Transparency

AI disclosure

Winpost is an AI system in the sense of the EU AI Act. The candidates in your feed are generated by AI models from your brand kit, your voice profile and the topics you choose. Every generated candidate carries the AI-assisted marking in the app, and every post published through Winpost was approved by a person first.

• Text and captions are drafted by large language models and finalised in your voice.
• Images and slides are rendered from your brand tokens; where an image is generated, an image model is used and the result is marked.
• Models are interchangeable behind the product; we log which model produced a candidate (metadata only, never your content) so we can answer questions and switch providers.
• Winpost does not build profiles of the people who see your posts and does not target individuals.

Privacy, in short

• This website sets no cookies. Analytics is cookie-free and aggregated (Plausible, hosted in the EU).
• The waitlist stores your email with your consent, to write to you about the launch and the founding offer, and nothing else.
• Customer data in the product is stored in the EU region you choose at signup. AI generation sends the brief (brand, product, audience and tone context, never your customers’ personal data) to the AI providers in the list below; the ones in the United States work under the EU-US Data Privacy Framework or standard contractual clauses, as the register states per provider.
• You can ask what we hold on you and have it deleted or exported, completely and without delay.

Sub-processors

Companies that process data on our behalf at launch, with their locations. The list is kept current before the first customer and every time it changes.

Purpose	Company	Location
Hosting of the app and the API	UpCloud Oy	Finland (data centre in Frankfurt, Germany)
DNS, CDN, storage, video delivery	BunnyWay d.o.o.	Slovenia
Cookie-free analytics	Plausible Insights OÜ	Estonia
Support and contact mail	Google Ireland Limited	Ireland and United States, EU-US Data Privacy Framework
Bot check on forms	Cloudflare, Inc. (Turnstile only)	United States, EU-US Data Privacy Framework
Payments and VAT	Stripe Payments Europe, Ltd.	Ireland
Transactional email	MailPace (OhMySMTP Ltd)	United Kingdom, EU adequacy decision (data stored in France)
AI text generation	Anthropic, PBC and Mistral AI	United States, France
AI image generation	OpenAI, Black Forest Labs, Recraft	United States, Germany, United States

Security

Report a vulnerability to security@winpost.ai. We answer within two working days, do not pursue good-faith researchers, and publish fixes, naming the reporter where wanted. Winpost follows the NIS2 article 21 measures and keeps an incident log.