1. Introduction

Whizo AI ("we", "our", "us") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our platform at whizo.ai.

2. Information We Collect

We collect information in the following ways:

Account information: Name, email address, password (hashed), and billing details
Usage data: Pages visited, features used, session duration, and click events
Content data: Posts, captions, images, and other content you create or upload
Integration data: OAuth tokens for connected social media accounts (Meta, Google, etc.)
Device data: IP address, browser type, operating system

3. How We Use Your Information

We use collected data to:

Provide and improve the Whizo AI platform
Process payments and manage subscriptions
Send transactional emails (invoices, password resets, notifications)
Analyze usage patterns to improve features
Comply with legal obligations
Provide customer support

4. AI Features and Data Processing

When you use AI-powered features (AI chat, AI agents, content generation, knowledge base search), your messages are processed by a third-party AI provider. Depending on the AI model or agent you select, this may be OpenAI, Anthropic (Claude), Google (Gemini), ZhipuAI (GLM), or a model routed through OpenRouter.

Some AI features (for example, AI agents with tools enabled, or knowledge-base/RAG search) can look up and include relevant workspace data in the request sent to the provider — such as CRM leads, tasks, client/workspace records, or SOP content — in addition to the text you type, in order to answer your question accurately. We only send the data needed to fulfill your specific request.

In the mobile app, we ask for your explicit agreement before your first use of AI chat, and disclose which providers may receive your data at that time. We do not sell your content, and we do not permit these providers to use your data to train their general-purpose models. Content is processed solely to generate the response you requested.

5. Data Sharing

We do not sell your personal data. We share data only with:

Service providers: Supabase (database), Resend (email), Stripe (payments), Firecrawl (web scraping)
AI providers: OpenAI, Anthropic, Google, ZhipuAI, and OpenRouter — only when you use an AI-powered feature, and only with the message and/or workspace data needed to generate that response (see Section 4)
Social platforms: Meta, Google — only with your explicit OAuth authorization
Legal authorities: When required by law or to protect our rights

6. Data Security

We implement industry-standard security measures including encryption at rest and in transit, row-level security (RLS) policies, and regular security audits. Passwords are hashed using bcrypt. OAuth tokens are stored encrypted.

7. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. You can manage cookie preferences through your browser settings or our cookie consent banner. Essential cookies required for platform functionality cannot be disabled.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data is removed within 30 days, except where required by law. Analytics data may be retained in anonymized form.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Opt out of marketing communications

To exercise these rights, contact us at privacy@whizo.ai.

10. Children's Privacy

Whizo AI is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you via email or in-app notice before significant changes take effect. The date at the top of this page reflects the latest update.

12. Contact Us

For privacy-related questions or requests, contact: privacy@whizo.ai or visit our support page.