Privacy policy

Windshield is operated by Windshield Software LLC, a Delaware limited liability company. This policy covers usewindshield.com and the Windshield app. For the short, practical version, see Your data.

Information we collect

• Account information — your email address, collected when you sign in.
• Content you provide — the visit transcripts you record or type, and the business context you enter in Settings.
• Usage information — product events such as creating a write-up or copying a card, plus standard server logs including IP address and browser type.
• Billing information — handled by Stripe. We store only a Stripe customer identifier and your subscription status.

How we use it

To provide the service, to generate your write-ups, to bill you, to answer your support requests, and to understand which parts of the product are used so we can improve them. We do not sell your information and we do not serve advertising.

Service providers

We share information with the vendors needed to run the product:

• Deepgram — speech to text. Receives your audio.
• Anthropic — write-up generation. Receives your transcript and the context you set in Settings.
• Supabase — database and authentication, hosted in Canada.
• Vercel — application hosting.
• Stripe — payment processing.
• Resend — sign-in emails.
• Google Workspace — our support inbox.

Each receives only what it needs. We do not use advertising networks, third-party analytics, or session-recording tools.

Model training

We do not use your content to train machine learning models.

Deepgram processes audio to create the transcript. Windshield opts every transcription request out of Deepgram’s Model Improvement Program, so those requests are not used for model training.

Anthropic processes the transcript and relevant context to generate your write-up. Anthropic does not use commercial API inputs or outputs to train its models.

How long our providers hold things

Deleting something in Windshield removes it from our database, but our providers hold copies briefly as part of processing, and we want to be straight about that rather than imply it vanishes everywhere at once.

Under Anthropic’s standard API retention policy, API inputs and outputs are generally deleted within 30 days, subject to limited legal and safety exceptions. Content flagged by their safety systems may be retained longer under those exceptions.

For opted-out requests, Deepgram retains data only as long as necessary to process the transcription.

Retention

We keep your transcripts and write-ups until you delete them or delete your account. Deleting your account removes them from our live database immediately, and we do not restore deleted accounts. Copies may persist for a limited period in routine backup snapshots until those snapshots expire, and content already sent to our providers follows their retention periods described above.

We never store your audio. For opted-out requests, Deepgram retains audio only as long as necessary to process the transcription. If you record without a signal, the audio is held on your own device until it uploads, then deleted from the device.

Your choices

You can view, edit and delete your content in the app. You can request access to, correction of, or deletion of your personal information by emailing support@usewindshield.com. Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR; we honour those requests regardless of where you live.

Security

Data is encrypted in transit and at rest. Access to your records is enforced at the database level, per account. No system is perfectly secure, and we will notify affected users promptly if we learn of a breach involving their information.

Children

Windshield is a business tool and is not directed to anyone under 18.

Changes

If we make a material change we will email account holders before it takes effect. The date at the top always reflects the current version.