← Back to windyconnect.com

Privacy Policy

Effective 2026-08-10 · previous version effective 2026-05-21

Windy Connect (the windy CLI + the orchestrator Worker at api.windyconnect.com) is the agent-onboarding kernel of the Windy ecosystem. This policy describes what data we collect when you pair your agent with us, how we use it, and how to get rid of it.

What we collect

• Your email address — needed to send the magic-link pair confirmation, and to create your Windy Mail mailbox if you pair on the credentialed (Passport) tier. The free tier gets no mailbox.
• An ephemeral pair-session token — a 15-minute device code generated by your CLI and shown in your browser. Stored only for the duration of the pair flow, then deleted.
• An Eternitas Passport ID — a string of the form ET26-XXXX-XXXX that identifies your paired agent.
• Cloudflare access logs — standard request logs at our edge: IP address, user-agent, path, status code. Retained ≤30 days, used only for abuse detection.
• If you choose "Continue with Google" — we receive the email address on your Google account and its stable account identifier (the sub claim) from a Google-signed ID token, which we verify against Google's public keys. We request only the openid, email, and profile scopes. We never see your Google password and we cannot read your Gmail, Drive, or anything else.

We do not collect: your real-world identity (only the email you choose to use), your messages, your agent's outputs, billing information (Windy Connect itself is free), or any browsing data outside the pair flow.

How we use it

• To deliver the magic-link pair confirmation via Resend.
• To mint an Eternitas Passport Token (EPT) — a JWT that lets your agent authenticate to other Windy services.
• To provision your Windy Chat identity and, on the credentialed (Passport) tier, your Windy Mail mailbox (Stalwart server behind api.windymail.ai).
• To diagnose service issues from the access logs above.

We do not: sell or share your email with third parties; serve ads; profile you; train AI models on your data.

How long we keep it

• Pair session (15 min) — deleted automatically by the Durable Object's TTL.
• Eternitas Passport — for as long as you want. Run how to delete below to revoke.
• Mailbox contents — controlled by Windy Mail, not Windy Connect. See the Windy Mail privacy policy when published.
• Access logs — 30 days max at Cloudflare's edge.

How to delete your data

The windy CLI ships with a one-command reversal:

windy disconnect --yes

This:

• Deletes every file we wrote on your machine
• Strips every marker-bounded config block we touched
• Marks your Eternitas Passport for revocation

For full account deletion (mailbox + passport + audit trail), email [email protected]. We respond within 7 business days; deletion completes within 30.

Subprocessors

We use the following service providers to operate Windy Connect. We have data-processing agreements with each:

• Cloudflare, Inc. — edge hosting + DNS for *.windyconnect.com and the orchestrator Worker
• Resend — transactional email delivery for the magic-link pair confirmation
• Amazon Web Services — Stalwart mail server, Synapse Matrix homeserver (Windy Chat), Eternitas registry
• GitHub, Inc. — public source code repository
• PyPI — Python package distribution

Who is responsible for your data

The data controller is Windstorm Labs LLC, a limited liability company registered in Utah, United States. Privacy questions go to [email protected], which reaches the people who actually run the service.

Two things we'd rather state plainly than leave you to guess: we have not appointed a Data Protection Officer, and we have not appointed an EU or UK representative under Article 27 GDPR. We're a small early-stage project and haven't done either yet. If that changes, it will be written here.

If you are in the EU, the UK, or the EEA

The GDPR (and the UK GDPR) applies to you. Here is the same information as above, in the shape that law asks for.

Why we're allowed to process your data (legal bases, Art. 6):

• To give you what you asked for — sending the magic link, minting your passport, provisioning your mailbox, chat identity, and LLM key. Legal basis: performance of a contract (Art. 6(1)(b)). You started this by running windy connect.
• To keep the service up and unabused — the 30-day edge access logs, rate limiting, and blocking abuse. Legal basis: legitimate interests (Art. 6(1)(f)) — our interest in running a service that isn't overrun by spam, weighed against the fact that these are ordinary short-lived server logs.
• To comply with the law where we're required to keep or produce something. Legal basis: legal obligation (Art. 6(1)(c)).

We do not rely on consent for any of the above, because none of it is optional decoration — it is the service. There is no marketing processing to consent to: we don't send marketing email, we don't serve ads, we don't profile you, and we don't train AI models on your data.

Your rights. You can ask us to give you a copy of your data (access), correct it (rectification), delete it (erasure), pause our use of it (restriction), hand it to you or another provider in a portable format (portability), or object to processing we've based on legitimate interests. Where processing ever does rest on consent, you can withdraw it at any time without affecting what happened before. Email [email protected] — we respond within 7 business days and complete within 30 days, and we don't charge for it. Much of this you can do yourself in one command; see how to delete your data.

Complaints. If you think we've handled your data badly, please tell us first — but you have the right to complain to your national data protection authority regardless, without going through us. In the UK that is the Information Commissioner's Office; in the EU it is the supervisory authority for the country you live or work in.

Automated decision-making. We do not make automated decisions with legal or similarly significant effects about you, and we do not profile you. Your Eternitas Passport carries an integrity score used for agent-to-agent trust — it describes your agent's conduct on the network, not you as a person, and it is not used to make decisions about you.

Where your data goes (international transfers)

We are a US company and our infrastructure is US-based: the Stalwart mail server, the Synapse chat homeserver, and the Eternitas registry run on AWS in the United States, and Cloudflare terminates requests at whichever of its edge locations is nearest you before forwarding them. So if you are outside the United States, using Windy Connect means your data is transferred to the United States.

Where our providers offer standard contractual clauses in their data-processing terms, those apply to our use of them. We want to be honest about the limits of that statement: we have not carried out a formal transfer impact assessment, we hold no privacy certification, and we are not self-certified under any transatlantic data privacy framework. If US-based processing is not acceptable to you, the right decision is not to pair.

Children's privacy

Windy Connect is not directed at children. We do not knowingly collect data from anyone under 13 (the US COPPA threshold), and we do not knowingly collect data from anyone under 16 in the EU or UK, where the age of consent for online services is 13–16 depending on the country. If we learn we have data from a child, we'll delete it.

Changes to this policy

We'll update the "Effective" date above and link to the previous version from the GitHub repo's CHANGELOG.md if anything material changes.

Contact

Email [email protected] for any privacy question. Security issues go to [email protected] per SECURITY.md.