WizzHire
For Employers

Privacy Policy

Last updated: June 4, 2026

WizzHire ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at wizzhire.com.

1. Data Controller

The data controller responsible for your personal data is:

Terracode
  • Ul. Ihtijarevica 5
  • Visoko 71300
  • Bosnia and Herzegovina
  • Registration No: 4320834980001
  • Email: privacy@wizzhire.com

2. Information We Collect

Identity Information

Name, email address, phone number, physical address, date of birth, and profile photo.

Account Information

Hashed passwords, OAuth authentication tokens, device fingerprints, and IP addresses used for account security.

Financial Information

Token wallet balance, proforma invoices, transaction history, and bank transfer details (for company accounts).

Professional Information

Uploaded CVs, work history, education records, skills, language proficiencies, and professional certificates.

Behavioral Information

Search history, saved jobs, company follows, notification interaction tracking, and platform usage patterns.

Communications

Chat messages exchanged through the platform, cover letters submitted with job applications, and support communications.

3. How We Collect Information

  • Directly from you - when you register, create a profile, apply to jobs, or communicate through the platform.
  • From OAuth providers - when you authenticate via Google, Microsoft, or LinkedIn, we receive your name and email address.
  • Automatically - device information, browser type, IP address, and usage data collected when you access the platform.

4. Legal Bases for Processing (GDPR Art. 6)

Contract Performance

Account operation, job application processing, billing and token management, messaging between users and companies.

Consent

Marketing emails, AI-assisted candidate screening, non-essential analytics and error tracking.

Legitimate Interest

Platform security and fraud prevention, service improvement, abuse detection.

5. How We Use Your Information

  • Account management - creating and maintaining your account, verifying your identity.
  • Job matching - connecting candidates with relevant opportunities based on skills and preferences.
  • Application processing - managing the lifecycle of job applications including status updates and notifications.
  • Billing - processing token purchases, generating invoices, and managing subscription plans for company accounts.
  • Communications - sending transactional emails, in-app notifications, and facilitating messaging between users and companies.
  • Security - detecting and preventing fraud, unauthorized access, and abuse of the platform.
  • Analytics - understanding how users interact with the platform to improve functionality and user experience.

Marketing Communications

We may send you marketing communications about our services. You always have the right to opt out of receiving marketing emails by using the unsubscribe link in any marketing email, or by contacting us at privacy@wizzhire.com. Opting out of marketing communications does not affect transactional emails related to your account (e.g., payment confirmations, security alerts).

We do not sell, rent, or share your personal data with third parties for their marketing purposes. Your information is only shared as described in this Privacy Policy.

6. Information Sharing

With Employers

When you apply to a job, the employer receives your profile information, CV data, and application details. Your visibility settings control what information is shared.

With Service Providers

Google Cloud

Frankfurt, EU

Infrastructure & file storage

Data shared: All platform data

SendGrid

US

Transactional emails

Data shared: Email addresses, names

Anthropic

US

AI-assisted candidate screening

Data shared: CV data (when AI screening enabled)

Sentry

US

Error tracking

Data shared: Technical error data (with consent)

Google Analytics

US

Website traffic analytics

Data shared: Pseudonymous usage data (with consent)

With OAuth Providers

Google, Microsoft, and LinkedIn receive authentication requests when you use social login. We do not share your platform data with these providers beyond what is necessary for authentication.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

7. International Data Transfers

Your data is primarily stored and processed within the European Union (Google Cloud Frankfurt, europe-west3 region). Some service providers process data outside the EU:

  • SendGrid (US) - Email delivery, protected by Standard Contractual Clauses (SCCs).
  • Anthropic (US) - AI screening (when enabled), protected by SCCs.
  • Sentry (US) - Error tracking (with consent), protected by SCCs.
  • Google Analytics (US). Website traffic analytics with your consent, protected by SCCs.

8. Data Retention

Account data

Until deletion

Chat messages

Until deletion

Search history

90 days

Notifications

90 days

Database backups

90 days

System logs

180 days

After account deletion, your data is soft-deleted and permanently removed from active systems. Backup copies are purged within 90 days.

9. Your Rights (GDPR Art. 15-22)

Under the General Data Protection Regulation, you have the following rights:

Right of access

Request a copy of your personal data. You can export your data from Account Settings.

Right to rectification

Correct inaccurate or incomplete data via your profile settings.

Right to erasure

Request deletion of your account and associated data.

Right to data portability

Download your data in a machine-readable format (JSON).

Right to restriction

Request that we limit how your data is processed.

Right to object

Object to processing based on legitimate interest.

Right to withdraw consent

Withdraw consent at any time for consent-based processing.

Right to lodge a complaint

File a complaint with a data protection supervisory authority.

To exercise any of these rights, contact us at privacy@wizzhire.com.

10. Automated Decision-Making

WizzHire may use AI-powered tools to assist employers with candidate screening. These tools:

  • Provide recommendations and scores as a screening aid, not as a sole decision-maker.
  • Do not make legally binding decisions about your application.
  • Always allow human review by the employer.

You have the right to request human review of any automated assessment and to contest decisions influenced by automated processing.

11. Cookies & Local Storage

WizzHire primarily uses browser localStorage rather than traditional cookies for functionality. Essential storage includes JWT authentication tokens required for the platform to function.

For full details about what is stored and how to manage it, see our Cookie & Storage Policy.

12. Children's Privacy

WizzHire is not intended for users under the age of 16. We do not knowingly collect personal data from children. If we discover that a user is under 16, we will promptly delete their account and associated data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Terracode