Privacy Policy

This Privacy Policy explains how Wynlo Technologies LLC collects, uses, shares, and protects information when you use the Wynlo platform or visit our website. Wynlo is business software used by insurance professionals; much of the information on the platform is entered by our customers about their leads and clients, and we process that information to provide the Service to the customer who entered it.

1. Information we process

Information about you (our customer)

• Account identity: name, email address, verified mobile phone number, agency or business name, and password (stored in hashed form by our authentication provider).
• Billing: subscription status, billing metadata, and prepaid-credit account and transaction records. Payment card details are collected and held by Stripe, our payment processor — Wynlo does not store card numbers.
• Technical and session data: authentication cookies and session records, and standard server logs (such as IP address and request metadata) generated by operating the Service. When you take a legally significant action — such as accepting our terms or recording calling-permission evidence — the IP address and browser identifier presented with that action are retained as part of the durable evidence record of the action.
• Product usage: how the Service is used — which pages and features of Wynlo you open and use, when, and how many minutes a Wynlo tab is actively in use (a minute counts only while the tab is visible and you have recently clicked, typed or scrolled). On our public website we record page visits and clicks on sign-up links, together with the referring website and any campaign tags in the link, using a random identifier held only in that browser tab (not a cookie). We do not record keystrokes, the contents of forms, screen recordings, or the content of your leads, calls, transcripts or messages for this purpose.
• Business records you build in Wynlo: production statistics, book-of-business, policy, and commission records.

Information our customers enter about their contacts

• CRM records: lead and client names, phone numbers, email addresses, dates of birth, addresses, statuses, notes, and appointment details.
• Pre-application information gathered during insurance sales conversations, which can include health-related details — health conditions, medications, height and weight, tobacco use — and beneficiary information such as names, dates of birth, and relationships.
• Call records: call metadata (numbers, times, durations, outcomes); transcripts of calls made with Wynlo’s AI calling features (AI-assisted calls are transcribed to deliver the Service — Wynlo does not keep saved audio recordings of AI-assisted calls); live transcription generated during assisted calls; audio recordings of an agent’s own dialer calls where that account’s recording features are enabled (recording is off unless the agent turns it on); and AI-generated call analyses and coaching output.
• Carrier Qualification decision support: details a professional captures about a lead — including health-related details — may be matched against carrier underwriting reference criteria to produce producer-facing decision-support results, which are stored with that lead’s record. This guidance is reference material for the licensed professional only: it is not underwriting, not a carrier approval or eligibility determination, and the carrier remains the final authority.
• Calendar data for customers who connect Google Calendar — Wynlo syncs appointment events using a minimized format (a first name and last initial with the appointment time).

2. Why we process it

• To provide the Service: operating the CRM, placing and managing calls, generating transcripts and AI analyses, syncing calendars, computing statistics, and processing subscriptions.
• To secure the Service: authentication, fraud and abuse prevention, and audit records.
• To support customers and respond to requests.
• To meet legal obligations and enforce our terms.
• To understand how customers use the Service and to improve it, using product usage information. Authorized Wynlo staff may review an individual account’s usage — for example when supporting that customer or investigating a problem — and we also use aggregated, de-identified information.

Wynlo does not sell personal information, and does not use advertising trackers or third-party marketing pixels on the platform or the website. The only cookies we use are those necessary to operate the Service (such as sign-in sessions).

3. Who helps us process it

Wynlo runs on carefully chosen service providers — for hosting, database and authentication, telephony, AI calling, transcription, AI analysis, payments, and calendar sync. The current list and each provider’s role is published on the Subprocessors page. Providers receive only the information needed for their function, and we do not permit them to use it for their own marketing. Calls made with AI and transcription features are processed by our telephony, AI, and transcription providers as part of delivering those features — including the live call audio those features require. Our service providers may process information in the jurisdictions in which they operate; we do not represent that processing occurs only in a particular location.

4. How information is shared

• Within your account: the customer who owns a record controls it. Records are scoped to the owning account by row-level access controls.
• Service providers as described above.
• Wynlo operations: a small number of authorized Wynlo operators can access customer records where needed to run, support, and secure the platform; administrative changes are logged.
• Legal: we may disclose information where required by law, to protect rights and safety, or in connection with a business transaction such as a merger, in which case this policy continues to apply to the transferred information.

5. Security

We use industry-standard safeguards: encryption in transit, encryption at rest provided by our infrastructure providers, row-level access controls that scope records to the owning account, verified email and phone at signup, server-side authorization on privileged operations, and audit logging of administrative actions. No system is perfectly secure, and we do not claim particular certifications; we describe here only what we actually operate.

6. Retention and deletion

We retain information while an account is active so the customer’s business records — including call transcripts and compliance-relevant records — remain available to them. Insurance sales records often carry multi-year retention expectations under state law, which is reflected in how long call and consent-related records are kept. We are candid that Wynlo does not currently publish a fixed retention schedule; when we adopt one, this policy will be updated to state it. To request deletion of specific records or an account, contact info@wynlo.io — we will act on verified requests consistent with applicable law and with legal record-keeping duties.

7. Your privacy rights

Depending on your state, you may have rights to access, correct, delete, or obtain a copy of personal information, and to opt out of certain processing. Consumers whose information was entered by a Wynlo customer should ordinarily direct requests to that business — the insurance professional they spoke with — since it controls those records; we support our customers in fulfilling such requests. You can submit any request to info@wynlo.io; we may need to verify your identity, and we will not discriminate against you for exercising your rights.

Health-related information. Pre-application details can include health-related information, which several states treat as sensitive and subject to specific consent and deletion rights. Wynlo processes that information solely to provide the Service to the customer who collected it, and publishes a dedicated Consumer Health Data Privacy Policy covering it. Wynlo is not a healthcare provider or health plan, and the Service is not a HIPAA-covered service.

8. Recordings and transcripts

Calls placed with Wynlo’s calling features can be transcribed and, where recording features are used, recorded. Customers are responsible for complying with the notice and consent laws that apply to recording, monitoring, and transcription in their and their contacts’ jurisdictions, as described in the Communications Compliance terms.

9. Children

The Service is professional software for adults. We do not knowingly collect information from children under 13, and accounts may only be created by people 18 or older.

10. Changes and contact

We will update this policy as the Service evolves; each version carries a version number and effective date, and material changes will be notified. Previous version: version 1.0 (effective 2026-08-21). Questions and requests: info@wynlo.io.