Last updated: February 24, 2026
This Privacy Policy explains how Win Worthy ("we," "us," or "our") collects, uses, stores, and shares information when you use the Win Worthy service (the "Service"). By using the Service, you agree to the practices described in this policy.
We collect the following categories of information:
Account Information
When you create an account with email and password, we collect your email address and a securely hashed password. We do not collect your name, phone number, or address unless you voluntarily provide them. Your email is used to identify your account, send transactional communications, and, with your consent, product updates.
Social Login (Google and Apple)
You may optionally sign in using Sign in with Google or Sign in with Apple. When you choose this method, we receive your name and email address from the provider. We do not receive your password from Google or Apple — authentication is handled entirely by the provider. We do not use your Google or Apple account for any purpose other than identifying your WinWorthy account. You can revoke access at any time through your Google or Apple account settings.
Usage Data
We store the assessments, opportunity scores, and notes you create within the Service. This includes opportunity names, client names, estimated values, scores, scoring criteria responses, and recommendations generated by the scoring engine. This data is associated with your account and stored on our behalf by Supabase.
Payment Data
We do not store payment card numbers or sensitive financial data on our servers. All payment processing is handled by Stripe. We retain transaction records (plan type, billing dates, subscription status) for accounting and customer support purposes.
Technical Data
When you use the Service, we may receive standard web server logs including your IP address, browser type, operating system, referring URLs, and pages visited. This data is used for security monitoring and service improvement.
We use the information we collect to:
We do not sell your personal information. We do not use your assessment data to train machine learning models or share it with advertisers.
Your data is stored in databases managed by Supabase, a cloud database platform. Data is stored in the United States. Supabase employs industry-standard security practices including encryption at rest and in transit.
We enforce HTTPS for all connections to the Service. Access to production databases is restricted to authorized personnel. We review our security practices regularly.
While we take reasonable measures to protect your data, no method of storage or transmission over the Internet is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only in the following limited circumstances:
Each of our sub-processors is subject to appropriate data protection agreements.
We retain your account information and assessment data for as long as your account is active. If you delete your account, we will delete your personal data and assessment records within 30 days, except where we are required to retain certain information for legal or accounting obligations.
Anonymized or aggregated data that cannot reasonably be used to identify you may be retained indefinitely for analytics and product improvement purposes.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at privacy@winworthy.com. We will respond within 30 days.
We use a minimal number of cookies. Specifically, we use session cookies required for authentication — these cookies allow the Service to recognize that you are logged in as you navigate between pages. These cookies expire when you close your browser or log out.
We do not use third-party advertising cookies, tracking pixels, or behavioral analytics cookies. We do not use cookies to build advertising profiles.
You may configure your browser to block or delete cookies. Blocking session cookies will prevent you from logging in to the Service.
The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected information from a person under 16, please contact us at privacy@winworthy.com and we will promptly delete that information.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by applicable law, notify you by email. We encourage you to review this policy periodically.
Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Win Worthy
Email: privacy@winworthy.com