Privacy Policy
What Winfolio stores, why, and who else handles it.
Draft for the private beta. Effective and last updated 6 November 2026. This text describes how Winfolio actually works today and will be reviewed before Winfolio opens to the public.
1. Introduction
Welcome to Winfolio.
Winfolio helps professionals capture their achievements, track goals, organise feedback and turn their work into clear, evidence-backed career stories.
We recognise that your career information is personal. You may use Winfolio to record professional accomplishments, performance outcomes, workplace feedback, development goals and other information that you would not ordinarily share publicly.
This Privacy Policy explains how Winfolio collects, uses, stores, shares and protects personal information when you visit our website or use our application. It also explains your choices and rights regarding your personal information.
2. Who We Are
Winfolio is operated by Techbor Consulting (“we”), based in the United Kingdom.
For the purposes of applicable data protection laws, Techbor Consulting is generally the controller of personal information processed to provide individual Winfolio accounts.
Contact: info@techbor.co.uk
If Winfolio is used under an organisation-managed arrangement in the future, different data protection roles may apply and will be explained in the relevant agreement.
3. Information We Collect
3.1 Account and profile information
When you register or maintain an account, we process:
- Your name and email address.
- Your password, stored only as a secure hash that we can’t read.
- Your timezone, roles, review dates and other profile details you choose to add.
- Your settings and preferences, such as AI on or off and reminders.
We use this information to create and maintain your account, authenticate access, personalise the application and communicate with you about the service.
3.2 Achievements and professional information
Winfolio allows you to create and manage professional records, including:
- Work achievements and accomplishments, and the history of your notes.
- Project descriptions and responsibilities.
- Performance outcomes and metrics.
- Goals, objectives and key results.
- Professional skills and competencies.
- Development plans and progress notes.
- Evidence links and files you add.
- Performance review preparation materials.
- CV statements, interview examples and career narratives.
You decide what information to enter, subject to the application’s functionality.
3.3 Feedback and third-party information
You may record feedback from managers, colleagues, clients or other professional contacts. This may include names, roles, feedback text, dates and contextual information. We suggest describing people by role (“Manager”, “Peer”) rather than by name.
Please only include information that you are authorised to record and use. Avoid uploading confidential employer records, sensitive information about other people or material that you do not have permission to process.
3.4 AI-related information
When you use Winfolio’s AI-powered features, we process:
- The achievements, goals or feedback you select for AI assistance.
- Instructions and additional context you provide.
- AI-generated rewrites, summaries, suggestions and drafts.
- AI usage records: which feature was used, when, how large the request was and which of your records it used, never the text itself.
AI functionality may help you clarify accomplishments, identify missing evidence, structure professional stories and prepare career documents.
3.5 Technical and usage information
When you access Winfolio, we and our providers may process technical information such as:
- Your IP address and, where enabled, approximate location derived from it.
- Browser, operating system and device information.
- Authentication and session events.
- Application errors and security logs.
- Feature usage information needed to maintain or improve the service.
The exact categories depend on the hosting, authentication, analytics and monitoring tools enabled. No analytics tools are enabled today.
3.6 Voice input
You may choose to dictate achievements, goals or feedback by pressing Dictate. Voice input uses the speech recognition built into your browser, so your browser sends the audio to its maker to turn it into text (Google for Chrome and Edge, Apple for Safari), under their own privacy terms. Winfolio never receives or stores audio. Only the text comes back, into the box, for you to edit before saving.
3.7 Visiting our homepage, requesting an invitation or emailing us
You don’t need an account to read our homepage, and it doesn’t ask for your details. We don’t measure visits to it. Netlify still handles technical details such as your IP address to deliver the page.
If you ask for an invitation, you fill in a form run by Google. It asks for your name and email address, and your phone number if you choose to give it. We use these only to manage invitations and contact you about yours.
If you email us, for example for help, we receive your email address and whatever you write. We use these only to reply and follow up. Your message is held by our email provider.
4. How We Use Your Information
We process personal information to:
- Create, authenticate and manage Winfolio accounts.
- Store and organise your professional achievements, goals and feedback.
- Display your personal dashboard and progress information.
- Generate AI-assisted drafts and career narratives when requested.
- Enable document creation, editing and export.
- Maintain platform performance, security and reliability.
- Enforce daily AI limits and prevent misuse.
- Manage invitation requests.
- Respond to support requests and service enquiries.
- Detect abuse, unauthorised access and technical failures.
- Meet applicable legal obligations.
- Fix problems and improve the service using the technical and usage information above.
We do not make your private career records publicly available merely because you create an account.
5. Our Legal Bases for Processing
Where UK GDPR or EU GDPR applies, our legal bases may include:
- Contractual necessity: to provide the account and application features you request.
- Legitimate interests: to protect the service, prevent misuse, troubleshoot errors, maintain an effective platform, manage invitation requests and answer your emails, where those interests are not overridden by your rights.
- Legal obligations: to comply with applicable laws and lawful requests.
- Consent: where required for optional cookies, marketing communications or other processing that requires your permission. We don’t use optional cookies or send marketing today.
The applicable legal basis depends on the purpose and circumstances of processing.
