Privacy & Data Processing
This page explains, in plain language, exactly what happens to the information you share with the WinWin Leadership AI Coach. It is written to match how the site actually works — nothing more, nothing less.
Terms of use
The AI Leadership Coach and the worksheet are provided for personal leadership development. The coach is an AI tool, not a therapist, lawyer or professional adviser, and its feedback is a prompt for your own reflection rather than professional advice. You are responsible for what you choose to write into it — please do not paste confidential company information or other people's personal data. By creating an account you accept these terms and the data handling described on this page. We may suspend accounts that abuse the service, and we may change these terms; the date above shows when they were last reviewed.
Your account and what we store about you
To use the coach or the worksheet you need an account. We store your email address, the date the account was created, and the date you accepted these terms. There is no password, because sign-in works by emailed link instead. Your email address is the only piece of contact information we hold, and you can see everything stored about you on your account page.
How signing in works — and who sees your email address
When you ask for a sign-in link we generate a single-use code, store only a cryptographic hash of it, and email you the link. It expires after 15 minutes and stops working once used. Sign-in email is sent through a personal Gmail account, so Google processes your email address and the message when it delivers your link. Mail is signed by Google rather than by this site's own domain. If that matters to you, it is worth knowing before you register.
Cookies
We set one cookie, and only after you sign in: it holds a random session identifier that keeps you logged in for 7 days. It is not used for analytics, advertising or tracking, and it is required for a logged-in account to work at all — so there is no consent banner asking you to opt in to something you cannot decline while using an account. Logging out or deleting your account revokes it immediately. Your language choice (EN/TR/HU) is also remembered in your browser's local storage; that never reaches our server. This site runs no analytics or tracking of any kind.
What happens to your answers (AI processing)
When you use the AI Leadership Coach, the answers you type are sent to DeepSeek (api.deepseek.com), a third-party AI provider, which generates your feedback. This happens every time you ask for feedback, whether or not the consent box is ticked. There is currently no mode that produces feedback without sending your answers to DeepSeek.
What the consent checkbox controls
The consent checkbox in the coach controls one thing only: whether your session is saved on our server. If you leave it unticked, we do not store your answers — but they are still sent to DeepSeek to generate your feedback. Opting out means “do not store”, not “do not process”.
What we store (only if you consent)
If you leave consent ticked, we save one record of your session on our server containing:
- a randomly generated session ID (UUID)
- the date and time it was created
- the language you used (EN, TR or HU)
- your answers
- the AI-generated feedback
- notes a coach may add later
Sessions you create while signed in are linked to your account, so you can see them on your account page and delete them with it. We do not store your name or your IP address in these records.
Fair-use record
Accounts include two full coaching conversations per week. To count that, we keep a small record of when each conversation happened — just your account and a timestamp, never the content. It exists because the AI service is paid for per use, and it is kept separately from your answers so that declining storage does not also hide your usage. It is deleted with your account.
Your IP address
Your IP address is used only briefly to limit how often the coach and admin endpoints can be called, which protects the site from abuse. It is never written into a stored session record.
How long we keep it, and deletion
There is no automatic deletion schedule and no expiry for inactive accounts: we keep your account and its data until you delete it. You can do that yourself at any time from your account page — it removes your account, your sign-in codes, your sessions, your fair-use records and every coaching session linked to you, in one step and without asking us. An administrator can also view and delete individual coaching sessions. What we cannot undo is the processing that already happened: answers previously sent to DeepSeek are outside our control and cannot be recalled.
Sessions recorded before accounts existed
The coach was open to everyone before accounts were introduced. Those older sessions were saved without any identity attached, so they belong to no account — they do not appear on anyone's account page and are not covered by anyone's deletion request, because there is no way to tell whose they are. They contain no email address or name. An administrator can still view and delete them.
The contact form
The contact form on the home page is handled by Formspree, a third-party form service, which forwards your message to the site owner by email. Messages sent through it are processed by Formspree and are not part of the coaching session store described above.