Privacy Policy
This Privacy Policy explains how Winlex (ABN 29321772563) (“we”, “us”, “our”), operator of Code Analyzer for SAP® ABAP®, handles personal information. We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
- Account information: your email address and authentication details when you create an account.
- Code you submit: the SAP ABAP source code you paste for analysis.
- Analysis results and history: the documentation generated for you, plus metadata such as analysis mode, model used, program name, and timestamps.
- Usage and billing data: counts of analyses, plan and subscription status, and payment records.
- Technical data: log and security information such as IP address and request times, used to operate and protect the service.
2. How we use your information
- To provide the service and generate your analysis.
- To manage your account, enforce usage quotas, and process billing.
- To secure the service and prevent abuse.
- To respond to your enquiries and provide support.
- To comply with our legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
3. AI processing of your code
To generate analysis, the ABAP code you submit and the associated prompt are sent to our AI provider, Anthropic, for processing. Anthropic does not use data submitted through its API to train its models, and retains such data only transiently (generally up to 30 days) for abuse monitoring and trust-and-safety purposes, after which it is deleted.
4. Storage of your code (opt-in)
By default we do not store the ABAP code you submit — it is processed to produce your analysis and is not retained by us afterwards. If you tick “Save this code to my history”, we store that code in our database so you can view, re-run, and export it. You can delete a stored analysis (and its code) at any time from your history, which permanently removes it from our database.
5. Payment information
Payments are processed by Stripe. We do not collect or store your full card details; those are handled directly by Stripe under its own privacy terms. We retain records of transactions and subscription status.
6. Service providers (sub-processors)
We use the following third parties to operate the service. They process data on our behalf and may store or process it outside Australia, including in the United States (APP 8 — cross-border disclosure):
- Anthropic — AI analysis of submitted ABAP code and prompts (United States).
- Supabase — Account authentication and database hosting (NSW, Australia).
- Stripe — Subscription payment processing (United States / global).
- Vercel — Application hosting (United States / global).
7. Data retention
- Account information: for as long as your account is active.
- Submitted code: not retained unless you opt in, in which case until you delete it or close your account.
- Analysis history: until you delete it or close your account.
- Usage and billing records: retained as required for accounting, tax, and legal purposes (typically 5 years).
8. Security
We use reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and database row-level security that isolates each user’s data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Cookies
We use essential cookies only, to keep you signed in. We do not use advertising or third-party tracking cookies.
10. Your rights
Under the APPs you may request access to, or correction of, the personal information we hold about you, and you may request deletion of your data. You can delete stored analyses in the app, and you can request account deletion by contacting us. To make a request, contact [contact@evidoc.com.au].
11. Complaints
If you have a privacy concern, please contact us first at [contact@evidoc.com.au]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Children
The service is intended for business/professional use and is not directed at individuals under 18.
13. Changes to this policy
We may update this policy from time to time. Material changes will be notified via the service or by email. The “Effective” date above indicates when this version took effect.
14. Contact
Winlex
Guildford, NSW, Australia
[contact@evidoc.com.au]