Privacy Policy

1. What We Collect

Information you provide:

• Name, email, profile photo (from Google sign-in)
• Resume / CV content you upload
• Profile content: bio, work history, skills, links
• Voice recordings (used only to create your voice clone)
• Any messages or content you add to your profile

Automatically collected:

• IP address, browser type, device info
• Pages visited, features used, time on site
• Profile view counts and chat interaction data

2. How We Use Your Data

• To create and power your AI twin
• To match your profile with recruiters and opportunities
• To send you notifications about interactions with your twin
• To improve the platform (aggregated, anonymized analytics)
• To process payments via Stripe
• To comply with legal obligations

We do not sell your personal data to third parties.

3. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

• Google OAuth — authentication
• ElevenLabs — voice synthesis for your AI twin
• Anthropic Claude — AI responses from your twin
• Stripe — payment processing
• Resend — transactional emails
• Vercel — hosting and infrastructure
• MongoDB Atlas — database

4. Voice Data

Voice recordings you provide are sent to ElevenLabs to create a voice model. ElevenLabs stores this model on your behalf. We store only the voice model ID, not the original recording. You can delete your voice clone at any time from your profile editor.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days. Anonymized analytics data may be retained longer.

6. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (export your data)

To exercise any of these rights, email hi@zwil.app

7. Cookies

We use strictly necessary cookies for authentication (session tokens). We do not use advertising or tracking cookies. You can clear cookies in your browser settings at any time.

8. Security

We use industry-standard security measures including HTTPS, encrypted database connections, and hashed session tokens. No system is 100% secure — if you discover a vulnerability please disclose it responsibly to hi@zwil.app.

9. Children

Zwil is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

10. Contact

Privacy questions: hi@zwil.app