1. Introduction

Whizo AI ("we", "our", "us") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our platform at whizo.ai.

2. Information We Collect

We collect information in the following ways:

Account information: Name, email address, password (hashed), and billing details
Usage data: Pages visited, features used, session duration, and click events
Content data: Posts, captions, images, and other content you create or upload
Integration data: OAuth tokens for connected social media accounts (Meta, Google, etc.)
Device data: IP address, browser type, operating system

3. How We Use Your Information

We use collected data to:

Provide and improve the Whizo AI platform
Process payments and manage subscriptions
Send transactional emails (invoices, password resets, notifications)
Analyze usage patterns to improve features
Comply with legal obligations
Provide customer support

4. AI Features and Data Processing

When you use AI-powered features (content generation, AI chat, knowledge base), your input may be processed by third-party AI providers including ZhipuAI (GLM) and OpenAI. We do not sell your content to train external AI models. Content is processed solely to deliver the requested output.

5. Data Sharing

We do not sell your personal data. We share data only with:

Service providers: Supabase (database), Resend (email), Stripe (payments), Firecrawl (web scraping)
Social platforms: Meta, Google — only with your explicit OAuth authorization
Legal authorities: When required by law or to protect our rights

6. Data Security

We implement industry-standard security measures including encryption at rest and in transit, row-level security (RLS) policies, and regular security audits. Passwords are hashed using bcrypt. OAuth tokens are stored encrypted.

7. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. You can manage cookie preferences through your browser settings or our cookie consent banner. Essential cookies required for platform functionality cannot be disabled.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data is removed within 30 days, except where required by law. Analytics data may be retained in anonymized form.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Opt out of marketing communications

To exercise these rights, contact us at privacy@whizo.ai.

10. Children's Privacy

Whizo AI is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you via email or in-app notice before significant changes take effect. The date at the top of this page reflects the latest update.

12. Contact Us

For privacy-related questions or requests, contact: privacy@whizo.ai or visit our support page.