WinaltSpacePrivacy Policy
This policy explains what information Winalt Technologies (SMC-Private) Limited ("Winalt", "we", "us") collects through the WinaltSpace service, how we use it, and the choices you have.
Who we are
Winalt Technologies (SMC-Private) Limited is a software and IT services company based in Pakistan. For any privacy question, write to [email protected].
Data we process
Account details (name, email, username), the business data you enter (expenses, invoices, tasks, tickets, files), and technical logs (IP address, browser, actions in the audit log). We use it to provide, secure and support the service. We do not sell personal data or use your business data for advertising.
Connected social accounts
The Social page lets a customer connect their own YouTube, Facebook, Instagram, LinkedIn, X or TikTok accounts and see how they are performing, and the Website page lets a customer connect their own Google Analytics account to see how their websites are performing. Connecting is optional and always started by the customer, who signs in on the platform's own page and chooses what to allow.
What we access. Only what the customer approves when they connect. For reading, that is information about the account: its name and identifier, follower or subscriber count, number of posts or videos, views, likes, comments and similar engagement figures, and the titles and figures of recent posts. For Facebook Pages and Instagram professional accounts, and where the customer approves the matching permissions, we can also publish, schedule and edit posts, read and reply to comments, and read advertising performance (spend, reach, results and return on ad spend) and manage ads on ad accounts the customer chooses. For WhatsApp Business, where the customer connects it, we can send and receive messages on the customer's own business number so they can manage conversations with their own customers in WinaltSpace. For YouTube we use the youtube.readonly scope. For Google Analytics we use the analytics.readonly scope to read traffic reports for the properties the customer chooses: visitor, session and page view counts, traffic sources, campaign names and page paths. For Google Search Console we use the webmasters.readonly scope to read search performance for the sites the customer chooses: clicks, impressions, average position, and the search queries and pages behind them. For Google Tag Manager we use the tagmanager.readonly scope to read the setup of the containers the customer chooses (container name, which tags are live, and whether there are unpublished changes), and we never change a container. We do not read or store data about individual website visitors, and we do not read a person's personal Facebook or Instagram profile, friends or private messages. We only publish or send something when a person in the customer's workspace tells WinaltSpace to.
How we use it. Only to show that customer's figures and trends inside their own WinaltSpace workspace. The data is visible to the users of that workspace and no one else. We do not sell it, share it with third parties, use it for advertising, or use it to train AI or machine learning models.
How we store it. Access tokens are encrypted before they are stored and are never shown to users or returned by our API. Daily figures are kept so the customer can see change over time.
Disconnecting and deleting. A customer can disconnect an account in WinaltSpace at any time. Doing so deletes the stored token and the figures we collected for that account. Customers can also withdraw access on the platform itself, for Google at myaccount.google.com/permissions, and we then lose access straight away. Closing a workspace deletes all of its connected accounts. See also how to delete your data. To ask us to delete data directly, email [email protected].
Google, YouTube and Google Analytics. WinaltSpace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube, the customer is also agreeing to be bound by the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.
Other platforms. Meta (Facebook, Instagram and WhatsApp). Information received from Meta is used only to provide the features the customer asked for inside their own workspace, is never sold or used for advertising, and is deleted when the account is disconnected or on request, as described on our data deletion page. Information from LinkedIn, X and TikTok is handled in the same way. Each platform's own terms and privacy policy also apply.
AI assistants. If a staff member connects an AI assistant (for example Claude) to WinaltSpace, the assistant can read and change that person's tasks, projects, team member names and other records the connection allows, as that person, and only after they sign in and allow it. The information it requests is sent to the assistant's provider to answer the person, under that provider's own terms and privacy policy. We store a record of each connection and of the changes made through it, and the person can disconnect it at any time in My account.
Third parties
We share information only with the services that help us run WinaltSpace: hosting, database, file storage and email delivery providers acting on our behalf, and the platforms a customer chooses to connect (YouTube, Facebook, Instagram, WhatsApp, LinkedIn, X and TikTok), as described above. We may also disclose information when the law requires it. Some of these providers are outside Pakistan, so your information may be processed in other countries.
Retention and deletion
Data is kept while your workspace is active. After you close a workspace, data is retained for 30 days and then permanently deleted. Backups roll off within 35 days.
Security
Data is encrypted in transit, tenants are isolated at the database level, passwords are hashed, and optional two-factor authentication is available. No system is perfectly secure, so we cannot promise absolute security.
Your rights
You can access, correct and export your data in the application, ask us to delete it, or object to us contacting you. Email [email protected] and we will respond within a reasonable time. You may also have rights under the law where you live.