Privacy Policy

Who we are

Wingmen is a LinkedIn outreach product operated by VIDALIBRE LLC. If anything in this policy is unclear, or you want to exercise any of the rights below, email us at [email protected]. We read every message.

What we collect, and why

We collect four kinds of data:

• What you give this website. If you request the playbook or a plan through a form here, we keep what you typed: your email, your name, and your website, plus basic technical details like your browser type. If you apply to the pay-per-booked-call program, we also keep your company name, your LinkedIn profile address, and what you tell us about your business so we can read the application and reply to it. We use it to deliver what you asked for and to follow up about it, nothing else.
• Your account. Your email address, your name, and your company name. We use these to run your account, bill you, and email you about things that matter (a reply from a lead, a failed payment, a receipt).
• Your connected accounts. When you connect LinkedIn or a mailbox, the connection runs through an account-connection service. Wingmen stores the connection reference and works through it to send the outreach you configure. We do not store your LinkedIn password.
• Lead data you ask us to process. The people Wingmen finds and contacts for you: public profile information (name, headline, company), conversation history with you, and in some cases a work email found through an enrichment provider. We process this on your behalf and on your instructions - for this data, you are the controller and Wingmen is a processor.

Payments

Billing runs through Stripe. Your card number never touches our servers; Stripe handles it and tells us only what we need (that a payment succeeded or failed, and the last digits of the card so you can recognize it).

Who processes data for us

We use a small set of service providers, each for one job:

• A LinkedIn integration provider - LinkedIn and mailbox connections, message delivery
• Stripe - payments and invoices
• Anthropic - the AI that drafts and scores outreach copy
• A business-contact data provider - finding a lead's work email, when you use email outreach
• Public web-data providers - public company and audience data used to qualify leads
• Supabase and Cloudflare - this website's content and hosting
• Google - website analytics, and conversion reporting when a trial or a payment happens
• Meta - website advertising, ad measurement, and conversion reporting when a trial or a payment happens
• Hetzner - application hosting
• Resend - the emails Wingmen sends you

The full named list of our processors is available on request.

We use Cloudflare Turnstile to protect our forms and tools from automated abuse. Turnstile may process limited technical information about your browser and device to distinguish humans from bots. See Cloudflare's Turnstile Privacy Addendum for details.

Analytics and advertising

What loads depends on where you are. The rules are different in different places, and we would rather follow both of them than pick whichever one suits us.

In the EEA, the UK, Switzerland and Serbia: you get the banner, and nothing loads until you answer it. While it is sitting there no script is fetched, no cookie is set, and no request leaves your browser for Google or Meta. Accept and both load. Decline and the Meta Pixel never loads at all, while Google Analytics loads in a mode that sets no cookies, gets no advertising signals, and counts your visit without anything that identifies you.

Everywhere else, including the United States: there is no banner and both are on when you arrive. The way out is the "Do Not Sell or Share My Personal Information" link in the footer, or the control further down this page. Both do the same thing: the Meta Pixel stops loading, Google Analytics drops to the cookieless mode described above, and the cookies already set are deleted. If your browser sends a Global Privacy Control signal we treat that as you having already opted out, and you do not have to click anything.

We work out which of those two you are in from the country Cloudflare reports for your IP address. That lookup is a request to this site and to nobody else. If it fails, or comes back blank, you get the banner.

• Google Analytics 4. It records which pages you view, roughly where you are (country or city level, from your IP, which Google does not share with us), your device and browser, and where you arrived from. We use it to see which pages actually do their job. We do not upload your email or any other identifier to Google, and we have not enabled Google Signals or ad personalization on the property.
• Meta Pixel. It tells Meta that a browser visited this site so we can show ads to people who have been here, and so we can tell whether an ad we paid for led to a signup. If you are logged into Facebook or Instagram, Meta can link that visit to your account. That is what the pixel is for, and it is the main reason the banner exists.

One thing we don't fully control: the sales video on the playbook pages is hosted by Descript, and their player loads its own analytics and advertising trackers. So it doesn't load until you either accept cookies or press play on it, and pressing play is the moment you choose to let Descript in.

What happens after you start a trial. In your browser, the app at app.flywingmen.com still carries no third-party analytics or advertising code, and it never has. What is new is that our own server now tells Google and Meta when an account is created, when a trial starts, and when a first invoice is paid. It has to come from the server: you are not on the page when Stripe settles a payment, so there is no browser left to report it, and without it we cannot tell which ads actually paid for themselves.

That only happens if tracking was allowed at the moment you started checkout, under whichever of the two rules above applied to you. What goes with it is your email address hashed (a one-way scramble, so Meta can match it to an account it already has but cannot read the address itself), the IP address and browser you checked out from, the Google and Meta cookie ids listed below, and the amount of the invoice. Your name, your company, your website, and anything inside your Wingmen account are never part of it.

Both companies are based in the United States and process this data there.

Cookies we use

• _ga, _ga_* - Google Analytics, up to 2 years. Tells a repeat visit apart from a new one.
• _fbp - Meta, up to 3 months. Identifies the browser for ad matching and attribution.
• _fbc - Meta, up to 3 months, and only if you arrived by clicking one of our ads. It records which ad click brought you here, which is the whole of how an ad gets credited.
• wingmen_consent_v1 - not a cookie but a localStorage entry, kept until you clear it. It stores your answer to the banner, or your opt-out if you used the footer link, which is the only reason we don't ask again on every page. It stays in your browser.
• fw_consent_v1 - a cookie, six months, and the only one we set that is not a vendor's. It holds two words: whether tracking is on for you, and which of the two sets of rules above you fell under. It exists so the app at app.flywingmen.com knows your answer, since the answer itself is stored on this site and cannot travel on its own. There is nothing in it about you, and it is not written at all until you have answered.
• wingmen_region_v1 - not a cookie either, and it goes away when you close the tab. It holds the two-letter country from the lookup above so we don't repeat it on every page. It stays in your browser.

Nothing else is stored. There is no session recording, no heatmap tool, and no visitor-identification tag trying to work out which company you work for.

Your choice, and changing it

Where there is a banner it has two buttons and no dark pattern: Decline is one click, same as Accept, and nothing loads until you pick Accept. Where there isn't one, the footer link and the control below are the way out, and they are one click too. Either way you can change your mind here at any time. Turning it off deletes the cookies listed above and reloads the page so the scripts stop running: it takes effect immediately, not on your next visit. It also stops the server-side reporting described above, from that point on.

The control below shows the state you are actually in, not the state we would prefer you to be in.

How long we keep data

For as long as your account is active. Close your account, or ask us to delete your data, and we delete it - the same goes for lead data you ask us to remove. Invoices stay as long as tax law requires them to.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. If you are in the EU or UK, these are your GDPR rights and we honor them regardless of where you are. One email to [email protected] is enough.

Changes

If this policy changes in a way that matters, we will say so plainly on this page and update the date at the top. We will not quietly widen what we collect.