1. Introduction
WINDBAR ("we," "us") runs windbar.ai to share product information and handle business inquiries for U.S. visitors and partners.
This site is for information and inquiries only.
We do not take online orders, payments, shipping, or returns.
This Policy covers data we collect on windbar.ai.
It does not cover third-party sites you visit through links.
By using the site, you agree to this Policy.
If you disagree, please stop using the site.
- Our public vapor scope is zero-nicotine hardware verified by third-party testing.
- We also offer OEM/ODM empty, CBD-compatible hardware only.
- We do not fill or supply CBD, hemp extract, or THC e-liquid.
- Partners are responsible for any filled products they sell.
- See our Statement of Business Scope for details.
2. Key Terms
In this Policy:
- Personal Information — data that identifies you or your business (name, email, inquiry messages, device info, age checks).
- Sensitive Personal Information — ID numbers, precise location, biometrics, or age verification records under CCPA/CPRA. We do not collect payment card data.
- Sale/Sharing — giving personal data to others for money or cross-site ad tracking, as defined by California law.
- U.S. User — a person in the United States who visits or uses the site.
- Age Verification Data — birth date, ID documents, and logs used to block under-21 access under the PACT Act.
3. What We Collect
We collect only what we need to run the site.
We do not collect order, payment, or shipping data because we do not sell online.
- Account info: username, password (encrypted), name, email, phone, mailing address
- Business info: company name, documents, contact role, cooperation goals
- Inquiry messages: product questions, sample requests, chat history
- Age verification: date of birth and, when required, ID images (deleted within 72 hours; logs kept for audits)
- Feedback: reviews, complaints, and support messages
- Marketing choices: email/SMS opt-in or opt-out
- Automatic tech data: browser, device, IP address, pages viewed, and privacy signals (GPC/DNT)
- Third-party checks: age verification vendors, cloud hosts, and fraud tools
4. How We Use Data
We use personal information for these purposes:
- Run accounts, logins, and inquiry replies
- Meet legal duties: age checks, record keeping, and regulator requests
- Keep the site secure and fix technical problems
- Send required service messages (inquiry replies, security alerts)
- Send marketing only if you opt in (unsubscribe anytime)
- Protect Windbar against fraud and Terms violations
- Create anonymous stats to improve the site
- We do not use sensitive data for targeted ads without separate consent
- We never use your data for online checkout because we do not offer it
5. When We Share Data
We do not sell your personal information.
We do not share data with ad networks for cross-site tracking without your consent.
California users can opt out of sharing for targeted ads.
We do not share data with payment or shipping partners.
- Service vendors: age checks, hosting, analytics, and support (contract-bound, limited use)
- Legal requests: court orders or lawful government demands
- Business changes: mergers or acquisitions (successor must follow this Policy; we notify users)
- Anonymous stats: aggregated data with identifiers removed
6. How Long We Keep Data
We use encryption, access controls, security testing, and staff training.
No online system is 100% secure. Protect your login credentials.
- Account data: while your account is active; deleted within 45 days after closure (tax records kept 5–7 years where required)
- Age verification images: deleted within 72 hours; encrypted logs kept for audits
- Inquiry data: kept while active; deleted when the account closes (except legal holds)
- Marketing contacts: until you unsubscribe or request deletion
- Transaction data: none — we do not process online sales
7. Your U.S. Privacy Rights
Residents of California, Virginia, Colorado, Utah, Connecticut, and other states with privacy laws have rights below.
Submit requests by email or our privacy request form.
We respond within 45 days (up to 45 more days for complex cases).
We verify your identity before sharing or deleting data.
Authorized agents may submit requests with written permission.
- Know what we collected in the past 12 months
- Delete your personal information (with legal exceptions)
- Correct inaccurate account or inquiry data
- Opt out of sale/sharing for targeted ads (footer link; we honor GPC signals)
- Limit use of sensitive data for ads or profiling
- Get a portable copy of core account and inquiry data
- Use these rights without discrimination
- Appeal a denied request within 30 days
8. Cookies
We use cookies and similar tools. See our Cookie Policy for details.
- Necessary cookies: login, age checks, and saved preferences
- Optional analytics cookies: traffic stats (opt in required)
- We honor Do Not Track and Global Privacy Control signals
9. Minors (Under 21)
This site is for adults 21+ in the United States only.
We follow COPPA and the federal PACT Act.
If a minor submitted data, contact us for immediate deletion.
- We do not knowingly collect data from anyone under 21
- Minor data is deleted within 24 hours when found
- Age checks are required on product and inquiry pages
- We do not market to people under 21
10. Third-Party Links
We may link to social media, news sites, or partner pages.
Their privacy rules apply — not ours.
Review their policies before sharing data.
We are not responsible for third-party sites.
We do not link to third-party checkout or payment pages.
11. Policy Updates
We may update this Policy when laws or our business changes.
Major changes will be posted here and emailed to registered users 30 days ahead when required.
The "Last updated" date shows the current version.
Continued use after an update means you accept the new Policy.
12. Contact
- Contact the WINDBAR compliance team for privacy questions or rights requests (access, correction, deletion, opt-out):
- Privacy email: info@windbar.ai
- U.S. address: Contact Windbar for our registered business address.
- Privacy request form: https://windbar.ai/contact?purpose=privacy-request
13. Governing Law
This Policy follows U.S. federal law and California state law.
Disputes go to California state or federal courts.
Footer compliance links, age verification, and our no-online-sales statement remain in effect on the live site.