Privacy Policy
Effective date: November 2026
Who we are
Windgate is a venture of Caydev Innovations Limited ("Windgate," "we," "us," or "our"), located in Grand Cayman, Cayman Islands. We are the data controller for this website, which lets you join our early-access list. This policy explains how we handle personal information collected through it, and through the WhatsApp connection described under "WhatsApp data," where we handle customer messages on behalf of the connected business. You can reach us at support@caydev.com.
What we collect and why
This section covers this website and its early-access list. We collect only what we need to run the early-access list and to keep the site running and secure:
| Data | Why we collect it | Lawful basis | Processor | How long |
|---|---|---|---|---|
| What you tell us when you join the early-access list: your business email (all you give us on the home page) and, on the early-access page, your business name, type of business, whether you are based in Cayman, whether you are the owner or decision-maker, your biggest customer-contact headache, and (if you answer) whether you would like to be considered for a pilot | To send you early-access updates and, if you asked for one on the early-access page, your free guide, to follow up with you personally by email, and to decide which businesses to invite to a pilot | Consent | Resend (resend.com) | Until launch + 12 months, or until you unsubscribe or ask us to delete it. If you unsubscribe, within 30 days we delete your form answers and keep only your email address marked as unsubscribed, so a later form submission won't sign you up again |
| Where you found us (the campaign tags in the link you followed, such as "facebook" or the post's name), saved with your sign-up | To learn which posts and channels are useful to people, so we post less of what isn't | Consent (given with your sign-up) | Resend (resend.com) | As above |
| A copy of your form answers in an internal alert email to our team | So we can follow up with you personally | Consent | Resend (sending) and our email provider, Google Workspace | Deleted within 30 days of you unsubscribing or asking us to delete your data |
| Server logs (IP address, browser/user-agent, timestamp) | Security and operating the website | Legitimate interest | Vercel (vercel.com) | Per Vercel's default retention |
| Analytics (page views, events). See "Cookies and analytics." | To understand how the site is used | Consent (cookie) | Google Analytics 4 | Per GA4's default retention |
We do not collect special-category data, and the site is not directed to children under 18.
Cookies and analytics
We intend to use Google Analytics 4 to understand how visitors use this site. Analytics may not be active when you first visit; we will only set analytics cookies after you have given consent through the cookie banner that appears when analytics is enabled. Beyond any essential functionality, this site sets no advertising or tracking cookies. When you type your email on the home page, or follow a link with campaign tags, the site keeps them in your browser's temporary session storage just long enough to fill in the early-access form; this storage is cleared when you close the tab and is never sent anywhere except with your sign-up. You can also control cookies through your browser settings.
WhatsApp data
This section applies when a business connects a WhatsApp Business number to Windgate through Meta's WhatsApp Business Platform. It does not apply to the early-access list described above.
When a business uses Windgate, that business decides how its customers' messages are used, and we handle them on its behalf. If you message a business that uses Windgate, you can also contact that business directly about your data.
What we access
- From the connected business: its WhatsApp Business account and phone number identifiers, display name, message templates, and the quality and status information Meta provides for the number.
- From people who message that business: their phone number or WhatsApp user ID, profile name, the content of their messages (text, photos, documents, audio, location and contacts they choose to send), and the time of each message.
- From the business's replies through Windgate: the reply content, and whether it was sent, delivered, read or failed.
How we use it
We use this data only to show each conversation to the business in Windgate, let the business reply and manage its message templates, and keep the service running and secure. We do not send WhatsApp messages to an AI model today. If we add summaries or suggested replies for WhatsApp, we will update this policy first and name the provider.
Our commitments
- We do not sell WhatsApp data or use it for advertising.
- We do not use it to train generalized machine-learning or AI models.
- We share it only with Meta, which operates WhatsApp and carries these messages under its own terms and privacy policy, with the service providers needed to run Windgate, and where the law requires it.
How long we keep it
Messages and files are kept for 365 days by default and then deleted. Contact details are kept until the business or an erasure request removes them. The access token for a connected number is kept until the business disconnects it.
Deletion
To ask us to delete WhatsApp data, email support@caydev.com and tell us the phone number or business concerned. We will respond within 30 days. Deleting data from Windgate does not remove messages from WhatsApp itself or from the other person's device.
How we share information
We do not sell, rent, or trade your personal information. We share it only with the processors listed above (Resend, Vercel, Google Workspace for our team's email, and Google Analytics when enabled) and, for WhatsApp data, with those named under "WhatsApp data," strictly to provide the service described, and with law-enforcement or regulators where we are legally required to do so. Each processor handles your data under its own terms and data-processing agreement with us.
Your rights
Under the Cayman Islands Data Protection Act (2021 Revision), you have the right to:
- Access the personal information we hold about you;
- Have inaccurate information corrected (rectification);
- Request erasure of your personal information;
- Stop or restrict our processing of your information; and
- Withdraw consent at any time (for example, by unsubscribing).
To exercise any of these rights, email support@caydev.com. Every update email includes a one-click unsubscribe link, and you can reply to any email from us to stop further contact.
Data security
We use reasonable technical and organisational measures to protect your information.
Changes to this policy
We may update this policy from time to time. We will post the revised version here and update the effective date above.
Contact
Questions about this policy or your data: support@caydev.com · Caydev Innovations Limited, Cayman Islands.