Privacy Policy — Winday Leads
Effective date: 18 April 2026 ·
App: Winday Leads (package com.winday.leads) ·
Publisher: Winday Associates, Hyderabad, Telangana, India
Winday Leads is an internal field tool used by Winday Associates' staff (field executives, managers, and admins)
to capture construction and AMC sales leads on site. This policy explains what data the app collects, why,
and how it is handled.
1. Information we collect
From the signed-in user (Winday staff)
- Username and login credentials, used to authenticate you against our servers.
- Your name and role, shown in the app and attached to the leads you capture.
About each captured lead (entered by the staff user)
- Prospect's name, phone number, architect name, builder name.
- Site name, construction stage, estimated project value, expected start date, notes.
- Requirements selected from a list.
Device data used during capture
- Camera: photos of the project site and business cards, taken only when you tap a photo button.
- Location: latitude, longitude, and reverse-geocoded address of the lead, captured at the moment of capture to geo-tag the record.
- Photos/Media: images selected from your device's gallery, only when you tap "Choose from Gallery".
We do not collect device identifiers, advertising IDs, browsing history, contacts, or microphone audio.
2. How we use the data
- To create and update lead records on behalf of Winday Associates.
- To display your lead pipeline, priorities, and dashboard metrics.
- To authenticate your access to the app.
We do not use the data for advertising, profiling, or sale to third parties.
3. Where the data is stored
- Data is transmitted over HTTPS to servers hosted on Amazon Web Services (AWS) in the Asia Pacific (Mumbai / ap-south-2) region.
- Lead records are stored in Amazon DynamoDB.
- Photos are stored in private Amazon S3 storage and delivered through short-lived signed URLs; only authenticated app users can view them.
4. Sharing
- Data is accessible only to authorised Winday Associates staff logged into the app.
- We share data with Amazon Web Services, Inc. solely as our infrastructure provider.
- We share the captured GPS coordinate with Google Maps only if you tap "Open in Google Maps" — this opens the Maps app with the coordinate as a query.
- We do not sell personal information.
5. Retention
Lead data is retained for as long as Winday Associates requires it for its business operations.
Staff accounts remain until deactivated. You can request deletion of your staff account or of a
specific lead record by contacting us (see below).
6. Security
- All network traffic uses TLS (HTTPS).
- Authenticated sessions use short-lived JSON Web Tokens.
- Photos are served through signed, time-limited URLs.
No system is perfectly secure; if you suspect a compromise, contact us immediately.
7. Children
Winday Leads is not intended for children under 13 and is not directed at them.
8. Your rights
Depending on your jurisdiction (including India's DPDP Act, 2023), you may have rights to access,
correct, or delete the personal information we hold about you. To exercise these rights, contact
us at the address below.
9. Changes to this policy
We may update this policy. Material changes will be posted on this page with a revised effective date.
10. Contact
Winday Associates
Email: privacy@windayamc.com
Postal: Hyderabad, Telangana, India