GDPR Compliance

1. Commitment to GDPR

WINGUARDIAN.NET LLC is committed to compliance with the General Data Protection Regulation (GDPR). Although our primary jurisdiction is California, USA, we recognize the global nature of digital business and respect the privacy rights of EU citizens.

2. Lawful Basis for Processing

We process personal data based on legitimate business interests, contract performance, and user consent. Our data processing activities are transparent and limited to what is necessary for providing our services.

3. Data Subject Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, and port your data. To exercise these rights, please contact us at legal@winguardian.net. You also have the right to lodge a complaint with your local data protection supervisory authority.

4. International Data Transfers

As a US-based entity, data collected from EU users may be transferred to and processed in the United States. Where we act as a processor for a client established in the European Economic Area or the United Kingdom, we put in place an appropriate transfer mechanism before any transfer begins, which may include the Standard Contractual Clauses approved by the European Commission together with the UK International Data Transfer Addendum. Clients may request details of the mechanism applicable to their engagement by writing to legal@winguardian.net.

5. Data Sovereignty & AI

In line with our Data Sovereignty principles, any personal data processed by our AI systems is treated with strict confidentiality. We do not use client data to train public foundation models without explicit consent.