right to request that we limit our use and disclosure of your sensitive personal information to that which is necessary to perform the services you requested.

Verification process. Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have information in our system. We will only use personal information provided in your verification request for that purpose.

Other privacy rights. You may object to the processing of your personal information. You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information. You may request to opt out from future selling or sharing of your personal information to third parties.

To exercise these rights, you can contact us by email at privacy@gowinston.ai. If you have a complaint about how we handle your data, we would like to hear from you.

16. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last Updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

17. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@gowinston.ai or by post to:

Winston AI inc. 215 Mont-Royal Ouest, Suite 201 Montreal, Quebec H2T 2T2 Canada

For privacy-specific requests (access, deletion, correction), please contact our Privacy Officer directly at privacy@gowinston.ai.

18. How Can You Review, Update, or Delete the Data We Collect From You?

You have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please contact us at privacy@gowinston.ai or submit a request form by clicking here: https://gowinston.ai/contact-us/.