WizFalcon Privacy Policy

Summary

This Privacy Policy explains how WizFalcon (wizfalcon.com) collects, uses, shares, keeps and protects personal data when you visit the website or use our AI assistants.

The short version:

• You can use WizFalcon without an account. Guest use runs on the Free plan. Your guest conversations, drafts and profiles stay in your browser. Files you upload, and the text of each request, still pass through our servers so the AI assistant can answer.
• If you sign in, we save your conversations, profiles and uploaded files with your account so you can come back to them. We keep them for as long as your plan's retention period allows (see Retention).
• AI processing. To answer a request, we send the text, files and images you include, plus relevant context, to third-party AI model providers. On plans that include them, the AI model providers may also generate images or video from your request.
• We do not use your content to train AI models. Your conversations, uploads and results are used to answer you, not to train models.
• We do not sell your conversations, uploads or results, and we do not use them to personalize ads.
• Ads. We may show third-party ads, for example through Google AdSense. Ad partners may use cookies and similar identifiers. Where the law requires it, we ask for your consent first (see Advertising).
• Your rights. You can export your data, delete conversations or delete your account from your account settings. You can also email support@wizfalcon.com.

This summary is not the full policy. Please read the sections below.

1. Who we are and what this policy covers

WizFalcon is an AI content assistant. Each assistant is built for one kind of channel or work, such as ecommerce marketplaces, social media, job search or local business listings and reviews. The set of assistants changes over time. Each assistant helps you write and review content such as product listings, social posts, resumes and cover letters, and replies to customer reviews. It can also edit images you upload.

The Service is operated under the name WizFalcon ("WizFalcon", "we", "us" or "our"). You can reach us at support@wizfalcon.com. For the purposes of the EU and UK General Data Protection Regulation (GDPR) and similar laws, we are the controller of the personal data described in this policy, except where we say otherwise.

This policy applies to the website at wizfalcon.com, the AI assistants, accounts, plans, credits and any related features and communications (together, the "Service"). It does not apply to third-party websites, platforms or services that you visit through links on the Service. That includes the marketplaces, social networks, job sites and review platforms you may publish content to. Those services have their own privacy policies.

Please read this policy together with our Terms of Service.

2. Information you give us

What you give us depends on the features you use. It can include:

• Account information. Your email address, name and profile picture from your sign-in provider (see Section 3).
• Messages and instructions. What you type to an AI assistant, including your requests, edits, feedback and the facts you want included.
• Profiles. Information you save so an assistant can reuse it. Examples are product details (name, brand, material, size or capacity, SKU, store handle, key facts), a brand or writing voice, or your professional background for job search tasks.
• Uploaded files and images. Documents such as resumes, job descriptions or product sheets, and images such as product photos that you ask an assistant to edit.
• Content about other people. Some tasks involve other people's information. Examples are a customer review you want to reply to, or a reference in a resume. See Section 7.
• Feedback. Ratings or comments you send about a result.
• Support and contact messages. Your email address, subject, message and the page you wrote from, when you use the contact form or email us.
• Information needed to verify a request. For example, when you ask us to exercise a privacy right.

Please don't submit sensitive information you don't need to. The Service does not need it to do its job. This includes government ID numbers, financial account numbers, passwords, health information, or information about race, religion, sexual orientation, political opinions or criminal records. For job search tasks, you can usually leave things like your date of birth, home address, photo or national ID out of a resume draft. Don't send passwords or payment card details in chats or support messages.

3. Accounts and sign-in

You sign in with your Google account. When you do, Google tells us your account identifier, your email address, confirmation that the email is verified, your name and, if available, your profile picture. We use this to create and identify your account, show who is signed in, and contact you about your account. We do not receive your Google password.

We also record when your account was created and when you last signed in. We keep information about your active sign-in sessions so we can keep you signed in, let you see and end other sessions, and protect your account.

Google processes your sign-in under its own privacy policy. You can manage WizFalcon's access from your Google account settings.

Google is currently the only way to sign in. If we add another sign-in method, we will update this section.

4. Using WizFalcon as a guest

You can start using the AI assistants without an account. Guests use the Free plan's monthly usage allowance and limits. Additional safeguards apply to guest use to prevent abuse.

When you use WizFalcon as a guest:

• Your conversations, saved profiles, drafts and preferences are stored in your browser on your device, not in a WizFalcon account. If you clear your browser data, use a private window, or switch devices or browsers, that history may be lost. We cannot recover it.
• Your requests still pass through our servers. To answer, we must receive your message and any files or images you attach, and send them to our AI providers as described in Section 6. Files and images you upload as a guest are stored temporarily for the Free plan's file retention period, so the assistant can work with them during your session.
• We set a guest session cookie. It is a random identifier, not linked to your name or email. We use it to keep your session working, apply the Free plan's allowance and limits to your session, and keep earlier outputs in the same session varied.
• We process your IP address to prevent abuse. For example, it stops one person from opening many guest sessions to get extra free usage, and it limits automated or excessive use. See Section 9.

