Privacy Policy

02How We Use Your Information

We use the collected information to:

• Provide, maintain, and optimize the Service.
• Parse, analyze, and generate AI-powered resumes, cover letters, and job matching scores based on your inputs.
• Process payment transactions and manage subscription states.
• Deliver transactional communications — email verification, password resets, billing receipts, and support responses.
• Protect against fraudulent logins, credential stuffing, and platform misuse.
• Diagnose technical issues and conduct product research for feature improvements.

03How We Protect Your Information

• Encryption: All user data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using industry-standard AES-256 protocols.
• Cloud infrastructure: Your content is stored within secure Amazon Web Services (AWS) infrastructure subject to strict IAM role access controls and network isolation.
• Access control: Internal access to production database records is strictly restricted to authorized development personnel on a need-to-know basis.
• Incidents: In the event of a data security breach impacting your personal information, we will notify you via email in accordance with applicable legal obligations.

04Data Sharing & Sub-processors

We share data only with trusted third-party service providers (sub-processors) necessary to operate our platform:

• Cloud infrastructure & identity: Amazon Web Services (AWS) for hosting, user authentication (Cognito), and data storage.
• AI processing: Foundation AI models — such as Anthropic Claude hosted via AWS Bedrock — to parse job descriptions and generate customized career content.
• Payment processing: Stripe for subscription billing and checkout services.
• Product analytics & infrastructure: Privacy-focused telemetry tools (e.g., PostHog) to manage feature deployments and monitor application performance.
• Transactional email: Delivered via AWS infrastructure (including Amazon Cognito’s email delivery) for system notifications and authentication codes.
• With your consent: When you use sharing features such as shareable resume links, the content you choose to share is accessible to anyone with the link.

We may also disclose your information if required to do so by law, subpoena, or valid legal process.

05AI Models and Your Data

• No model training: Your resumes, cover letters, and uploaded documents are never used to train, fine-tune, or improve public or commercial foundational AI models.
• Private execution: AI analysis and generation occur inside secure cloud infrastructure environments managed specifically for AirWiz operations.
• Isolated processing: Generated content remains isolated to your personal account profile.

06Data Retention & Account Deletion

• Active accounts: We retain your account data and custom documents while your account remains active.
• Account deletion: When you request account deletion through your account settings or by contacting privacy@airwiz.ai, your personal information, uploaded documents, and generated assets will be purged from our active databases within 30 days.
• Financial compliance: Billing records and transaction logs are retained for up to 7 years to satisfy tax and accounting legal mandates.

07Your Rights & Choices

Depending on your jurisdiction — including under CCPA/CPRA, GDPR, and UK data protection laws — you have the right to:

• Access & portability: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccuracies in your personal profile at any time inside the web application.
• Deletion: Request the permanent deletion of your account and associated assets.
• Non-discrimination: We will not discriminate against you in price or service level for exercising any of your privacy rights.
• Do not sell / share: AirWiz does not “sell” or “share” user data for cross-context behavioral advertising as defined under the California Consumer Privacy Act.

California “Shine the Light”

California residents may request details regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing.

Legal basis for processing (GDPR)

For users in the European Economic Area and the UK, we process personal data on the basis of performance of a contract (generating your resumes and career assets) and legitimate interest (fraud prevention and application stability).

To exercise any of these rights, contact us at privacy@airwiz.ai.

08Cookies & Local Storage

We use essential first-party cookies and browser local storage mechanisms strictly for:

• Authentication & security: Maintaining active, authenticated user sessions.
• Operational functionality: Storing UI state preferences and managing feature flag rollouts.

We do not use third-party tracking cookies or cross-site advertising pixels.

09Children’s Privacy

The Service is intended for working professionals and job seekers. It is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we discover that a child under 16 has submitted personal information, we will delete it immediately.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or platform functionality. Material changes will be communicated via email or a prominent notice upon logging into the Service.

11Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to us.