Introduction
Winking Owl ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains
how we collect, use, disclose, and safeguard your information when you use our customer journey testing
platform and related services, including our ChatGPT integration ("Winking Owl Insight").
Summary: We only collect data necessary to provide our services. Your journey testing
data belongs to you, and we implement industry-standard security measures to protect it.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name and organization details
- Authentication credentials (securely hashed)
Journey Testing Data
When you use our platform, we store:
- Customer journey configurations you create
- Test execution results and logs
- Audio and video recordings of test sessions (when enabled)
- Analytics and performance metrics
Usage Data
We automatically collect:
- Log data (IP address, browser type, access times)
- Device information
- Feature usage patterns (anonymized)
How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services
- Process and display your journey testing results
- Send service-related communications
- Ensure platform security and prevent fraud
- Comply with legal obligations
ChatGPT Integration (Winking Owl Insight)
When you use our ChatGPT integration, please note:
- We authenticate your requests using secure OAuth 2.0 tokens
- Your queries and our responses pass through OpenAI's infrastructure
- We only access data you have permission to view in your Winking Owl account
- No data is stored by the ChatGPT integration beyond what's necessary for the current session
- OpenAI's privacy policy also applies to interactions through ChatGPT
Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Cloud hosting (AWS), authentication (Amazon Cognito), and analytics services
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with mergers or acquisitions (with notice)
Data Security
We implement industry-standard security measures:
- Encryption in transit (TLS 1.2+) and at rest
- Secure authentication with OAuth 2.0
- Regular security audits and monitoring
- Access controls and audit logging
- Data hosted in secure AWS data centers
Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable format
- Object to or restrict processing
- Withdraw consent
To exercise these rights, contact us at privacy@winking-owl.com.
Data Retention
We retain your data for as long as your account is active or as needed to provide services.
Journey test data is retained according to your subscription plan settings. You can request
deletion of your data at any time.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure
appropriate safeguards are in place, including Standard Contractual Clauses where required.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material
changes by posting the new policy on this page and updating the "Last Updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us:
Last Updated: January 2026