Some features need an account, such as history across devices. If you later sign in, we can, with your confirmation, copy the conversations and profiles stored in your browser into your new account.

5. Conversations, files and images

Signed-in users. When you are signed in, we store your conversations (your messages and the assistant's replies), saved profiles, preferences, result versions, result choices you make, and the files and images you upload or that the Service produces for you. This is what lets you return to your work, review earlier versions and export results. To keep long conversations manageable, we may store a short summary of earlier parts of a conversation and use it as context for later replies.

Chat titles. For signed-in users, we may send the opening of a conversation to an AI model to create a short title. You can rename or delete a conversation at any time. Guest chat titles are created in your browser from your first message.

Images and video. The image tools change images you provide. Examples are removing or replacing a background, preparing a main product image to marketplace requirements, or making other edits you request. On plans that include them, WizFalcon can also generate new images or video from your request; what you include is handled as described in this policy.

Files and images expire. Uploaded files and image results are kept for a limited time based on your plan (see Section 13), then deleted automatically. Download any result you want to keep.

Previous outputs. To avoid giving you the same wording over and over, the Service may keep limited information about earlier drafts in your account or guest session. It uses that information only to vary later drafts for you. We do not use it to profile you for advertising.

Web content. Assistants can open links you share and search the web for current information when a task needs it. To do this, we send the web address, or a search query based on your request, to a third-party web access provider, or fetch the page directly from our servers. The page or search results are then processed together with your request, and the sources used may be shown with the answer and saved with the conversation. The website, search service or web access provider receives the address or query and standard request information from our servers, but not your name or account details. Please don't share links that contain private tokens or personal information you don't want fetched.

6. How AI processing works

The assistants are powered by large language models and image-editing models run by third-party AI providers. When you send a request, we send these to one or more of those providers so they can produce a result:

• your message
• the files, images and profile details that the task needs
• relevant parts of the conversation
• instructions and reference material that we provide

We use a model-routing service to reach these providers. It may pass your request to different underlying model providers depending on availability and the task.

Things you should know:

• Results are generated automatically and may be wrong. AI output can contain errors, outdated information or content that does not fit a platform's rules. Review every result before you use or publish it.
• Providers process your data to provide the Service. AI providers and the routing service receive the content of your requests and return results. They act under their own terms, and some may keep request data for a limited time, for example to detect abuse or meet legal duties.
• We do not use your content to train models. WizFalcon does not use your conversations, uploads, profiles or results to train or fine-tune AI models.
• No automated decisions with legal effects. The Service produces drafts for you to review. It does not make decisions about you that have legal or similarly significant effects.
• We don't publish for you. WizFalcon does not post to marketplaces, social networks, job sites or review platforms on your behalf. You decide what to use and where.

7. Your responsibilities for the content you submit

You keep the rights you have in the content you submit. Submitting content does not transfer ownership to us. Our Terms of Service describe what you allow us to do with it to run the Service.

Some content you submit may include personal data about other people. Examples are customers who wrote reviews, people named in a resume or cover letter, or people in a photo. If so, you are responsible for having a lawful right to use that information, and for giving any notice and getting any consent that the law requires. Please include only the personal data the task needs. For example, you usually don't need a reviewer's full name to draft a reply.

8. Plans, credits and payments

WizFalcon offers a Free plan with a monthly usage allowance and paid subscription plans, billed monthly or annually, that include more credits, higher limits and longer retention. Annual plans are billed once a year at the price shown. Plan credits reset each month, on annual plans too, and do not roll over. Top-up credits never expire.

Credit and usage records. We keep records of your plan, credit balance and how credits were used. For each task, this includes the type of task, its status, how long it took, how many credits it used and when it ran. We use these records to apply your plan's limits, show your usage history and handle support requests and disputes.

Payments. Payments for paid plans are handled by a third-party payment platform, which processes your card or other payment details under its own privacy policy. We do not receive or store your full card number or security code. We receive what we need to manage your subscription and keep accounting records. That can include your billing name and email, country or address for tax purposes, subscription status, amounts, currency, invoice and transaction identifiers, the last four digits and type of card, and payment, refund or chargeback status.

