Privacy Policy

Last updated: February 2026

This Privacy Policy describes how the WAN-IFRA WIN Programme ("we", "us", or "our"), headquartered in Paris, France, collects, uses, and shares your personal data when you use the WIN Gender Balance Tracker service.

1. Data Controller

The data controller responsible for your personal information is the WAN-IFRA WIN Programme. For any privacy-related inquiries, you can contact us at [email protected].

2. Types of Personal Data Collected

We collect the following types of data:

  • Account data: email address, password (hashed securely), and full name.
  • Usage data: analysis jobs metadata, such as URLs submitted and timestamps.
  • Article content: the text of articles you submit for analysis, which is sent to the Google Gemini API for processing.

3. Third-Party Data Processors

To provide our services, we use the following third-party processors:

  • Google LLC (Gemini API): Receives the article text specifically for gender balance analysis. No personally identifiable information (PII) from your account is sent to Google.
  • Supabase: Provides database hosting and authentication services, storing your account data and analysis results.

Image Processing (Opt-in)

Image processing is triggered only when you explicitly enable 'Also analyze images' on a submission. When enabled, image bytes together with their alt text and captions are sent to Google Gemini for multimodal analysis along with the article text. Per Google's paid Gemini API terms, prompts and responses are not used to improve Google products; Google may log and retain them for limited periods for abuse, security, and legal purposes. Our database caches the resulting image analysis for up to 30 days (90-day absolute maximum) so the same image set is not re-sent to Gemini on repeat submissions; the article text portion is always re-analyzed.

4. Legal Basis for Processing

We process your personal data based on your consent when you sign up for an account, and our legitimate interest in operating, securing, and improving our service.

5. Data Retention

  • Account data: Retained as long as your account is active. Deleted within 30 days of receiving an account deletion request.
  • Analysis results: Retained for 12 months for historical comparison, then automatically deleted.
  • Article text: Processed in real-time by the analysis API and not permanently stored.

6. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, or erase your personal data. You may also request data portability, restrict processing, object to processing, or withdraw your consent at any time.

To exercise any of these rights, please contact us at [email protected].

7. Cookie Policy

We use essential cookies strictly for authentication and session management. We do not use tracking cookies or third-party marketing cookies.

8. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users via email.