Legal

Privacy policy

Last updated 31 August 2026. Questions? Use the contact page.

What we collect

When you sign up and set up your profile, we collect your name, email, university, course, the CV file you upload, your home suburb and postcode, and your career track. We also store your outreach records — which firms you were allocated, the drafts created for you, and the status of each (sent, replied, meeting).

Your Gmail access

Wynnel connects to your Gmail only to create drafts in your own account. It does not send, read or delete your mail. You can revoke Wynnel's access to your Google account at any time from your Google account settings, and the connection will stop working immediately.

Where your data is stored

Wynnel does not run its own servers. The app and your data — account details, profile, CV and outreach records — are hosted on a third-party cloud hosting platform and stored in that platform's managed database.

Third parties your data passes through

To work, Wynnel passes data through two third parties:

  • Google — to create drafts in your own Gmail account. Wynnel only creates drafts; it does not read, send or delete your mail, and you can revoke its access at any time from your Google account.
  • An AI service — used to research firms against public web sources and to draft your emails from the verified facts and your profile. The AI service receives the firm details, your profile summary and your CV; it does not receive access to your Gmail.

Firm research is done against public web sources only — professional registers and firm websites. We do not buy contact lists or use private data.

How long we keep your data

We keep your personal information and outreach records while your account is active. You can request deletion of your account and data at any time via the contact page, and we will remove your personal information and outreach records. A record that a firm asked not to be contacted is kept so no student is ever allocated it again.

Firm contact details

Firm contact details are collected from public professional registers (for example, the ASIC Financial Advisers Register) and from firm websites. We do not buy contact lists and we do not use private or non-public contact data.

If a firm does not want to be contacted

A firm can ask to be removed and never contacted again via the contact page. We remove the firm from the pool and add it to a skip list so no student is ever allocated it again.

Deleting your account and data

You can request deletion of your account and your data via the contact page. We will remove your personal information and your outreach records. Firms you contacted are not re-allocated to you, and any firm that asked not to be contacted stays on the skip list.