Privacy Policy

Win Traction, Inc ("Win Traction," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use our website at https://wintraction.ai (the "Website") and our services (collectively, the "Services").

This Policy covers two different situations, which we treat separately:

• Visitors to and users of wintraction.ai, including people who request an audit, create an account, or pay for Services.
• Customers who connect their own Google Analytics 4 ("GA4") property so they can view AI-assistant and large-language-model ("LLM") referral traffic inside the Services.

• Personal Information: name, email address, phone number, billing information, company and website details, and other information you provide.
• Usage Data: IP address, browser type, device information, pages visited, time spent, referral source, and interactions on wintraction.ai.
• User Content: website content, marketing materials, prompts, documents, or other data you provide so we can deliver AI-visibility and related Services.
• AI Interaction Data: inputs, queries, and outputs from AI-powered features in the Services.
• Cookies and Tracking Technologies: cookies, web beacons, pixels, and similar technologies on wintraction.ai, including Google Analytics and Google advertising cookies as described in Section 05.
• Connected-account data: If you link a Google Analytics property, we collect OAuth credentials, the Google account identifiers used for the connection (such as account email), and the GA4 account, property, and data-stream identifiers you choose. Analytics report contents are retrieved from Google to display in the Services and are not stored by us as a historical copy.

• To provide and maintain the Services, including AI-visibility improvement services and processing payments.
• To communicate with you, such as sending account-related emails or notifications.
• To improve the Services, analyze usage trends, and develop new features.
• To process your content and data through third-party large language models (LLMs) such as Grok, ChatGPT, Gemini, Claude AI, and Perplexity.
• To retrieve and display read-only Google Analytics reports so you can monitor traffic from AI assistants and LLMs.
• To comply with legal obligations, enforce our Terms of Service, and prevent fraud or abuse.
• For marketing and advertising, including remarketing to people who have visited wintraction.ai, subject to applicable opt-out rights.

We do not use a customer's connected GA4 property data to advertise Wintraction, to build advertising audiences, or for cross-context behavioral advertising.

• Service Providers: vendors such as payment processors, hosting services, email providers, and analytics providers.
• LLM Providers for Service Functionality: your inputs, content, and related data may be shared with Grok/xAI, ChatGPT, Gemini, Claude AI, and Perplexity to operate the Services.
• Google (wintraction.ai): We use Google Analytics 4 and related Google advertising features on wintraction.ai. Measurement and advertising data from our Website is shared with Google as described in Section 05.
• Google (customer connections): If you connect your own GA4 property, we send OAuth requests to Google and receive report data from Google solely to provide the read-only integration described in Section 06. We do not sell that data and we do not use it for our own advertising.
• Legal Requirements: if required by law, subpoena, or to protect our rights, safety, or property.
• Business Transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell personal information. We share information with service providers (including advertising and analytics partners such as Google) only as necessary to operate and improve our Services and, for wintraction.ai only, our advertising, as described in this Policy.

This section applies to visitors of wintraction.ai. It does not describe tags on a customer's own website. We do not install our own cookies, pixels, or tags on a customer's site when the customer connects GA4.

We use Google Analytics 4 on wintraction.ai to measure how visitors use our Website. GA4 uses first-party cookies (including _ga and related _ga_<container> cookies) and similar identifiers. Data collected can include device and browser type, pages viewed, approximate location derived from IP address, referral source, session activity, and interactions with the Website.

We also use Google advertising and remarketing features so we can show ads to people who previously visited wintraction.ai. First-party Analytics identifiers may be used together with Google advertising cookies or other identifiers for that purpose.

Google's description of how it uses information from sites and apps that use Google services is available at https://www.google.com/policies/privacy/partners/.

You can:

• Opt out of Google Analytics in your browser with the Google Analytics opt-out add-on
• Manage Google ads at Google Ads Settings
• Use industry opt-outs such as the NAI consumer opt-out
• Control cookies through your browser settings

Connecting your own GA4 property to Wintraction is separate from measurement and advertising on wintraction.ai.