9. Technical, usage and security information

When you use the Service, we and our infrastructure providers automatically process technical information such as:

• your IP address and approximate location derived from it
• browser type, device type, operating system and language
• the pages and features you use, and request times
• response status, error details and security signals

We use this information to:

• deliver the Service and keep it reliable
• apply rate limits and plan limits to signed-in users, guest sessions and IP addresses
• prevent abuse of free usage, fraud, spam and automated misuse
• investigate errors and security incidents

We design the Service so that passwords, full payment details and internal secrets are not written to ordinary application logs.

Analytics. We do not currently use third-party analytics tools. If we add them, we will update this policy and the cookies section first and, where the law requires it, ask for your consent.

10. Cookies, browser storage and similar technologies

We use cookies, browser storage and similar technologies, which we call "cookies" in this section. WizFalcon does not have a separate cookie policy, so this section is it.

Strictly necessary (always on):

Strictly necessary technologies don't require consent, because the Service can't work without them.

Advertising (optional where the law requires consent): When ads are shown, Google and other advertising partners may set or read cookies, local storage, pixels or device identifiers to serve, limit and measure ads and, where permitted, to personalize them. See Section 11.

Analytics: none at present (see Section 9).

Your choices. When we use optional cookies, we provide a cookie or privacy settings control on the Service where you can give, change or withdraw consent. Personalized Google ads can also be turned off at Google Ads Settings. You can also block or delete cookies and browser storage in your browser settings. If you block strictly necessary cookies or clear site data, you may be signed out, lose guest history stored in your browser, or find parts of the Service don't work.

11. Advertising

To help keep a free plan available, we may show third-party ads on parts of the Service, for example in a side panel on the chat page. Ads may be served by Google AdSense, provided by Google, or by other advertising partners. If we work with other ad partners, we will name them here.

What advertising partners may collect. Advertising partners may use cookies and similar technologies to collect information such as:

• your IP address and approximate location
• browser and device characteristics and identifiers
• the page you are viewing and the page that referred you
• the ads you see and click, and when

Advertising partners use this information to:

• show ads, which may be personalized based on your activity on this and other websites, where permitted
• limit how often you see the same ad
• measure ad performance
• detect invalid traffic and fraud

They process this information under their own privacy policies. Google's use of advertising cookies lets it and its partners serve ads based on your visits to this and other sites. You can learn more at How Google uses information from sites or apps that use its services and manage personalized Google ads at Google Ads Settings. You may also use www.aboutads.info/choices or, in the EU, www.youronlinechoices.eu.

What we do not share with advertisers. We do not give advertising partners your conversations, uploaded files or images, results, profiles, sign-in credentials or payment details. We do not use them to target ads.

Consent. If you are in the European Economic Area, the United Kingdom or Switzerland, or anywhere else where the law requires prior consent, we ask for your consent before ad cookies or personalized ads are used. We do this through a consent tool, which may be one certified for use with Google's advertising products. If you don't consent, you may still see non-personalized or contextual ads. These use limited data, for example to cap how often an ad is shown or to detect fraud. You can change or withdraw your consent at any time through the cookie or privacy settings control.

US state privacy laws. Under some US state laws, letting advertising partners collect identifiers through cookies for personalized ads may count as "selling" or "sharing" personal information, or as "targeted advertising". See Section 20 for how to opt out. We honor recognized browser opt-out signals such as Global Privacy Control (GPC) where the law requires it.

12. How we use information

We use the information described in this policy to:

• Provide the Service. Run the AI assistants, process your requests, edit your images, store your conversations and files, and let you review, compare and export results.
• Manage accounts and plans. Sign you in, keep sessions secure, give and track credits, apply plan limits and retention, and manage subscriptions and payments.
• Personalize your results. Use the profiles, context and earlier drafts you've provided so results fit your product, brand, background or business, and so new drafts don't repeat earlier ones.
• Keep the Service safe. Apply rate limits, prevent abuse of free credits, detect fraud, spam and misuse, and enforce our Terms.
• Support you. Answer your questions, troubleshoot failed tasks and handle privacy requests.
• Improve reliability. Monitor performance and errors, and understand use of the Service in aggregated or de-identified form. We do not use your conversations, uploads or results to train our own AI models.
• Show and measure ads, as described in Section 11 and where permitted by law.
• Communicate with you. Send messages about your account, security, plan, billing and important changes to the Service or this policy. We do not currently send marketing emails. If we do, each will include a way to unsubscribe.
• Meet legal obligations. Comply with the law, respond to lawful requests and protect our rights and the rights of others.

13. How long we keep data

We keep personal data only as long as we need it for the purposes in this policy, unless the law requires or allows us to keep it longer.

