Legal / privacy
Wizzo Privacy Policy
How Wizzo Labs collects, uses, protects, and gives you control over your data.
Privacy at a Glance
Data Encryption
Data is encrypted in transit and protected at rest by managed infrastructure controls
Minimal Collection
We only collect what's necessary for the service
Your Control
You can export or delete your data anytime
1. Information We Collect
Personal Information
When you create an account with Wizzo, we collect:
- Account Information: Name, email address, and profile information
- Authentication Data: Hashed passwords when password auth is used, session tokens, and related security records
- Profile Preferences: Theme settings, notification preferences, and AI behavior settings
Usage Data
We automatically collect information about how you use Wizzo:
- Quest Data: Your goals, quests, achievements, and progress tracking
- AI Interactions: Conversations with the AI mentor stored with your account, plus aggregated or deidentified signals used to improve reliability and product quality
- App Usage: Features used, time spent, and interaction patterns
- Device Information: Browser type, operating system, and limited network or region signals used for security, reliability, and abuse prevention
What We Don't Collect
- Personal financial account numbers, payment card data, or similar financial credentials beyond what you choose to share in quests
- Precise geolocation data beyond general geographic region
- Biometric identifiers or regulated health records. Wizzo is not designed for medical record storage, though you control what goals or notes you enter.
- Data from third-party services without your explicit consent
2. How We Use Your Information
Service Provision
To provide, maintain, and improve Wizzo's core functionality including quest management, achievement tracking, and AI mentoring.
Personalization
To customize your experience, provide relevant AI suggestions, and adapt the interface to your preferences.
Communication
To send you important updates about the service, respond to your inquiries, and provide customer support.
Analytics and Improvement
To analyze usage patterns, identify bugs, and develop new features that enhance your experience.
Security
To protect against fraud, abuse, and security threats, and to ensure the integrity of our service.
3. Data Sharing and Disclosure
We Do NOT Sell Your Data
We never sell, rent, or trade your personal information to third parties for marketing purposes.
Limited Sharing
We may share your information only in these limited circumstances:
- With your explicit consent
- To comply with legal obligations or court orders
- To protect our rights, property, or safety, or that of our users
- With service providers who assist in operating our platform (under strict confidentiality agreements)
Aggregated or Deidentified Data
We may share aggregated or deidentified data for research purposes or to improve our service. We do not intend for these summaries to identify individual users.
Connected Sources and Mentor
Google identity and source access
Google sign-in supplies identity information such as your name, email address and profile image. Connecting Google Drive, Gmail or Google Calendar is optional and separate from signing in to Wizzo.
What a source check reads
When you request a check, Wizzo previews up to ten recent Drive file or folder metadata records, five inbox message headers, or ten primary-calendar event metadata records within seven days. These readers do not fetch Drive document contents, email bodies or attachments. The permission you grant can allow more metadata than these bounded queries.
Connection controls
Wizzo stores encrypted authorization credentials on its server to maintain and renew your chosen connection. Pause stops future source reads. Disconnect removes that source grant while preserving Wizzo sign-in. Manage Google's entire app consent separately in your Google account.
When you send source context to Mentor
Previewing metadata does not send it to OpenAI. Choosing an item prepares an editable draft. When you select Send in Mentor, Wizzo shares your message and selected source context with OpenAI to provide the assistance you request, and saves the submitted text and response in your conversation History. By sending, you ask Wizzo to keep that conversation for this feature until you delete it or your account.
History and optional Memory
You can delete a conversation from History. If optional Memory is enabled, eligible details from your messages may also be saved for personalized assistance. Past-chat recall has its own control. Review and delete saved Memory in Settings. Deleting History or disconnecting a source does not delete separately saved Memory. Backups and operational logs follow the retention rules below.
AI provider data handling
Wizzo's OpenAI project has optional feedback, evaluation/fine-tuning and API input/output sharing disabled. This does not erase historical provider data or promise zero retention. OpenAI normally keeps abuse-monitoring logs for up to thirty days. It may keep them longer when required by law or needed to protect its services or others from harm; some API features also retain response state depending on request settings. See OpenAI's API data controls for details.
Limited Use commitment
We use Google Workspace data for the visible features you request. We do not sell it, use it for advertising, or use it to create, train or improve general-purpose AI models. Wizzo's handling and sharing of information received from Google Workspace APIs will follow the Google Workspace API User Data and Developer Policy, including its Limited Use requirements.
OpenAI API data controls · Google Workspace data policy and Limited Use · Memory controls
4. Data Security
Encryption
Data is encrypted in transit using current TLS standards and protected at rest through our managed hosting and database providers where supported and configured.
Access Controls
We implement strict access controls and regularly audit who can access your data.
Security Reviews
We use security reviews, dependency checks, access reviews, and operational audits to identify and address vulnerabilities.
Incident Response
If a data incident affects personal information, we will investigate, take steps to secure the service, and notify affected users or regulators as required by applicable law.
5. Your Rights and Choices
Access Your Data
You can view and download all your data at any time through the Export feature in your account settings.
Update Your Information
You can update your profile information, preferences, and settings at any time through your account.
Delete Your Account
You can delete your account from Settings after confirming your email. Active application records covered by the deletion flow are removed or deidentified; limited provider backups, security logs, and legally required records may remain for their normal retention windows.
Opt-Out of Communications
You can unsubscribe from marketing emails while still receiving important service updates.
Data Portability
You can export your account data as a JSON archive from Settings -> Security & Privacy.
6. Data Retention
Active Accounts
We retain account data while your account remains active. After account closure or deletion, retention depends on the requested action, legal obligations, provider backup lifecycle, and operational security needs.
Deleted Data
When you delete quests or other records, Wizzo removes them from active application views. Account deletion removes covered active application records through the documented deletion flow; provider backups and logs expire on their configured lifecycles.
Analytics Data
Aggregated or deidentified analytics may be retained for product, security, and reliability analysis. Specific retention periods are governed by our operational policies and legal requirements.
8. Children's Privacy
Wizzo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we discover that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
We will notify you of any material changes by:
- Posting the updated policy on this page
- Sending you an email notification
- Displaying a notice in the app
Your continued use of Wizzo after any changes constitutes acceptance of the updated Privacy Policy.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Data Protection Contact
For privacy-related concerns or data subject requests, you can also contact our data protection contact at dpo@gowizzo.io
© 2026 Wizzo Labs, Inc. All rights reserved.
This Privacy Policy is effective as of June 2025 and was last updated on October 8, 2026.
See also our Terms of Service.