Data Processing Addendum
Wind Stream Privacy Notice
Last Updated: September 10 2026
This Privacy Notice describes how Wind Stream, Inc. ("Wind Stream," "we," "us," or "our") collects, uses, and shares personal information in connection with our website at windstream.ai (the "Website") and our services (collectively with the Website, the "Services").
1. TWO CATEGORIES OF PROCESSING
Wind Stream processes personal information in two different capacities, each subject to different terms:
1.1 As a controller. Wind Stream is the "controller" (or, under U.S. laws, the "business") for personal information we collect directly and use for our own purposes — for example, information about visitors to the Website, marketing contacts, waitlist signups, job applicants, individuals granted evaluation or beta access to our platform outside of a signed subscription ("Non-Customer Users"), and administrative contacts at customer organizations. This Privacy Notice governs our processing of that information.
1.2 As a processor. When a customer organization has executed a Wind Stream Software Subscription Agreement or other written subscription agreement (an "MSA"), Wind Stream is the "processor" (or "service provider") for personal information contained in that customer's data on our Platform. Our processing of that information is governed by the MSA and the Wind Stream Data Processing Addendum published at windstream.ai/legal (the "DPA"), not by this Privacy Notice. If you are an Authorized User of a Wind Stream customer, that customer's own privacy notice — and not this Privacy Notice — governs the personal information you provide through the Wind Stream Platform. Questions or requests relating to that data should be directed to that customer.
2. PERSONAL INFORMATION WE COLLECT
We collect the personal information described below in our capacity as a controller.
2.1 Information you provide to us directly.
Account and contact information. When you sign up for the Wind Stream Platform, request a demo, contact sales, subscribe to a mailing list, apply for a job, or otherwise interact with us, we may collect your name, email address, employer, role, phone number, and similar contact details.
Communications with us. If you email us or fill out a form on our Website, we collect the content of those communications, along with any information you choose to include.
Non-Customer User Platform Content. If you are granted access to the Wind Stream Platform outside of an MSA (for example, as a beta or evaluation user), we collect the content you submit to or generate through the Platform, subject to the Wind Stream Terms of Use.
Payment information. Payments processed through the Wind Stream Platform are handled by our third-party payment processor. We do not directly collect or store payment card numbers, though we may receive billing details associated with your payment.
Job applications. If you apply for a role, we collect the information you provide in connection with your application (contact details, resume, work history, and similar materials).
2.2 Information we collect automatically.
Device and browser information. When you use the Website, we may automatically collect information about your device and browser, including IP address, browser type, operating system, referring URLs, and language preferences.
Usage information. We collect information about your interactions with the Website, such as pages viewed, links clicked, features used, and time spent.
Cookies and similar technologies. See Section 6 below.
2.3 Information from third parties.
We may receive information about you from third-party sources, such as social networks you use to interact with us, marketing partners, service providers who help us with fraud prevention or lead qualification, and public sources.
3. HOW WE USE PERSONAL INFORMATION
We use personal information for the purposes described below.
3.1 Providing and improving the Services. We use personal information to operate the Website and the Wind Stream Platform, authenticate users, deliver features, respond to requests, and maintain and improve the Services.
3.2 Communications with you. We use your contact information to respond to your inquiries, provide customer support, send administrative or transactional messages (such as security alerts and updates to the Services), and, subject to your preferences, send you marketing communications about Wind Stream products and offerings.
3.3 Operating our business. We use personal information to operate our business, such as direct marketing, research and development (including product research), network and information security, fraud prevention, analytics, evaluating and managing job applications, and carrying out activities required to comply with legal obligations.
3.4 Marketing. We use personal information to send marketing communications about Wind Stream products, features, events, and offers. You can opt out at any time using the unsubscribe link in our emails or by contacting us at privacy@windstream.ai.
3.5 With your consent or at your direction. We use personal information (i) for purposes disclosed to you at the time of collection, (ii) with your consent, or (iii) as otherwise directed by you.
3.6 Compliance and enforcement. We use personal information to comply with applicable law, enforce our Terms of Use, MSAs, and other agreements, and protect the rights, property, or safety of Wind Stream, our users, and others.
4. HOW WE SHARE PERSONAL INFORMATION
We share personal information as described below.
4.1 Sub-processors and service providers. We share personal information with the sub-processors and service providers who help us operate the Services, including hosting, storage, email delivery, payment processing, communications, analytics, and customer support. A current list of the sub-processors that process Customer Materials on our behalf is available at windstream.ai/subprocessors. Sub-processors are contractually required to protect personal information consistent with this Privacy Notice and applicable law.
4.2 Third-party AI model providers. We transmit Customer Materials and Non-Customer User Platform Content to third-party AI model providers (specifically, Anthropic and OpenAI) for the purpose of generating outputs through the Wind Stream Platform. Under our agreements with these providers, they do not use such content to train or improve their models.
4.3 Third-Party Services you connect. The Wind Stream Platform allows users to connect to third-party services and integrations (such as GitHub, Figma, or Slack). When you or your organization connect to such a third-party service, information may be shared with or received from that third-party service according to your integration configuration and that third-party service's own privacy practices. We are not responsible for the privacy practices of any third-party service.
4.4 Wind Stream customer organizations. If you access the Wind Stream Platform as an Authorized User of a Wind Stream customer, information associated with your account and use of the Services is available to that customer organization, including account information, activity information, files you upload, and the contents of your interactions on the Platform. Your access is subject to that customer's own policies. We are not responsible for the customer's use of that information.
