Privacy Policy
Last updated: October 5, 2026
1. Controller and contact
Tamakkan For Pioneering Business and Investment LLC operates WizeCV from Muscat, Muscat Governorate, Sultanate of Oman. For privacy questions or rights requests, email support@wizecv.com or info@tamakkan.net.
2. Data we collect
We collect account and profile details, resume and career content you submit, job descriptions, generated outputs, language preference, package and usage records, support communications, and technical/security data such as request identifiers and rate-limit records. For purchases we store checkout, order, customer, store, product and variant identifiers; display and checkout currencies; subtotal, tax, total and refund values; receipt links; environment and timestamps—not raw card numbers or security codes.
3. How and why we use data
We process data to create and secure your account, provide requested tools, enforce package limits, generate documents and AI-assisted outputs, activate and support purchases, prevent fraud and misuse, troubleshoot, communicate service messages, meet legal obligations, and improve reliability. The applicable legal basis depends on your location and may include contract, consent, legitimate interests, and legal obligation.
4. Service providers and AI processing
We use service providers to operate WizeCV, including Supabase for authentication/database/storage, Vercel for hosting, Resend for transactional email, and configured AI providers such as OpenAI, Google Gemini, and Anthropic Claude through Google Vertex AI. When you choose an AI-assisted feature, relevant content you submit—such as CV text, job descriptions, and instructions—may be sent to the configured AI provider to produce the automated output you requested for you to review and edit. When payments are enabled, the payment provider identified at checkout processes the payment, fraud, tax, receipt, and refund information required for that transaction and may act as the payment processor or merchant of record, depending on the provider. Relevant content and identifiers are sent only as needed for each function. These providers process data under their own terms and our arrangements with them.
5. International transfers and disclosure
Providers may process data outside your country. Where required, we use available contractual or legal safeguards. We may disclose data when required by law, to protect users or the service, in a corporate transaction subject to safeguards, or with your direction. We do not claim that data is never shared with service providers, and we do not sell raw card data because we do not collect it.
6. Retention and deletion
We retain account and career content while needed to provide the service and until deletion is requested, subject to backups, fraud prevention, payment, tax, dispute, and legal retention needs. Retention periods vary by record. To request account deletion, use WizeCV Settings or email support@wizecv.com. For access, correction, or export requests, email support@wizecv.com. Identity verification may be required; automated account deletion is not currently available.
7. Security
We use access controls, row-level database policies, server-side authorization, request validation, rate limits, security headers, and restricted secret handling. No system is completely secure. Report suspected compromise to support@wizecv.com and do not send payment card details by email.
8. Cookies, rights, and children
Essential session, security, and language storage supports application operation as described in the Cookie Policy. Separately, when configured, optional Google Analytics measures visits to public marketing pages and resources only after explicit analytics consent. Before acceptance, we do not load the Google Analytics script or send analytics requests. Analytics may use _ga and _ga_* cookies and process public page paths and technical information such as browser/device information and the IP address used to connect to Google. We strip query strings and fragments and do not intentionally send resume text, job descriptions, generated content, names, email addresses, phone numbers, or user/resume IDs to Google Analytics. We do not track authenticated application, auth, checkout, or payment-return routes in this phase, and advertising consent remains denied. You may reject analytics without affecting essential application features and change or withdraw your choice through Cookie settings in the footer or Cookie Policy. We store only granted or denied under wizecv_analytics_consent_v1 in your browser. Withdrawal stops future WizeCV analytics dispatches and removes accessible GA cookies where possible; it does not delete data already received by Google. Google processes analytics data under its own terms. Privacy rights vary by jurisdiction and may include access, correction, deletion, objection, restriction, portability, or withdrawal of consent. WizeCV is intended for adults and is not directed to children.
9. Updates
We may update this policy when our services, providers, or legal requirements change. The updated date and published version will identify the current policy, and we will provide appropriate notice for material changes.