Conversations and uploaded files, by plan:

Conversation retention counts from when a conversation was last updated. File retention counts from when the file was uploaded or created. After the period ends, the data is deleted automatically, usually within a short time. When your plan changes, for example when a paid plan ends and your account returns to the Free plan, the new plan's conversation retention applies from then on, and files keep the deletion date set when they were stored. We will update this table if retention periods change.

Other data:

• Account information is kept while your account is open and deleted when you delete your account, except as described below.
• Credit, usage and subscription records are kept while your account is open. If you delete your account, they are deleted, except for records we must keep for accounting, tax, fraud prevention or disputes. Records we must keep for accounting or tax are kept for the period the applicable law requires. Payment records held by the payment platform follow its own retention rules.
• Session records expire after up to 7 days, or when you sign out or end the session.
• Support and contact messages are kept separately from your account so we can answer and keep a record of our correspondence. They are kept for as long as we need them to handle your request and keep a record of it, and you can ask us to delete them at any time.
• Security and rate-limit data is kept for a short time, unless we need it to investigate an incident.
• Browser storage stays on your device until you delete it.
• Advertising cookies are controlled by the advertising partner that set them.

14. Legal bases for processing (EEA, UK and Switzerland)

If GDPR or a similar law applies to you, we rely on these legal bases:

• Performance of a contract. Providing the Service you ask for: running the assistants, processing and storing your content, managing your account, credits and subscription.
• Legitimate interests. Keeping the Service secure and preventing abuse (including IP-based rate limits for guests), fixing errors, improving reliability, keeping limited records of earlier drafts to avoid repetition, handling support messages, and establishing or defending legal claims. We balance these interests against your rights. You can object to processing based on legitimate interests (see Section 19).
• Consent. Optional cookies and similar technologies, including personalized advertising, where the law requires consent. You can withdraw consent at any time, without affecting processing done before you withdrew.
• Legal obligation. Keeping billing and tax records, and responding to lawful requests from authorities.

We do not rely on performance of a contract for personalized advertising.

15. Who we share information with

We do not sell your conversations, uploads, results or profiles. We share personal data only as described here.

Subprocessors. Our subprocessors are third-party AI model providers and cloud service providers, plus the other categories of service providers listed below. We describe them by category and name a provider only where its terms require it, as with Google for sign-in and ads.

Service providers. We use trusted service providers that process data on our behalf for these purposes:

• Hosting, infrastructure, storage and content delivery. Runs the website, stores account data, conversations and files, and protects the Service from attacks.
• AI model access and AI model providers. Produce text results and image edits from your requests (see Section 6).
• Image-editing model providers. Process the images you ask to edit.
• Sign-in. Google, for "Sign in with Google".
• Payment processing. A third-party payment platform, for subscriptions, billing, refunds and fraud checks.
• Email delivery. If we use an email-delivery provider for account, billing and support emails, it receives the email address and the message.
• Advertising. Google and any other advertising partners named in Section 11, as described there.
• Web access providers. For opening links and running web searches that a task needs (see Section 5).

Service providers get only the information they need for their function. Where they act on our behalf, we require them to protect it. Some providers act as independent controllers for part of their processing, and do so under their own privacy policies. Examples are Google for sign-in and advertising, and the payment platform.

Other disclosures. We may also disclose information:

• to comply with the law, a court order or other legal process, or a lawful request from authorities
• to protect the rights, property or safety of WizFalcon, our users or others, including to investigate fraud, abuse or security incidents
• in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business. Your information may be transferred as part of that, and we will tell you where required
• with your consent or at your direction

16. International data transfers

We and our service providers may process personal data in countries other than the one where you live, including the United States, through infrastructure that runs around the world. These countries may have different data protection laws from yours.

When we transfer personal data out of the EEA, the UK or Switzerland, we rely on an appropriate safeguard. That means an adequacy decision, the European Commission's Standard Contractual Clauses (with the UK Addendum or Swiss amendments where relevant), or another lawful mechanism. You can contact us for more information about these safeguards.

17. Security

We use reasonable administrative, technical and organizational measures to protect personal data. These are appropriate to the nature of the data and the risks. They include:

• encrypting data in transit
• access controls that keep each account's data separate
• limits on who can access personal data
• monitoring for abuse

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your Google account and devices secure. You can see and end your other active WizFalcon sessions from your account settings. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities as the law requires.