6. How Winfolio Uses Artificial Intelligence
Winfolio uses AI to support professional writing and reflection, not to replace your judgement.
AI-assisted features may help you:
- Rewrite achievements in clearer, more professional language.
- Identify opportunities to describe impact and measurable results.
- Prepare performance review summaries.
- Create CV bullets and interview examples.
- Organise evidence for promotion or career conversations.
- Summarise relevant achievements and feedback.
AI-generated content may be incomplete, inaccurate or unsuitable for a particular situation. You are responsible for reviewing and approving AI-generated material before relying on, exporting or sharing it.
Winfolio is designed to preserve the distinction between your original information and AI-generated suggestions. AI should not invent accomplishments, metrics, dates or outcomes.
AI service provider
Our AI provider is Anthropic (Claude). It receives only the records needed for the AI feature you press, sent from our server, and only when you actively request that feature. Feedback you mark private is never sent. You can switch AI off in Settings → Preferences.
Under Anthropic’s commercial terms this data isn’t used to train its models. Anthropic may keep it for a limited period for safety and abuse monitoring.
Winfolio will not use your identifiable career records to train its own AI models without providing appropriate notice and obtaining consent where required.
8. Your Privacy and Control
Your Winfolio workspace is intended to be private to your account unless you deliberately export or share information.
Winfolio uses authentication and database access controls designed to prevent one user from accessing another user’s records.
You control the professional information you choose to record and the content you decide to export or share outside the application.
Once you download or share a document outside Winfolio, the recipient’s handling of that copy is outside our direct control.
Winfolio is not intended to give your employer automatic access to your personal workspace.
9. Data Security
We take reasonable technical and organisational measures to protect personal information. Our security approach includes:
- Authentication and protected application routes.
- User-level database access restrictions using Supabase Row Level Security.
- Encrypted network connections.
- Access controls for private files and storage.
- Restricted access to service credentials.
- Server-side handling of sensitive AI service credentials, so they never reach your browser.
- Security monitoring, updates and vulnerability remediation, where implemented.
No internet-based service can guarantee absolute security. If a breach ever affected your data, we would tell you and the regulator as the law requires.
10. Data Retention
We retain personal information for as long as reasonably necessary to provide Winfolio, maintain security, meet legal obligations and resolve legitimate disputes. Generally:
- Account and profile information is retained while the account remains active.
- Achievements, goals, feedback and saved documents remain available until you delete them or delete your account, subject to applicable exceptions.
- Technical and security logs are kept by our providers for a limited period and, where enabled, according to documented operational schedules.
- Backup copies may remain temporarily in our database provider’s backups until those backups expire.
- Invitation requests and emails you send us are kept only as long as we need them to manage invitations, reply and follow up.
- Information that must legally be retained may be kept for the required period.
11. Your Data Protection Rights
Depending on your location and applicable law, you may have the right to:
- Request access to your personal information.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Request a portable copy of eligible information.
- Restrict certain processing activities.
- Object to processing based on legitimate interests.
- Withdraw consent where processing depends on consent.
- Lodge a complaint with an applicable data protection regulator.
Much of this is built in: edit any record in the app to correct it, and use Settings → Privacy & data → Export your data to get a copy. For anything else, contact info@techbor.co.uk.
We may need to verify your identity before responding. Requests will be handled within applicable legal timeframes.
If you are in the United Kingdom, you may also contact the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put it right first.
12. Account Deletion
You can delete your Winfolio account and associated personal information yourself in Settings → Privacy & data. If you can’t get into your account, contact info@techbor.co.uk.
Deleting your account permanently removes your records and files straight away, and can’t be undone. Copies may remain in backups until those backups expire, as explained in Section 10, and we may keep information we must retain for legitimate legal, security or compliance reasons.
14. International Data Transfers
Your Winfolio records are held in London, but some of our service providers may process information outside the UK, including when you use AI features.
Where applicable law requires safeguards for international transfers, we rely on appropriate mechanisms, such as adequacy regulations, contractual safeguards or other lawful transfer arrangements, as set out in those providers’ terms.
15. Sensitive and Confidential Information
Winfolio is designed for professional achievement tracking and career development.
Please avoid entering sensitive personal information, confidential employer information, trade secrets, customer records or third-party personal information unless you are authorised to do so and it is necessary for your use of the service.
If you voluntarily include sensitive information, it may be processed as part of the feature you request. Winfolio does not require sensitive personal information to deliver its core achievement-tracking features.
16. Children’s Privacy
Winfolio is intended for professional and career-development use by working adults. It isn’t intended for anyone under 18.
We do not knowingly seek personal information from children who are not eligible to use the service.
17. Third-Party Websites
Our website may contain links to external websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their policies before providing information.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the service, technology, legal requirements or our data practices.
The current version will be published on our website with an updated effective date.
Where changes materially affect your rights or how we use your information, we will tell you in the app before they take effect.
19. Contact Us
For privacy questions, data requests or concerns, contact:
Winfolio
Legal operator: Techbor Consulting
Email: info@techbor.co.uk
Website: winfolio.io
We will respond in accordance with applicable legal requirements.