If you connect a Google Analytics 4 property to Wintraction, you authorize us to access that property on a read-only basis using Google OAuth.

Purpose. We use that access only to retrieve reports and dimensions that help you and us measure traffic referred from LLM and AI-assistant products (for example ChatGPT, Grok, Gemini, Claude, Perplexity, Microsoft Copilot, and similar sources) and to show those metrics in the Services over time. The Services are designed to help increase that traffic; the integration exists so you can monitor whether it is changing.

What we do not do. We do not install tags, pixels, or cookies on your website. We do not write events to your GA4 property. We do not change your GA4 settings, audiences, data-retention settings, or Google Ads links. We do not send your website visitors' personal information to Google on your behalf. How events get into your GA4 property is entirely your configuration.

Data we receive when you connect GA4

• Google account identifiers needed for OAuth (such as account email and token metadata)
• GA4 account, property, and data-stream identifiers you select
• Report data Google returns through the Analytics APIs (for example session counts, source/medium/referrer, landing pages, device and coarse geographic dimensions, and similar acquisition metrics)

Storage. We store OAuth credentials and the property identifiers required to keep the connection working. We do not store a copy of your GA4 report data in an analytics warehouse. Metrics you see in Wintraction are fetched live from Google's APIs and are not retained by us as historical report rows.

Roles. You are the controller of your GA4 property and of your website visitors' data. Wintraction is a service provider / processor for the connected-account data and for the report data we retrieve in order to display it. You are responsible for your own GA4 implementation, cookie banner, consent mechanism, and privacy notice. Connecting GA4 is optional. You represent that you have the authority to grant us read access to the selected property.

Disconnect. You may disconnect the integration at any time. After disconnect, we stop calling the Analytics APIs and the live metrics disappear from the Services. We delete or revoke stored OAuth credentials within a reasonable period, except as needed to complete the disconnect, secure the account, or meet a legal obligation. We cannot delete, edit, or export data inside your Google Analytics property; only you or Google can.

Sensitive properties. Do not connect a property that you are not authorized to share, or that is used for child-directed services, unless you have confirmed that sharing read-only reports with a service provider is allowed.

We implement reasonable security measures, such as encryption and access controls, to protect your information. However, no system is completely secure.

OAuth credentials are stored only as needed to maintain the Google connection you authorized and are revoked when you disconnect.

We retain your account, billing, and Service data as long as necessary to provide the Services, comply with legal obligations, or resolve disputes.

• Connected GA4 report data: retrieved on demand to display in the Services and not kept by us as a stored copy of your Analytics history.
• OAuth credentials and property identifiers: kept while the connection is active and deleted or revoked within a reasonable period after you disconnect, unless we must retain them for security or legal reasons.
• wintraction.ai Analytics data: retained in Google Analytics according to the retention setting on our GA4 property and Google's standard practices.

Depending on your location, you may have rights to access, correct, or delete your personal information; opt out of marketing; object to processing; or request data portability.

California and other U.S. state residents: You may have the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information. We do not sell or share a customer's connected GA4 data. Advertising and remarketing described in this Policy apply to visitors of wintraction.ai. To exercise applicable opt-out rights, contact us using the details in the Contact Us section below.

You can manage cookie preferences and advertising opt-outs through your browser settings, the tools listed in Section 05, and the opt-out tools offered by our advertising partners.

If you connected GA4, disconnecting the integration stops our read access. That action does not delete data stored in your Google account or GA4 property.

The Services are not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children.

Your data may be processed in the United States or other countries with different data protection laws. Google may process Analytics and OAuth data in the United States and other locations where Google operates.

The Services may contain links to third-party sites. We are not responsible for their privacy practices.

We may update this Policy from time to time. Significant changes will be posted on the Website with the updated date.