Last Updated: September 5, 2025
We at Windmill, Inc. (“Windmill,” “we,” “us,” or “our”) have created this privacy policy (this “Privacy Policy”) because we know that you care about how information you provide to us is used and shared. This Privacy Policy relates to our information collection and use practices of in connection with our website located at https://gowindmill.com/ (the “Website”), our proprietary people management platform which is made available to you through the Website (“Platform”), and when you interact with us in any other way.
This Privacy Policy applies to visitors to the Website, who view only publicly-available content (“Visitors”), customers who have signed up to access and use the Platform (the “Customers”), and Customer’s employees and contractors authorized by Customer to access and use the Platform (“Authorized Users”).
By visiting our Website, Visitors are agreeing to the terms of this Privacy Policy and the accompanying Website Terms of Use.
By signing up to access and use the Platform, each Customer and Authorized User is agreeing to the terms of this Privacy Policy and the accompanying Terms of Service.
Capitalized terms not defined in this Privacy Policy shall have the meaning set forth in our Website Terms of Use or Terms of Service, as the context requires.
In the course of operating the Website, the Platform, and/or interacting with you, we will collect (and/or receive) the following types of information. You authorize us to collect and/or receive such information.
When you contact us via email or in any other manner, or when you call us, when you subscribe to receive our news or when you sign up for a demo of our Platform, you will be asked to provide your certain information, such as your name, email address, company information (if any) and information regarding your inquiry or request (collectively, the “Contact Information”). The Contact Information is used to provide the requested service or information and to contact you for purposes of direct marketing of our current and future products and services.
In order to access and use the Platform, each Authorized User will have to create an account on the Platform. In connection with creating an account, we collect Log-in Credentials and other registration information. You may choose to sign-in to the Platform using your Google, Microsoft, Rippling account or any other third-party account that is available for you to select on the log-in page (collectively, the “Third-Party Accounts”). By signing-in using your Third-Party Account, you are authorizing Windmill to collect, store, and use, in accordance with this Privacy Policy, any and all information that you have authorized the third-party company to provide to Windmill. Such information may include your first and last name, profile image, e-mail address, birth date and gender. All information that we collect and/or receive under this section together with the Account Credentials is collectively referred to herein as “Account Information.” We use Account Information to process the creation of your Account, including verifying your identity, and managing your account.
In using the Platform, Customers and Authorized Users provide us Customer Data. We use the Customer Data and business contact information of Customers and Authorized Users in accordance with the terms and conditions of the Terms of Service.
When you access or use the Website or the Platform, we use browser cookies, pixels, web server logs, web beacons, and similar technologies (collectively, “Tracking Technologies”) to automatically collect or receive certain standard technical information and other data (such as traffic data, usage data (including but not limited to, profiles viewed, matches made, features used, frequency and duration of Website or Platform usage, and interactions with content on the Website or Platform), location data, device information (including but not limited to, type of device, mobile device platform, operating system, browser type, screen resolution, IP address and other technical information), logs and other communications data) sent to us by your computer, mobile device, tablet, or any other device over time on our Website or Platform, and your online activity across third party websites, apps, and devices. We may also evaluate your computer, mobile phone, or other access devices to identify any malicious software or activity that may affect the availability of our Website or Platform.
When you access or use the Website or Platform, analytics networks and providers, and other third parties may use Tracking Technologies to collect information about your online activities over time and across different websites, apps, online services, digital properties and devices.
The data we or third parties collect automatically may include personal information and/or statistical data that may not identify you personally; however, we or third parties may maintain, combine, or associate it with personal information collected in other ways or received from third parties. We and/or third parties use this information to (i) enhance the performance and functionality of our Website and/or Platform; (ii) personalize your experience with the Website and/or Platform, understand how you use our Website and/or Platform, maintain a persistent session, and improve and further develop our Website and/or Platform; and (iii) provide custom experiences, across other sites, apps, online services, digital properties and devices, and for analytics purposes.
The Tracking Technologies used on the Website and the Platform include the following, among others:
Cookies: Cookies are small packets of data that a website stores on your computer’s hard drive so that your computer will “remember” information about your visit. In addition to collecting information, we use cookies to help us authenticate users, provide content of interest to you, analyze which features you use most frequently, and measure and optimize advertising and promotional effectiveness. To do this, we may use both session cookies, which expire once you close your web browser, and persistent cookies, which stay on your computer until you delete them. For information regarding your choices regarding Cookies, please see Section III of this Privacy Policy.
Local Storage Technologies: We may use local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
Web Beacons: We use Web beacons, also known as pixel tags or clear GIFs, to demonstrate that a webpage or email address was accessed or opened, or that certain content was viewed or clicked.
Third Party Sites: When access to the Website and/or the Platform is made available to you through third-party sites, such as social media, please be aware that these other sites maintain their own policies regarding Tracking Technologies and the collection and use of information. You are responsible for reviewing those policies.
We may use one or more third–party analytics services to evaluate your use of the Website or Platform, compile reports on activity (based on their collection of IP addresses, Internet service provider, browser type, operating system and language, referring and exit pages and URLs, data and time, amount of time spent on particular pages, what sections of the Website or Platform you visit, number of links clicked while on the Website or Platform, search terms and other similar usage data), and analyze performance metrics. These third parties use cookies and other technologies to help analyze and provide us the data. By accessing and using any of the Website and/or Platform, you consent to the processing of data about you by these analytics providers in the manner and for the purposes set out in this Privacy Policy. Please be advised that if you opt out of any service, you may not be able to use the full functionality of the Website and Platform. Below is a list of analytics providers that we use; however, such list may be subject to change based on how we wish to understand the user experience and we will endeavor to update it diligently. You may use the accompanying links to learn more about such providers and, if available, how to opt- out from their analytics collection.
