Security at Wintry
Last updated 1 November 2026
How we protect the data we back up from your Square account, and how to report a security issue to us.
This page describes how we keep your data secure today. Our practices may change as we improve them, and this page is not part of our agreement with you. Our Terms of Service and Data Processing Agreement set out our commitments, and they apply if anything here differs.
1. Hosting
Google Cloud hosts Wintry and stores your backups in its us-central1 region in Council Bluffs, Iowa, United States. Backups are stored with soft-delete protection, so a backup file deleted by mistake can still be recovered.
The providers that can process your store data are listed on our Sub-processors page.
2. Connecting to Square
You connect through Square’s own sign-in and approve each permission on Square’s page. We never see or store your Square password.
Backups only read your catalog, stock counts and locations. Restore access is a separate approval that you only give if you want restores. You can switch it off in Settings at any time and we stop using it straight away, although Square keeps the permission until you disconnect your store.
Each object a restore writes gets its own short-lived access token that carries only the permission it needs.
You can disconnect at any time in Wintry, or in your Square Dashboard under Settings > App integrations.
Read: used by backups
Your catalog: items, variations, images, categories, modifiers, discounts, taxes, units and other catalog settings
Stock counts
Your business profile and locations
Write: only if you turn on restores, and used only while a restore runs
Putting back items and other catalog objects
Putting back stock counts
Never requested
Customers
Team members and timecards
Payments and refunds
Orders and sales history
Invoices
Payouts and bank accounts
3. What we store
Dated copies of your catalog, stock counts and locations, along with your catalog images.
Your name and email address, so that you can sign in and we can send you alerts, and a record of the backups, restores and alerts on your account.
Your plan and billing status. Your payment details are held by our payment provider, Stripe, not by us.
We don’t sell your data, use it for advertising, or use it to train AI models.
4. Encryption
Every connection is encrypted with TLS: between you and Wintry, between Wintry and Square, and between Wintry and its providers.
Encrypted at rest with AES-256, using keys managed by Google Cloud.
Encrypted at rest by our database provider.
Encrypted a second time with AES-256-GCM, using a key held in a hardware security module in Google Cloud Key Management Service.
Held by our sign-in provider only in a form that cannot be reversed. If you sign in with Google or Apple, no Wintry password exists at all.
5. Who can access your data
Only authorised Wintry staff can access our production systems. They sign in with two-factor authentication, using hardware security keys for administrative access to Google Cloud.
We look at your store data only when you ask us for help, when we need to investigate a problem with the Service, or when the law requires it.
To investigate and fix errors, we may use AI tools from Anthropic. We share only what an investigation needs, and Anthropic does not use it to train its models.
6. Keeping and deleting backups
While your trial or plan is active and your store is connected, we keep every backup.
If you disconnect, or your trial or plan ends, backups stop and we keep your existing backups for 30 more days. Reconnect or start a plan in that time and you keep everything. After that we delete them, as section 7 of our Data Processing Agreement describes.
You can ask for an export of your backups, or for us to close your account, at any time by emailing support@wintry.io.
7. Monitoring and incidents
We monitor the Service for errors and failed backups, and automatic checks run throughout the day to catch backups that are late, missing or damaged. Temporary errors are retried automatically, and the Overview page shows the status of your latest backup.
If a security incident affects your data, we will email you without undue delay after we become aware of it.
8. Report a vulnerability
Email security@wintry.io. We will acknowledge your report and keep you updated while we fix the issue.
Please stay within your own account’s data, avoid disrupting the Service, and give us reasonable time to fix the issue before you tell anyone else. We will not take legal action against good-faith research that follows these guidelines. This covers Wintry’s own systems only, not Square’s or our providers’.