Privacy & terms

AwesomeApps, 2 bis avenue Paul Vaillant Couturier, 94800 Villejuif, France. SIREN 881 883 979, SIRET 881 883 979 00026. Contact: hello@winlab.app.

Render Services, Inc., 525 Brannan Street, Suite 300, San Francisco, CA 94107, USA. The servers and the database are in Frankfurt (Germany).

Your email address, the language you used the page in, the referring URL, and a share code. Purpose: to email you once, when Winlab launches.

Legal basis: your consent, given when you submitted the form. The list is never sold or rented.

The waiting list is kept for up to 2 years, then deleted automatically. Every email we send carries a one-click removal link that deletes your row immediately. This duration covers the waiting list only — it says nothing about what you type inside the product.

Brevo (Sendinblue) delivers our emails. Hosting and the database are on Render, in Frankfurt (EU). Analytics run through PostHog and Google Analytics — both process data in the United States. Several AI providers process your requests, and none of them processes data in the European Union: Anthropic (Claude) and xAI (Grok) in the United States, Moonshot AI (Kimi) and Z.ai (GLM) in Singapore, a country without an EU adequacy decision. Anthropic (Claude) generates scripts; Z.ai (GLM) analyses videos. TypeSafe (Jev), in the United States, classifies each video into a niche: it receives the channel’s title and description and the video’s title, caption and theme — public data about the creator, never your account or your documents. An AI classification provider, in the United States, also files each sponsored ad we collect from the Meta Ad Library under a niche: it receives the ad’s text, its link title and the name of its advertiser’s Page — public data about the advertiser, never your account or your documents. To check those filings, we send samples of the same three elements to a second AI provider, in the United States. When a creator is discovered automatically, Anthropic (Claude), in the United States, also receives the channel’s public title and bio and the captions of its most-viewed videos, to classify its niche. In a document, every AI gesture sends your text to Anthropic, in the United States: rewriting a passage transmits the selected passage (up to 2,000 characters), up to 6,000 characters of the document around it, and your instruction (up to 300); “keep writing” transmits up to 4,000 characters of the document that precedes your cursor. Nothing is sent when you open a document, nor while you type — only when you ask. In the Studio, you talk to a model: nothing is sent when you open a video, but every paid message you send transmits what you typed, the previous turns of that conversation, the transcript of the source video, the name of its channel and what the analysis drew from it (hook, angle, structure, call to action) — most often not your video, but a third-party creator's — as well as the script you are writing, and the elements of your voice that feed the writing. Which provider receives it depends on the tier you pick: Moonshot AI (Kimi) and Z.ai (GLM) on the two entry tiers, Anthropic (Claude) on the careful and top tiers; a block bought on the fast tier, which has been retired, still goes to xAI (Grok) until it is used up. This transfer only happens when you send a message. Analysing a video sends its full transcript, its title and the name of its channel to Z.ai (GLM), in Singapore — a country without an EU adequacy decision. That video is most often not yours, but one from a third-party creator, identified by their channel. Breaking a long video into shorts from the Studio sends that same transcript to Z.ai (GLM) again, whatever tier you picked. Hook-category classification runs on xAI (Grok), in the United States. Groq, in the United States, transcribes TikTok and Instagram videos: it receives the video file or its audio track — most often a third-party creator’s video and, when an account report covers an Instagram account you connected, your own videos, fetched through the Instagram API. Source videos are collected from the platforms’ public pages through a third-party data collection provider, files are stored on Cloudflare R2 (Cloudflare, Inc., United States), on servers located in Western Europe, payments are handled by Stripe. Opening a video card loads that video’s player straight from Google (YouTube), TikTok or Meta (Instagram): the platform, its CDNs and its own measurement services receive your IP address, set their own cookies and may ask you for their own consent inside the frame. No click on play is needed, and only the platform of the video you opened is contacted. Thumbnails work the same way — when we could not re-host an image ourselves, the list you are browsing loads it straight from the platform’s CDN, before you click anything. The sheet of a sponsored ad works the same way: its video is loaded straight from Meta’s servers (Facebook, Instagram), which receive your IP address and may set their own cookies. We never copy it onto our servers. Write to us for the current list.

Access, correction, deletion, objection, portability. Write to hello@winlab.app and we answer within one month.

Joining the waitlist is a statement of interest, not a contract: it grants no access right and no price commitment. The product, its scope and its pricing may change before launch.