This notice explains how Winnow, run by Nexus Kreations Studios ("we", "us"), handles personal information when you use this website. We are the responsible party for this information under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. What we collect, and why

• Messages you send us. When you use the contact form or the Enterprise enquiry form, we collect your name, email address and message. We use them to reply to you. They are saved in our database, shown to our team in our admin console, and emailed to our team as an alert.
• Photos you try in the live demo. These are the JPEG files you choose to upload. We use them only to give you the demo results (see section 2).
• Your Lightroom preset, if you add one. A preset (.xmp) file is read inside your own browser to build the files you download. It is not uploaded to us.
• A visitor cookie and a network count. These limit the free demo to 4 tests a day (see section 3).
• Technical logs. Our hosting and network providers record basic details of each request, such as your IP address, the time and the page requested, to keep the site secure and running.
• If you buy a plan. Payments are handled by Paystack, which collects your payment details directly. We do not see or store your full card details. We keep the name, email address and plan we need to set up and support your account.

2. Your photos and the AI

When you run the demo, each photo is sent over an encrypted connection to our server, which passes it to Anthropic, the company behind the Claude AI model. Anthropic analyses the photo and returns a verdict, which we show you. We do not save your photos and we do not keep a copy of your demo results. Anthropic handles the photo under its own terms and privacy policy. We do not use your photos to train any AI model.

Only upload photos you have the right to share. If a photo shows other people, make sure you are allowed to share it, and please do not upload sensitive images such as photos of children, identity documents or private documents.

3. The cookie and the daily limit

The demo sets one small cookie called wnw_v. It holds a random ID and lasts up to a year. We use it only to count your 4 free tests a day. It is not used for advertising or to follow you across other sites. As a safety net against abuse we also keep a daily count of demo photos per network (IP) address, and these counts are deleted after about a week. You can block or clear the cookie in your browser at any time, but the demo will then treat you as a new visitor.

4. Who we share information with

We use a small number of service providers to run Winnow. They handle information on our behalf and only for that purpose:

• Render hosts this website and our database (servers in the United States).
• Cloudflare provides network and security services in front of the website, and delivers a file-zipping script used on the demo page.
• Anthropic analyses the photos you try in the demo (United States).
• Resend delivers the email alerts our team receives about new enquiries. These include the name, email address and message you sent.
• Afrihost hosts our domain and business email in South Africa, where messages sent to info@winnowai.co.za are stored.
• Paystack processes payments, if you buy a plan.

We do not sell your personal information. We may disclose information if the law requires us to.

5. Information leaving South Africa

Several of these providers operate outside South Africa, mainly in the United States. When you use the demo or send us a message, your information is processed there. We choose established providers and take reasonable steps to make sure your information is protected wherever it is processed.

6. How long we keep it

• Enquiries: for as long as we need them to reply and follow up. We delete them when you ask us to.
• Demo photos and results: not kept by us.
• Demo counters: about a week.
• The visitor cookie: up to a year, or until you clear it.
• Provider logs: kept by our providers under their own retention periods.

7. Security

The website uses an encrypted (HTTPS) connection. Access to the information we hold is limited to authorised members of our team, who sign in with personal logins. No system is completely secure, so we cannot promise absolute security, but we take reasonable steps to protect your information.

8. Your rights

Under POPIA you may ask us to confirm whether we hold personal information about you, to give you a copy, to correct it, or to delete it. You may also object to us processing it, or withdraw your consent where we rely on it. To do any of this, email info@winnowai.co.za and we will respond within a reasonable time. If you are unhappy with how we handle your information, you can complain to the Information Regulator (South Africa).

9. Children

Winnow is intended for professionals and businesses. It is not directed at anyone under 18.

10. Changes to this notice

We may update this notice from time to time. The date at the top of the page shows when it was last changed.

11. Contact

Questions about this notice or your information: info@winnowai.co.za. You can also use the phone numbers on our contact page.