18. Exporting your data, deleting conversations and closing your account

From your account settings you can:

• Export your data. Download a copy of your account data in a machine-readable (JSON) file. It includes your account details, conversations, profiles, preferences, result versions, credit and usage history, and a list of stored files. You can also export individual results (for example, as CSV).
• Delete individual conversations, or clear all conversations.
• End other sessions signed in to your account.
• Delete your account. For your security, you may need to have signed in recently. When you delete your account, we delete your account information, conversations, profiles, stored files and images, and credit, subscription and usage records that we hold. We may keep information we must keep by law, for example billing and tax records, or that we need to resolve disputes, prevent fraud or enforce our Terms. Contact messages you sent are kept separately; ask us if you want them deleted too.

If you have a paid plan, cancel it before you delete your account so you are not billed again. Deleting your account does not by itself give you a refund. Refunds are covered in our Terms (see our Terms of Service).

Guests can delete their locally stored history by clearing site data for wizfalcon.com in their browser.

You can also email support@wizfalcon.com from the address linked to your account to make any of these requests.

19. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive information about how we use it
• Correct inaccurate personal data
• Delete your personal data
• Port your data, meaning get a copy in a machine-readable format or have it sent to another provider
• Restrict how we use your personal data in certain cases
• Object to processing based on legitimate interests, and to processing for direct marketing at any time
• Withdraw consent at any time where we rely on consent
• Opt out of the "sale" or "sharing" of personal information, targeted advertising or profiling, where those laws apply
• Appeal a decision we make about your request, where the law gives you that right
• Complain to a data protection authority. In the EEA, this is usually the authority in the country where you live or work. In the UK, it is the Information Commissioner's Office (ICO).

How to exercise your rights. Many of these you can do yourself in your account settings (see Section 18). For anything else, email support@wizfalcon.com. We may ask for information to confirm your identity, for example a request from the email address on your account. We may also ask for proof that an authorized agent acting for you has your permission. We will respond within the time the law requires, usually within one month (GDPR) or 45 days (US state laws). We may extend this where the law allows and will tell you if we do.

We will not discriminate against you for exercising your privacy rights.

20. Additional information for California and other US state residents

This section applies to residents of California and other US states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others. It adds to the rest of this policy.

Categories of personal information we collect, in the past 12 months or once the Service launches:

• Identifiers. Name, email address, account identifier, IP address, session and device identifiers, and online identifiers used by advertising partners.
• Customer records. Billing information handled through the payment platform.
• Commercial information. Plan, subscription, credits and usage history.
• Internet or other electronic network activity. Pages and features used, interactions with ads, and technical logs.
• Approximate geolocation derived from your IP address.
• Audio, electronic, visual or similar information. Images you upload for editing.
• Professional or employment-related information. Work history and other details you choose to include in resumes, cover letters or profiles.
• Inferences. Limited inferences used by advertising partners for personalized ads, where permitted.
• Sensitive personal information. We do not ask for it and do not use it to infer characteristics about you. If you choose to include it in your content, we use it only to provide the Service you request.

The sources, purposes, recipients and retention periods for these categories are described in Sections 2 to 15.

Sale and sharing. We do not sell personal information for money. Our use of third-party advertising cookies may count as "selling" or "sharing" identifiers and internet activity for cross-context behavioral advertising, or as "targeted advertising" under some state laws. We do not knowingly sell or share the personal information of consumers under 16. We do not sell or share your conversations, uploads, results or profiles.

Your rights. Subject to legal exceptions, you have the right to:

• know what personal information we collect, use and disclose, and to access it
• correct it
• delete it
• opt out of its sale or sharing, and of targeted advertising
• limit the use of sensitive personal information (we only use it as permitted without that right being needed)
• not be discriminated against for using these rights

How to opt out. Use the "Do Not Sell or Share My Personal Information" / "Your Privacy Choices" control on the Service, which we provide whenever ads that rely on these cookies are shown, turn on Global Privacy Control (GPC) in your browser, which we treat as an opt-out request for that browser, or email support@wizfalcon.com.

Authorized agents and appeals. You may use an authorized agent to make a request, and we will verify the request. If we decline your request, you may appeal by replying to our decision or emailing support@wizfalcon.com with "Privacy appeal" in the subject line.

21. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. We do not knowingly use a child's personal data for personalized advertising. If we learn that we have collected personal data from a child under 13, we will delete it. If you believe a child has given us personal data, contact us at support@wizfalcon.com.

22. Changes to this policy

We may update this policy when the Service, our data practices, our providers or the law change. When we do, we will post the new version here and update the "Last updated" date. If a change is material, we will give reasonable notice before it takes effect, for example by email or a notice on the Service. Where the law requires it, we will ask for your consent before a new use of your data.

23. Contact us

Questions, requests or concerns about this policy or your personal data:

• Email: support@wizfalcon.com