Privacy Policy

WIMNE (A Product by Tekents) is operated by Tekents Innovation (OPC) Private Limited, a One Person Company incorporated under the Companies Act, 2013, registered in India. This policy explains what we collect when you use WIMNE, why we collect it, how we protect it, and the choices you have.

Account information you give us directly: your name, email address, and password (or, if you sign in with Google, Microsoft, or GitHub, the profile details those providers share with us). Organization data your team creates: conference lists, budgets, sponsorships, travel bookings, notes, tasks, and leads you upload or import. If your organization is on the Business plan, billing details are processed by our payment provider; we store the subscription status and invoice history, not your full card number.

To operate WIMNE: run your dashboard, sync your calendar, send CFP deadline reminders, and process payments. To improve WIMNE: understand which features are used so we can prioritize what to build next. We do not sell your personal data.

The talk pitch generator, conference recommendations, and conference summaries are powered by a third-party AI provider (currently OpenAI). We only send what each feature needs: the topic text you type for a pitch, your interest tag names for recommendations, or a conference's own public description for summaries. We never send your name, email, password, or billing details, and we don't use your prompts or the responses to train any model. AI output is a draft, not a guarantee of accuracy; review it before relying on it or submitting it.

WIMNE lets you connect your own accounts on other services, such as Google Calendar, Outlook, Slack, Linear, Luma, HubSpot, and Salesforce. When you do, you provide an API key or authorize a connection, and WIMNE sends data to that service only for the action you take (for example, pushing a task to Linear or a lead to HubSpot). We don't share your data with these services for any other purpose, and disconnecting an integration in Settings stops all future sharing.

WIMNE uses a session cookie to keep you signed in and a small number of functional cookies (like your light/dark theme choice). We don't use third-party advertising or cross-site tracking cookies. See our Cookie Policy for the full list.

We keep your data for as long as your account is active. If a Business organization cancels its plan, its history is kept and switched to read-only rather than deleted, so you can pick back up if you resubscribe.

Deleting your account from Account settings permanently removes your personal data: saved conferences, bookmarks, reminders, speaking history, and calendar or speaker connections. If you've contributed to a team, content you personally created there (notes, uploaded files, lead imports, conference lists, API keys) is deleted as part of the same action. We block deleting an account that's the sole owner of a paid organization, so a team's access can't be orphaned by one person leaving.

Lead data. Badge-scan and guest-list imports contain contact details for people who are not WIMNE users, so an organization's admins can delete any import from the conference workspace at any time, which removes every lead in it immediately. Otherwise these are kept while the organization's account is active and are deleted with the organization. If someone asks your organization to erase their details, deleting the import is how you action it. We do not use lead data for anything except providing the service to the organization that uploaded it, and never to contact those people ourselves.

Our database provider retains routine backups for disaster recovery; data removed by an account deletion is removed from the live database immediately, though it may persist in backup snapshots for a limited period before those snapshots age out.

All traffic is served over HTTPS. Passwords are hashed with scrypt and never stored or logged in plain text. Every query that reads or writes organization data is scoped to the requesting user's organization at the server layer, and access within an organization is role-based (Owner, Admin, Member, Viewer), each mapped to an explicit permission set. API keys are stored as one-way hashes, outbound webhook payloads are signed with HMAC, and uploaded files are served through short-lived signed URLs rather than public links. Business organizations get a scoped activity log of who did what and when. Authentication and API endpoints are rate-limited in production, and every code change runs through linting, type-checking, and an automated test suite before it reaches production.

In the interest of an accurate picture: Tekents Innovation (OPC) Private Limited is a small, early-stage company, and we have not yet completed a formal third-party audit (such as SOC 2 or ISO 27001) or an independent penetration test. If you've found a security issue or need a vendor security questionnaire answered, email info@tekents.com.

For data your organization enters into WIMNE, your organization is the data controller and Tekents Innovation (OPC) Private Limited is the data processor, processing it only to provide the service, for as long as your organization has an active account.

We use a limited set of subprocessors, each processing data only for the specific function it performs:

• Application hosting, database, and cache providers — running the service and storing your data.
• Resend — transactional email (reminders, password resets).
• OpenAI — AI features such as conference summaries and talk pitches.
• Paddle — merchant of record for paid plans: payment processing, billing, and sales tax.
• Cloudflare R2 — file storage for documents you upload.
• Sentry — error monitoring. Configured to exclude user identifiers, cookies, and credential headers from the reports it receives.
• PostHog — product analytics, and only for visitors who allow analytics cookies. See our Cookie Policy.

Some of these providers may process data outside India; where that happens, we rely on the safeguards they offer to protect it in transit and at rest.

The full terms of that arrangement, including subprocessor change notice, the security measures we commit to, international transfer safeguards, breach notification timelines, and audit rights, are set out in our Data Processing Agreement. It applies automatically; no signature is needed for it to be in force. If your procurement process needs a countersigned copy, or your own template executed instead, email info@tekents.com.

If we identify unauthorized access, a data exposure, or another security incident, we investigate, contain it, and fix the underlying cause. If it affects your personal data or your organization's data, we'll notify you without undue delay once we have enough information to describe what happened, and in any event within the timeframe required by applicable law.

You can access, correct, export, or delete your data at any time from Account settings, or by emailing us. If you are in a region with statutory data-protection rights (such as the EU, UK, or India's DPDP Act), those rights apply to your WIMNE data as well.

Questions about this policy? Email info@tekents.com. Tekents Innovation (OPC) Private Limited is registered in India.