Welcome to WinBerry, a platform specialized in creating advertising designs and marketing content using artificial-intelligence technologies. WinBerry respects your privacy and is committed to processing your personal data in a lawful, secure, and transparent manner.
The platform is operated by WinBerry LLC, a limited liability company registered in the State of Wyoming, United States of America, per the registration details listed in the “Contact Us” section, and is referred to in this policy as “WinBerry,” “we,” or “the platform.”
This policy explains the data we collect, the purposes for which we use it, the legal bases for processing, the parties through whom we may process data, the retention periods, and the rights available to you. Where the Saudi Personal Data Protection Law (PDPL) and its implementing regulations apply to the processing, we handle the data in accordance with their requirements.
This policy constitutes a privacy notice and does not represent a general consent to all processing activities. Where consent is the required legal basis, we will request it from you separately and clearly.
This policy applies when you use the website winberryad.com, create an account, use the design and AI tools, contact support, subscribe to a plan, or use any service connected to WinBerry.
The platform may include links to, or integrations with, external services. Those parties' processing of data is governed by their own policies and terms, unless they process data on WinBerry's behalf under a contractual agreement.
We obtain data directly from you when you create an account or enter product and brand data, automatically when you use the website and platform, from the user responsible for your company's or team's account, from integrations you connect to the platform after granting permission, and from payment and technical service providers to the extent necessary to operate the service.
| Purpose | Legal Basis |
|---|---|
| Account creation, subscription management, and providing the design and generation tools | Performance of the contract and delivery of the requested service. |
| Authentication, sending verification codes, account protection, and fraud prevention | Performance of the contract and the legitimate interest in the security of the platform and its users. |
| Generating text and designs and processing product images | Performing the service at the user's request. |
| Billing, payment processing, and keeping financial records | Performance of the contract and compliance with applicable statutory, accounting, and tax obligations. |
| Technical support, complaint handling, and improving service quality | Performance of the contract and the legitimate interest in operating and improving the platform. |
| Usage analysis, feature development, and performance testing | Legitimate interest, while minimizing data and using aggregated or de-identified data whenever possible. |
| Marketing messages and promotional offers | Your consent when required, with the ability to unsubscribe at any time. |
| Compliance with legal requests and protecting rights and claims | Legal obligation and the legitimate interest in protecting and defending rights. |
WinBerry relies on AI and image-processing providers to deliver some of its functionality. Product data, your text prompts, images, and brand data may be sent to the selected provider to the extent necessary to create the output you requested.
WinBerry does not use user content to train any AI model of its own. Wherever possible, we use commercial, paid plans and privacy settings that restrict the use of user inputs and outputs for training the service providers' models, unless the user separately and explicitly consents otherwise.
Some providers may retain inputs, outputs, or technical logs for a limited period for operational, security, anti-abuse, or regulatory-compliance purposes. Please avoid entering sensitive or confidential data that is not needed for the generation process.
The platform does not use outputs to make automated decisions that produce legal or similarly significant effects on the user. Reviewing the outputs for accuracy and suitability before publishing remains the user's responsibility.
We may share data with processors or service providers to the extent necessary to deliver the platform. Current or potential categories include:
We do not sell your personal data, and we do not share it with external advertisers to target you with their ads without appropriate legal consent. Provider names may change as the platform evolves, and we will update this policy when a material change affecting data processing occurs.
If you upload personal data belonging to a customer, employee, influencer, or any other individual, you represent that you have a lawful basis and the authority to use it and to send it to WinBerry. In such cases, you or your business may be the controller of that data, while WinBerry processes it to provide the service on your behalf.
Do not upload sensitive data, identity documents, health or financial data, or children's data unless it is necessary, permitted by law, and expressly agreed upon. Enterprise customers may request a separate data-processing addendum when needed.
Because WinBerry LLC is a U.S. company and some service providers operate internationally, data may be stored, processed, or accessed from outside the Kingdom of Saudi Arabia, including from the United States or other countries where service providers operate.
Where the requirements of the Saudi Personal Data Protection Law apply to such transfers, we work to limit the transfer to the minimum necessary, assess the risks, and use appropriate available safeguards such as contractual agreements, confidentiality and security requirements, and suitable contractual clauses when needed.
We use cookies and local-storage technologies that are necessary for logging in, maintaining your session, remembering preferences, protecting your account, and operating the platform's features. We may use internal measurement or performance-analytics files that help us detect issues and improve usage.
We do not currently use third-party advertising cookies or Google Analytics. If we add analytics or marketing tools that are not strictly necessary, we will update this policy and request consent where required.
| Data Category | Retention Period or Standard |
|---|---|
| Account and profile data | For as long as the account remains active, then typically deleted or de-identified within 30 days of an account-deletion request, unless retention of some data is required for a legal reason or an ongoing dispute. |
| Designs, outputs, and files | Until deleted by the user, or until the account is deleted and the operational recovery period ends, unless a different period has been agreed. |
| Backups | May remain in secure backups for up to 90 days after deletion before being overwritten, with restricted access. |
| Login and security logs | Typically for 12 months, and may be kept longer while investigating a security incident or claim. |
| Billing and transaction records | For the period required to meet applicable accounting and tax obligations and to settle disputes, which may extend up to seven years depending on the record and applicable law. |
| Support messages and complaints | For the period necessary to process the request, demonstrate the response, and improve the service — typically up to three years unless a longer need exists. |
| OTP verification codes | Expire after use or after 10 minutes, whichever comes first, and are not used after expiry. |
Once the legal or operational need ends, data is securely deleted, destroyed, or de-identified, unless the law prevents deletion or requires retention.
We implement appropriate technical and organizational measures to protect data from unauthorized access, loss, alteration, or disclosure, including, depending on the nature of the service:
However, no method of electronic transmission or storage is completely secure, so no system can guarantee the prevention of all incidents despite taking reasonable measures.
Where the Saudi Personal Data Protection Law applies, and subject to statutory exceptions, you may have the right to:
To exercise any of these rights, contact us at support@winberryad.com from the email associated with your account. We may request identity verification to protect your account before fulfilling the request. We typically respond within 30 days, which may be extended where legally necessary or where the request is complex, with notice of the reason.
If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA) through the National Data Governance Platform, where Saudi law applies to the matter.
In the event of a security incident involving personal data, we take steps to contain the incident, investigate it, and minimize its impact. Where required by law, we will notify the competent authority within the statutory period, and we may notify affected users without undue delay if the incident is likely to cause harm to their data, rights, or interests.
WinBerry's services are intended for individuals and businesses whose representatives are 18 years of age or older. We do not knowingly collect personal data from children. If we learn that a child has created an account or submitted data without appropriate legal consent, we will take the necessary steps to suspend the account and delete the data in accordance with legal requirements.
We may update this policy to reflect changes in the service, providers, or legal requirements. When a material amendment is made, we will update the “last updated” date and publish the new version, and we may send a notice via email or within the platform a reasonable time before the amendment takes effect, when required.
For any question or request related to privacy or personal data, you can reach us at:
Entity: WinBerry LLC | Email: support@winberryad.com | Website: winberryad.com
Address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA | Registration No.: 2026-002013687
This policy is interpreted in accordance with the mandatory laws applicable to data processing, including the Saudi Personal Data Protection Law and its implementing regulations where applicable. The choice of governing law or venue does not diminish any mandatory rights granted to the data subject under applicable law.