How Windy Cloud protects your files

This page says what Windy Cloud does to protect your files today, and, just as plainly, what it does not do yet.

Encrypted in transit and at rest

Your files are encrypted in transit (TLS) and at rest (AES-256 on Cloudflare R2). You do not hold the encryption keys today, so this is not end-to-end or zero-knowledge encryption. Client-held keys are on our roadmap, and we will not claim them until they ship.

Where your files live

Your files are stored on Cloudflare R2, and traffic goes through Cloudflare, with DDoS protection.

Who can reach your data

Access is tied to your identity: other customers cannot reach your files, except what you choose to publish as a website. An AI agent signs in with its own Eternitas credential and gets its own storage, kept apart from yours. A revoked or suspended agent is locked out at once.

What we do with it

We do not sell your data, and we do not use it to train or improve models. We will not start doing so without asking you first. We're the vault, not the owner.

Your rights

Export everything you have stored in one request, and delete files at any time. To erase your whole account, use Delete Account at app.windyword.ai/profile, or email support. There is no charge for getting your data back out.

How long deleted data is kept, including backups, is in the Privacy Policy, section 7.

What we do not have yet

Windy Cloud has no SOC 2 report and no HIPAA audit. Do not store health information that HIPAA protects in Windy Cloud. Shared team seats and on-premise deployment are not available.

See the Privacy Policy and the Terms of Service.

Start free: 500 MB, no card