For more information on Google Analytics, including how to opt out from certain data collection, please visit https://www.google.com/analytics
For more information on PostHog, including how to opt out from certain data collection, please visit https://posthog.com/privacy
We use advertising pixels provided by third parties such as Meta, Google, LinkedIn, and X to help us measure the effectiveness of our advertising campaigns, optimize ad delivery, and serve you more relevant advertisements. These pixels may collect information about your interactions with our Website and Platform, such as pages visited, actions taken, and device/browser details. You can manage your preferences or opt out of personalized advertising through the opt-out mechanisms provided by each platform, or by disabling these pixels at any time by adjusting your browser settings.
Social Media: We maintain a presence on LinkedIn, and other social media and third- party sites, including our accounts, pages and related activities. We may collect personal information when you visit or use social media, including when you access our Website or Platform from social media. We will do so in accordance with the terms of use and privacy policies of those sites, apps and applicable law. These sites may provide aggregate information and analysis to us about visitors’ use of our social media pages. This allows us to better understand and analyze our user growth, general demographic information about the users of these pages, and interaction with the content that we post. Overall, this information may be used to help us understand the types of visitors and users of our social media pages and use of the content. This Privacy Policy does not cover personal information collected by such third-party social media sites. For more information on their privacy and security practices please review the privacy policies and terms of use on their respective website.
We may use and share your personal information as set forth below:
We will take reasonable measures (e.g., by contract) to require that any party receiving any of your personal information from us, including for purposes of providing the Website and the Platform, undertakes to: (i) retain and use such information only for the purposes set out in this Privacy Policy; (ii) not disclose your personal information except with your consent, as permitted by applicable law, or as permitted by this Privacy Policy; and (iii) generally protect the privacy of your personal information.
Update Information: If the personal information we have for you changes, you may correct, update, or delete it by contacting us as set forth in Section XII of this Privacy Policy. You may correct, update, or delete some of their personal information directly in your account on the Platform. We will use commercially reasonable efforts to process all such requests in a timely manner. You should be aware, however, that it is not always possible to completely remove or modify information in our databases. Additionally, we will retain and use your information (or copies thereof) as necessary to comply with our legal and/or regulatory obligations, resolve disputes, and enforce our agreements.
Marketing Communications: You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of any of our marketing emails. Please note that you cannot opt out of receiving transactional e-mails.
Cookie Management: Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies or other Tracking Technologies, the Platform may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
You will need to apply these opt-out settings on each device from which you wish to opt-out. We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.
We take commercially reasonable steps to protect your information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Please understand, however, that no security system is impenetrable. We cannot guarantee the security of our databases or the databases of the third parties with which we may share such information, nor can we guarantee that the information you supply will not be intercepted while being transmitted over the Internet. In particular, e-mail sent to us may not be secure, and you should therefore take special care in deciding what information you send to us via e-mail.
The Website and the Platform may also contain hyperlinks to other third-party websites or apps (“External Sites”). We have no control over the privacy practices or the content of any of our business partners, advertisers, sponsors, or External Sites to which we provide hyperlinks. As such, we are not responsible for the content or the privacy policies of those External Sites. You should check the applicable third-party privacy policy and terms of use when visiting any External Sites.
We do not knowingly collect or receive personal information from children under the age of 18 through the Website and Platform. If you are under the age of 18, please do not provide any personal information through the Website and Platform. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Privacy Policy by instructing their children to never provide any personal information on the Website or Platform, or any other web site without their permission. If you have reason to believe that a child under the age of 18 has provided personal information to us through the Website and/or Platform, please contact us at support@gowindmill.com, and we will endeavor to delete that information.
The Website, the Platform and its servers are operated in the United States. If you are located outside of the United States, please be aware that your information, including your personal information, may be transferred to, processed, maintained, and used on computers, servers, and systems located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your country of origin. If you are located outside the United States and choose to use the Website and/or the Platform, you consent to any transfer and processing of your personal information in accordance with this Privacy Policy, and you do so at your own risk.
As discussed above, third parties such as analytics providers may collect information about your online activities over time and across different websites when you access or use the Website and/or Platform. Currently, various browsers offer a “Do Not Track” option, but there is no standard for commercial websites. At this time, we do not monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser “Do Not Track” settings and/or signals.
Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to obtain certain information about the types of personal information that companies with whom they have an established business relationship (and that are not otherwise exempt) have shared with third parties for direct marketing purposes during the preceding calendar year, including the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. If you wish to submit a request pursuant to Section 1798.83, please contact us via email at support@gowindmill.com.
We do not sell your personal information as defined under Nevada law. Nonetheless, if you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties. You can exercise this right by contacting us at support@gowindmill.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account.
This Privacy Policy is effective as of the date stated at the top of this Privacy Policy. We may change this Privacy Policy from time to time with or without notice to you. Any such changes will be posted on the Website and the Platform. By accessing and/or using the Website and/or the Platform after we make any such changes to this Privacy Policy, you are deemed to have accepted such changes. Please be aware that, to the extent permitted by applicable law, our use of your information is governed by the Privacy Policy in effect at the time we collect the Information. Please refer back to this Privacy Policy on a regular basis.
If you have any questions about this Privacy Policy or to report a privacy issue, please contact us in one of the following ways:
Email: support@gowindmill.com
Or write to us at:
Windmill, Inc. 200 Park Avenue South, NY, NY 10003