4.5 Legal and safety. We may share personal information with law enforcement, courts, regulators, or other third parties where we in good faith believe it is required by law or legally permissible for us to do so (including to respond to lawful requests, subpoenas, or court orders), to enforce our terms and agreements, to protect our or others' rights, property, or safety, or to prevent or investigate suspected fraud or unauthorized activity.
4.6 Business transactions. If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be shared or transferred as part of the transaction.
4.7 Affiliates. We may share personal information with our corporate affiliates for the purposes described in this Privacy Notice.
4.8 With your consent. We may share personal information with your consent or at your direction.
5. COOKIES AND TRACKING TECHNOLOGIES
We and our service providers use cookies, pixels, tags, and similar technologies to operate the Website, understand how it is used, and improve it. Cookies are small text files stored on your device by your browser. You can control cookies through your browser settings; however, disabling cookies may affect your ability to use certain features of the Website. We do not currently respond to Do Not Track signals or similar browser-based mechanisms. Some of the service providers we may use include:
Google Analytics. For more information about how Google uses your personal information, please visit Google Analytics’ Privacy Policy. To learn more about how to opt out of Google Analytics’ use of your personal information, please click here.
6. YOUR PRIVACY RIGHTS
6.1 Requests from individuals whose data Wind Stream controls. If you are a Website visitor, a Non-Customer User, a marketing contact, a job applicant, an administrative contact at a customer organization, or otherwise an individual whose personal information Wind Stream processes as a controller under this Privacy Notice, you may — depending on where you live — have the right to:
Request access to the personal information we hold about you;
Request correction of inaccurate personal information; and
Request deletion of your personal information.
To exercise any of these rights, contact us at privacy@windstream.ai. We will respond to verified requests within the timeframe required by applicable law and, where applicable law does not specify a timeframe, without undue delay and typically within thirty (30) days.
6.2 Requests from Authorized Users of Wind Stream customers. If you access the Wind Stream Platform as an Authorized User of a Wind Stream customer, that customer — not Wind Stream — controls your Platform data. Requests to access, correct, delete, or otherwise act on that data must be directed to your customer organization. Wind Stream does not process such requests from individual Authorized Users; we act only on the documented instructions of the customer as its processor. If you contact us directly, we will refer your request to the applicable customer.
6.3 Email marketing. You can opt out of marketing emails at any time using the unsubscribe link in any marketing message or by contacting us at privacy@windstream.ai. You will continue to receive non-marketing messages related to the Services (such as security or administrative notices).
6.4 Verification. We may need to verify your identity before responding to a rights request to protect the security of your personal information.
7. INTERNATIONAL TRANSFERS
Wind Stream is based in the United States, and personal information we process is primarily processed in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Where required by applicable law, we implement appropriate safeguards for cross-border transfers, including Standard Contractual Clauses.
8. SECURITY
We implement administrative, technical, and organizational measures designed to protect personal information appropriate to the risk of processing. However, no method of transmission or storage is completely secure, and we cannot guarantee the security of personal information. For information about Wind Stream's security posture, please contact us or, for enterprise customers, refer to your MSA and any accompanying security materials.
9. RETENTION
We retain personal information as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements, in accordance with our internal Data Management Policy. Retention periods depend on the type of information and the purpose of processing. For example, personal information collected for marketing purposes is retained until you opt out or the information is no longer needed for that purpose; personal information associated with an active account is retained for the duration of the account relationship; and personal information related to financial transactions is retained for the period required by applicable tax and financial-records laws.
For Customer Materials processed by Wind Stream on behalf of a customer under an MSA, retention is governed by that MSA and the DPA. Following termination of a customer subscription, Wind Stream deletes Customer Materials from the production environment in accordance with the timelines set forth in the MSA and its DPA (typically within thirty (30) days after a data-return period), subject to retention required by law or in backups pending routine overwrite.
10. CLI AND CLIENT SOFTWARE
Wind Stream offers a command-line interface (the wind CLI) and other client software that authenticated users can install on their own devices. When a user authenticates the CLI to a Wind Stream account and initiates a Wind Stream coding session (via wind up or equivalent), trace logs of that session — which may include transcripts of the user's activity on their local device — may be transmitted to Wind Stream in connection with the Services. These trace logs are treated as Customer Materials under the MSA (for MSA-covered users) or as Non-Customer User Platform Content under the Terms of Use (for Non-Customer Users), and are subject to the same handling, deletion, and retention terms as other content in that category. Trace logs are collected only after a user authenticates the CLI and initiates a coding session.
11. CHILDREN'S PERSONAL INFORMATION
The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, contact us at privacy@windstream.ai.
12. CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time. If we make material changes, we will provide notice — for example, by posting the updated Privacy Notice at windstream.ai/legal with an updated "Last Updated" date and, where appropriate, by providing additional notice such as an email or on-site banner. Non-material changes (such as typographical corrections) will take effect upon posting.
13. CONTACT US
Wind Stream, Inc. is the controller of the personal information we process under this Privacy Notice.
For questions about our privacy practices, this Privacy Notice, or to exercise your rights, contact us at:
Email: privacy@windstream.ai
Mail: Wind Stream, Inc., San Francisco, California, USA