Legal
Privacy Policy
Last updated: August 18, 2026
This Privacy Notice for Winnow, Inc. ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at mywinnow.com, use the Winnow application, connect Winnow to an assistant such as ChatGPT or Claude, or engage with us in other related ways, including marketing or events.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at support@mywinnow.com.
Summary of Key Points
- What do we process? Account information you give us, usage information collected automatically, and farm operation data imported from sources you connect, such as John Deere Operations Center.
- Do we collect information from third parties? Yes. When you connect your farm, we import data from John Deere and enrich it with public weather, satellite, soil, and elevation sources.
- Do we sell personal information? No. We also do not share it for targeted advertising.
- How long do we keep it? No longer than 30 days after your account is terminated.
- Your rights. Depending on where you live, you can request access, correction, deletion, or a copy of your personal information — the easiest way is a data subject access request.
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you register on the Services, express interest in our products, or contact us. This may include:
- names
- email addresses
- phone numbers
- contact or authentication data
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.
Information collected automatically
We automatically collect certain information when you visit, use, or navigate the Services: log and usage data such as your IP address, browser and device characteristics, operating system, referring URLs, and information about how and when you use the Services. We collect this through cookies and similar technologies, and through our product analytics. It is primarily needed to maintain the security and operation of the Services and for internal analytics.
Information from connected farm systems
When you connect a farm system such as John Deere Operations Center, we import farm operation data on your authorization: fields, crop seasons, planting, application, harvest, equipment, and related agronomic records. We enrich it for your fields with weather data (NOAA AORC, MRMS, and RTMA), satellite imagery (Sentinel-2), soil data (USDA SSURGO), and elevation data (USGS).
Assistant integrations
When Winnow is used through an integration such as the ChatGPT or Claude connector, we may receive tool-call inputs and metadata needed to answer your request, including scoped SQL queries generated for your farm data, the optional question text supplied by the host assistant, result counts, timestamps, and authenticated user identifiers.
Google API
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2. How Do We Process Your Information?
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. Specifically:
- To create and manage your account, including authentication.
- To deliver the Services — answering farm-data questions, generating analyses, and keeping your farm's data surface current.
- To send administrative information, such as changes to our terms and policies.
- To evaluate and improve our Services. This includes using farm operation data to develop, train, and improve the models and analyses that power Winnow; model outputs do not disclose your identifiable farm data outside Winnow.
- To comply with our legal obligations and defend our legal rights.
6. How Long Do We Keep Your Information?
We keep your personal information only as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us to keep your personal information for longer than 30 days after your account is terminated. When we have no ongoing legitimate business need to process it, we will delete or anonymize it — or, where that is not possible (for example, backup archives), securely store it isolated from further processing until deletion is possible.
7. How Do We Keep Your Information Safe?
We use technical and organizational safeguards designed to protect the information we process, including access controls, authentication, scoped service credentials, and environment-specific data boundaries. However, no electronic transmission or storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk.
8. Do We Collect Information From Minors?
We do not knowingly collect data from or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data. If you become aware of any data we may have collected from children under 18, contact us at support@mywinnow.com.
9. What Are Your Privacy Rights?
You may review, change, or terminate your account at any time. If we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time by contacting us; this will not affect the lawfulness of processing before the withdrawal. Upon a request to terminate your account, we will deactivate or delete your account and information from our active databases, though we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, or comply with legal requirements.
Most web browsers accept cookies by default; you can usually set your browser to remove or reject them, though this may affect certain features of the Services. Questions about your privacy rights can be emailed to support@mywinnow.com.
10. Controls for Do-Not-Track Features
Most web browsers include a Do-Not-Track ("DNT") feature you can activate to signal that you prefer not to have your online browsing monitored. No uniform standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to them. California law requires us to say how we respond to DNT signals: because there is no industry or legal standard, we do not respond to them at this time. If a standard we must follow is adopted, we will describe it in a revised version of this notice.
11. Do United States Residents Have Specific Privacy Rights?
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and details about the personal information we maintain about you, correct inaccuracies, get a copy of it, or delete it, and to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law.
Categories of personal information we collect
The table below shows the categories of personal information we have collected in the past twelve (12) months, with illustrative examples.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, postal address, telephone number, unique personal identifier, online identifier, IP address, email address, account name | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information | YES |
| C. Protected classification characteristics under state or federal law | Gender, age, race and ethnicity, national origin, marital status | NO |
| D. Commercial information | Transaction information, purchase history, payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Interactions with our websites and applications, usage and log data | YES |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings | NO |
| I. Professional or employment-related information | Business contact details, job title, work history | NO |
| J. Education information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Profiles or summaries about an individual's preferences | NO |
| L. Sensitive personal information | Precise geolocation, government IDs, biometric data | NO |
We may also collect other personal information outside of these categories when you interact with us in person, online, or by phone or mail — for example, receiving help through our customer support channels or responding to your inquiries.
How we use and share personal information
We may disclose personal information to our service providers pursuant to written contracts, as described in "When and With Whom Do We Share Your Personal Information?" above. We may use personal information for our own business purposes, such as internal research for technological development; this is not considered "selling" personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not sell or share personal information belonging to website visitors, users, or other consumers.
Your rights
- Right to know whether we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling with legal or similarly significant effects
Depending on your state, you may also have rights to obtain lists of the categories or specific third parties to which we have disclosed personal data, and to limit the use of sensitive personal data.
How to exercise your rights
To exercise these rights, submit a data subject access request or email us at support@mywinnow.com. You may designate an authorized agent to make a request on your behalf; we may deny a request from an agent who does not submit proof of valid authorization. Upon receiving your request, we will need to verify your identity before acting on it, using only the information provided in your request wherever possible.
Appeals
If we decline to take action on your request, you may appeal our decision by emailing support@mywinnow.com. We will inform you in writing of any action taken or not taken in response, with an explanation. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" law
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. To make such a request, contact us using the details below.
12. Do We Make Updates to This Notice?
Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by a revised date at the top. If we make material changes, we may notify you by prominently posting a notice or by sending you a notification directly.
13. How Can You Contact Us About This Notice?
Email us at support@mywinnow.com or write to:
Winnow, Inc.
723 Capp St
San Francisco, CA 94102
United States
14. How Can You Review, Update, or Delete the Data We Collect From You?
Based on the applicable laws of your state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To make a request, submit a data subject access request.
5. How Do We Handle Your Social Logins?
Our Services offer you the ability to register and log in using your Google account. Where you choose to do this, we receive certain profile information from Google — typically your name, email address, and profile picture. We use this information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, how Google processes your personal information; please review Google's privacy notice.