Privacy Policy
This policy explains what personal data Birdwink handles, why, and what you can ask us to do about it. It is written to be read rather than to be survived.
Last updated 17 September 2026 · Birdwink is operated by Medory AI Technologies FZE, Dubai, United Arab Emirates.
1. Who we are
Birdwink is a Marketing and Sales CRM operated by Medory AI Technologies FZE, a company registered in Dubai, United Arab Emirates ("Birdwink", "we", "us"). You can reach us at contact@birdwink.com about anything in this policy.
2. Two different roles
This distinction matters, so we put it first.
—When you visit our website or start a trial, we are the controller of your personal data. This policy governs that.
—When our customer uses Birdwink to manage their own enquiries, we are a processor acting on their instructions. Their own privacy notice governs that data, and we handle it under our Data Processing Agreement — we do not use it for our own purposes, and we never sell it.
3. What we collect as controller
—Account data: name, work email, phone number, company, country and the password hash for anyone who signs up.
—Usage data: which pages and features were used, and diagnostic logs including IP address, browser and timestamps.
—Enquiry data: what you send us through a form or by email, including the message itself.
—Billing data: subscription records, invoices and the last four digits of a card. Full card details are handled by our payment provider and never reach our servers.
4. Why we use it
To provide and secure the service, to bill for it, to answer your enquiries, to send service messages such as trial expiry and security notices, and to improve the product in aggregate.
We do not sell personal data, and we do not use customer workspace data to train models.
Where consent is the basis — marketing emails, non-essential cookies — you can withdraw it at any time without affecting the service.
5. Cookies
We keep this deliberately small. Essential cookies hold your session and security state and cannot be switched off without breaking the product. Analytics cookies measure page performance in aggregate and load only with consent. We do not run advertising or cross-site tracking cookies on this website.
You can clear or block cookies in your browser at any time; essential ones will simply be set again when you sign in.
6. Who we share it with
Only service providers who need it to run Birdwink: cloud hosting, email delivery, messaging and advertising platform APIs you connect, payment processing and error monitoring. Each is bound by contract to confidentiality and to process data only on our instructions.
A current list of subprocessors is provided in writing on request and forms part of the Data Processing Agreement. We will tell existing customers before adding a new one that processes workspace data.
We may also disclose data where the law requires it, or to establish or defend legal claims.
7. Where your data lives
You choose the hosting region for your workspace when you create it. Where data moves between countries — for example to a support engineer or a subprocessor in another region — we rely on standard contractual clauses or an equivalent lawful transfer mechanism.
8. How long we keep it
Account and workspace data for as long as the subscription is active. After cancellation we keep it for 30 days so you can reactivate or export, then delete it. Billing records are kept for as long as tax and company law requires. Diagnostic logs are kept for up to 12 months.
You can ask for earlier deletion at any time in writing.
9. Your rights
Depending on where you live you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. Email contact@birdwink.com and we will respond within 30 days, and sooner where the law requires it.
If you are an end customer of a business that uses Birdwink, please contact that business first — they control the data, and we will help them respond.
If you are not satisfied with our response you can complain to your local data protection authority.
10. Security
Encryption in transit and at rest, role-scoped access, audit logging, tested backups and least-privilege integrations. Our security page sets out what is in place — and what we do not yet claim.
11. Children
Birdwink is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18 through this website.
12. Changes
If we change this policy in a way that materially affects you, we will email account holders and update the date at the top. Continuing to use Birdwink after that means the revised policy applies.