Privacy Policy

1. Definitions

In this Policy: "personal data", "processing", "controller", "processor", and "data subject" have the meanings given in the GDPR. "You" means the individual whose personal data we process. "Sub-processor" means a third party we engage to process personal data on our behalf in order to provide the Service.

2. Data we collect

• Account data — your name, email address, and a securely hashed password.
• Resume content — the information you enter or import into a resume or cover letter (work history, education, skills, and any other details you choose to include). This may include information you consider sensitive; please include only what you are comfortable storing.
• Usage data — limited, privacy-respecting analytics about how the Service is used (such as pages visited and features used), collected to operate and improve the product. We do not sell this data.
• Technical data — your IP address and request metadata, used for security (such as rate-limiting and abuse prevention) and to keep the Service running.
• Payment data — when you purchase a Plan, our payment processor collects the payment details needed to process your payment. We do not receive or store your full card number.

3. How we use your data and legal bases

We process your personal data for the following purposes, on the following legal bases under GDPR Article 6:

• To provide the Service — store your resumes, compute ATS scores, generate suggestions, and surface relevant job listings. Legal basis: performance of our contract with you.
• To authenticate you and keep your Account and the Service secure, and to prevent abuse. Legal basis: our legitimate interests and, where applicable, legal obligation.
• To process payments and manage your Subscription. Legal basis: performance of our contract and compliance with legal (e.g. accounting) obligations.
• To communicate with you about your Account (such as password resets and important changes). Legal basis: performance of our contract and our legitimate interests.
• To operate optional analytics. Legal basis: your consent, which you can withdraw at any time.

4. AI features and your content

Some WeZoom features are generative — for example rewriting resume bullet points and summaries, and drafting cover letters, resignation letters, and interview questions. To power these, we use third-party AI providers (such as Google's Gemini, and potentially other providers such as OpenAI). When you use one of these features, only the content needed for that request — for example the resume text, role, or job details you submit — is sent to the AI provider so it can generate your result, which it processes as our sub-processor under its applicable terms. If an AI provider is unavailable, WeZoom automatically falls back to its own deterministic, rule-based engine. Our ATS scoring runs entirely on our own rule-based engine and does not use any third-party AI. Your content remains yours — you can edit, export, or delete it at any time.

5. Sharing and sub-processors

We do not sell your personal data. We share personal data only with the service providers needed to operate WeZoom, each under an appropriate data-processing agreement and only for the purposes described here:

• Hosting and database providers — to store and serve your Account and resume data.
• AI providers — to power the optional AI Features, as described above (e.g. Google Gemini; potentially others such as OpenAI).
• Payment processor — to handle payments; the processor handles card data, which we never see or store in full.
• Email delivery provider — to send transactional emails (such as password resets).
• Job-listing sources — job postings are aggregated from public job APIs; we never share your personal data with them.

6. International data transfers

Some of our sub-processors may process personal data outside the European Economic Area ("EEA"). Where personal data is transferred outside the EEA, we rely on an appropriate safeguard recognised under the GDPR — such as an adequacy decision of the European Commission, or the European Commission's Standard Contractual Clauses — so that your data continues to receive an essentially equivalent level of protection. You can request more information about these safeguards by contacting info@wezoom.app.

7. Cookies and analytics

We use a strictly-necessary cookie to keep you signed in and to remember your language preference; this cookie is required for the Service to function and does not require consent. Optional analytics cookies are set only with your consent, which you give through the cookie banner and can change at any time by clearing the consent cookie. For more detail, see the cookie banner shown when you first visit the Service.

8. Data retention

We keep your personal data for as long as your Account is active. When you delete your Account, your personal data and resumes are permanently removed from our active systems without undue delay. We may retain limited records for longer where required to comply with a legal obligation (for example, payment and accounting records), to resolve disputes, or to enforce our agreements, after which they are deleted or anonymised.

9. Your rights

Subject to the conditions and exceptions in the GDPR, you have the right to: access your personal data; have inaccurate data rectified; have your data erased; restrict or object to certain processing; receive your data in a portable format; and withdraw any consent you have given (without affecting processing carried out before withdrawal). You can:

• edit or delete individual resumes and cover letters at any time in your dashboard;
• permanently delete your entire Account and all associated data from Settings → Delete account (right to erasure);
• request a copy of your data, or exercise any other right, by emailing info@wezoom.app.

10. Automated decision-making

The WeZoom Score and ATS analysis are generated automatically from the content you provide, but they are informational tools to help you improve your documents. They do not produce legal effects concerning you or similarly significantly affect you, and we do not use them to make automated decisions within the meaning of GDPR Article 22.

11. Children

The Service is not directed to children under 16 (or the minimum age of digital consent in your country, if higher), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact info@wezoom.app and we will delete it.

12. Security

We take reasonable technical and organisational measures to protect your personal data: passwords are hashed with bcrypt, sessions use signed, HTTP-only cookies, and authenticated endpoints are scoped to your Account. No method of transmission or storage is perfectly secure, but we work to protect your data using measures appropriate to the risk.

13. Data breaches

If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority, and, where required by the GDPR, affected users, without undue delay in accordance with GDPR Articles 33 and 34.

14. Changes to this Policy

We may update this Policy from time to time. Where changes are material, we will announce them in-product or by email before they take effect. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

15. Complaints

As an EU-established controller, we process personal data in accordance with the GDPR and applicable Latvian data-protection law. If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data-protection authority. Our supervisory authority is the Data State Inspectorate of Latvia (Datu valsts inspekcija). We would, however, appreciate the chance to address your concern first — please contact info@wezoom.app.

Company details

• Company: SIA 2A2M (limited liability company)
• Jurisdiction: Republic of Latvia (European Union)
• Registration number: 40203771324
• Contact: info@wezoom.app
• Supervisory authority: Data State Inspectorate of Latvia (Datu valsts inspekcija)