Privacy policy

1.Who we are

Glow is made by Winding.ai (“Winding Labs”, “we”), 1887 Whitney Mesa Drive #5338, Henderson, NV 89014. We’re the controller of the personal data described here. Contact: privacy@meetglow.ai.

2.What we collect

• Account details: your phone number (for sign-in codes), and your name and email if you sign in with Apple or Google (Apple’s private relay address works).
• Security records: sign-in times and methods, passkey and authenticator registrations (never the secrets themselves), device type, and the approximate country from your IP address, kept to protect your account.
• Connected data: what the read-only keys you add can see, which we reduce to aggregates per product: revenue, refunds and subscription counts per day; spend per vendor, model and key; clicks, sessions and signups per day; backlink counts. Glow asks Stripe for no customer permission and does not store your customers’ names or emails.
• Keys and tokens: sealed with envelope encryption and never shown again. We keep the last four characters so you can tell them apart.
• What you capture: links, text, screenshots and voice notes you send to Glow, the tasks and agents you create, and the results agents report back.
• Billing: your plan and payment status from the App Store, Google Play or Stripe. We never see full card numbers.
• On this website: see cookies and analytics. If you join the beta list, your email address and which page you joined from.

3.How we use it

To run Glow for you: sync your connections, write reports and nuggets, answer Ask Glow, file captures, run the agents you approve, secure your account, bill you, and answer support. We also use product analytics (event names and small codes, never amounts, names or what you typed) to improve the app. Legal bases: performing our contract with you, our legitimate interest in security and improving Glow, and your consent for website analytics where the law requires it.

4.AI processing

Reports, nuggets, capture filing and Ask Glow send the minimum numbers and text needed to an AI model through OpenRouter, configured to use only model providers that commit to zero data retention and no training on your data. Ask Glow conversations aren’t stored on our servers. Captures go to the model as you wrote them, so leave out anything you wouldn’t paste into a note.

5.Who processes it

We share data only with service providers that process it for us under contract:

Agents you set up send tasks to the executors you choose (for example GitHub, Devin or your webhook). We may disclose data if the law requires it, and we’d tell you unless we’re prohibited. If Winding Labs is acquired, this policy keeps applying to your data.

6.How long we keep it

Every row Glow stores has an expiry date and a nightly job deletes what’s past it. Typical periods: daily metrics 25 months; reports and nuggets 13 months; captures, screenshots and voice notes 90 days after they’re done; agent run logs 90 days; security records 400 days; beta-list emails until launch plus 12 months or until you unsubscribe. Deleting your account removes everything within 30 days, except billing records we must keep for tax law (up to 7 years).

7.Your rights and choices

You can access, export, correct or delete your data at any time in the app, or by emailing privacy@meetglow.ai. Depending on where you live (for example the EEA, UK or California), you also have the right to object, restrict processing, port your data, withdraw consent, and complain to your data protection authority. We don’t sell or share personal information for cross-context behavioral advertising. How to delete your account.

8.Cookies and analytics on this website

meetglow.ai uses Google Analytics 4 and PostHog to understand which pages help people. PostHog runs through our own domain and records no IP address. If your browser sends Global Privacy Control or Do Not Track, neither sets cookies or tracks you. Visitors in Europe get cookieless measurement until they choose “Allow”. The Glow app itself sends nothing to Google.

Opt out of analytics on this browser

9.Security

Read-only keys wherever a provider offers them, verified on save, envelope encryption with keys the internet-facing server can’t open, a required second factor, an app lock, and data that expires. Details on our security page. No system is perfect; if we ever have a breach affecting your data, we’ll tell you promptly.

10.International transfers

We and our providers process data in the United States and other countries. Where the law requires it, transfers rely on the EU Standard Contractual Clauses or equivalent safeguards.

11.Children

Glow is for adults running businesses and households. It isn’t directed to children under 16 and we don’t knowingly collect their data.

12.Changes

If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect. The date at the top shows the latest version.

13.Contact

Winding.ai, 1887 Whitney Mesa Drive #5338, Henderson, NV 89014. privacy@meetglow.ai.