Wizuto Privacy Policy

This Privacy Policy explains how Wizuto LLC ("Wizuto," "we," "us," or "our") collects, uses, shares, and protects information when you use the Wizuto website, applications, and services (collectively, the "Service").

By using the Service, you understand that certain content you submit may be publicly posted (see Section 4).

1) Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Username
• If you sign in with Google OAuth, we receive information from Google such as your email address and basic profile information (for example, name and profile photo), depending on what you authorize through Google.

1.2 Content You Submit (Threads, Comments, Uploads)

When you create or interact with a thread, we collect and store:

• Text you submit (questions, follow-ups, comments)
• Vehicle-related details you provide (e.g., make/model/year, symptoms, part names)
• Images/files you upload related to automotive topics
• The AI responses generated by the Service
• Timestamps and identifiers needed to associate content with your account

1.3 Payment Information

If you upgrade to a paid plan, payments are processed by Stripe. Wizuto does not store your full credit card number.

Stripe may collect and process:

• Payment card details
• Billing address and other required billing information

We may receive limited information from Stripe, such as:

• Subscription status (active/canceled)
• Plan level and renewal dates
• Payment confirmation, receipts, and invoice data
• Limited payment metadata (e.g., card brand and last 4 digits), depending on Stripe settings

1.4 Usage and Device Information

We may automatically collect information about how you use the Service, such as:

• IP address, browser type, device type, operating system
• Log data (pages viewed, actions taken, errors)
• Approximate location inferred from IP address (city/region level)

1.5 Cookies and Similar Technologies

We may use cookies and similar technologies to:

• Keep you signed in and maintain sessions
• Remember preferences
• Provide security protections
• Measure usage and performance

We use Google Analytics (GA) and may also use analytics available through Replit to understand usage of the Service.

No Wizuto ad pixels: Wizuto does not intentionally implement advertising pixels for retargeting.

Third-party scripts: Some third-party services you interact with (for example, authentication or payment providers) may set their own cookies or tracking technologies when you use their embedded components. These are governed by the third parties' policies (see Section 7).

2) How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Create, display, and manage threads and comments
• Generate AI responses and maintain thread history
• Enable paid features and manage subscriptions
• Moderate content and enforce community rules and Terms
• Detect, prevent, and investigate fraud, abuse, and security issues
• Communicate with you about account, support, and important service updates

3) AI Processing (OpenAI)

Wizuto uses the OpenAI API to generate AI responses based on your inputs. This means:

• Text you submit in a thread may be sent to OpenAI for processing
• If you upload images, those images may be sent to OpenAI for analysis in connection with your request

Wizuto stores thread inputs and AI outputs in its database when a thread is created.

Model training: Wizuto does not sell your personal information. Wizuto does not use your private threads to train models.

4) Public vs. Private Threads

4.1 Public Threads (Visitors and Free Accounts)

Threads created by visitors and free users are public by default. This means:

• Anyone can view them
• They may be indexed by search engines
• Other users can comment (subject to moderation)

4.2 What Not to Post

Because public threads are visible to others, do not submit:

• Personal identifying information (address, phone, personal email, etc.)
• Vehicle identifiers such as VINs and license plate numbers
• Insurance details, registration documents, financial information
• Anything you don't want to be publicly visible

4.3 Private Threads (Paid Accounts)

Paid users may choose to keep threads private where this feature is available. Private threads are not publicly displayed or indexed.

Wizuto may access private threads only as needed to:

• Provide support you request
• Enforce policies and Terms
• Investigate abuse or security issues
• Comply with legal obligations

4.4 Deleting Threads and Comments

Users can delete their threads/comments themselves.

When you delete a thread:

• It is removed from the Wizuto site and no longer displayed publicly
• It is removed from Wizuto search features

Search engines: Removal from external search engines may take additional time because it depends on third-party indexing schedules.

Backups: Deleted threads and associated content may remain in backups for up to 30 days for security, legal compliance, and disaster recovery, after which they are deleted in the normal course.

5) How We Share Information

We share information only as described below:

5.1 Service Providers

We share information with vendors that help us operate the Service, such as:

• OpenAI (AI processing)
• Authentication providers (e.g., Google OAuth and account services)
• Stripe (payments)
• Replit (hosting and platform operations)
• Google Analytics (usage analytics)

These service providers are permitted to process information only to provide services to Wizuto.

5.2 Legal and Safety

We may disclose information if we believe it is necessary to:

• Comply with applicable laws or legal process
• Enforce our Terms and policies
• Protect the rights, safety, and security of Wizuto, our users, or others
• Detect and prevent fraud, abuse, or security incidents

5.3 Business Transfers

If Wizuto is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

5.4 Public Sharing

If you post in a public thread, your content is visible to others. Your username may be displayed with your posts and comments.

6) Affiliate Links and Third-Party Websites

Wizuto may include affiliate links to third-party sites for parts and tools. If you click an affiliate link, the third party may collect information under their own privacy policies, and Wizuto may receive a commission.

Wizuto is not responsible for third-party privacy practices.

7) Third-Party Services and Embedded Components

Some third-party services may collect information directly when you use their embedded components in the Service (for example, payment checkout forms or OAuth login). Those services may set their own cookies or tracking technologies and may process information under their own privacy policies.

Examples include:

• Payment processing pages or components provided by Stripe
• OAuth login flows provided by Google

8) Data Retention

We retain information for as long as needed to provide the Service and for legitimate business and legal purposes.

• Public threads: retained unless deleted by the user or removed for policy reasons
• Private threads: retained unless deleted by the user, subject to backup retention
• Backups: deleted content may persist in backups for up to 30 days
• Logs and security data: retained for operational and security purposes for a reasonable period

9) Your Rights and Choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and/or content
• Object to or restrict certain processing

You can delete threads/comments in the Service. For account-level requests, contact privacy@wizuto.com.

9A) Cookies and Analytics Choices

Wizuto uses Google Analytics and may use analytics available through Replit to understand how the Service is used and to improve performance.

You can control cookies and analytics in several ways:

• Browser controls: Most browsers let you remove or reject cookies and manage site permissions.
• Google Analytics controls: Google provides tools that may allow you to opt out of certain Google Analytics tracking (such as browser add-ons or settings).
• Do Not Track: Some browsers offer "Do Not Track" signals. Because there is no consistent industry standard for responding to these signals, we may not respond to them.

If you disable cookies, some features of the Service may not function properly.

9B) European Economic Area, United Kingdom, and Switzerland Privacy Rights (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, Wizuto is the "data controller" for your personal information.

Legal Bases for Processing

We process personal information only when we have a valid legal basis, including:

• Contract (Article 6(1)(b)) — to provide the Service you request (e.g., creating an account, generating AI responses, storing threads, enabling paid features).
• Legitimate Interests (Article 6(1)(f)) — to operate, secure, and improve the Service; prevent fraud/abuse; moderate content; and maintain community quality. We consider and balance your rights before relying on this basis.
• Consent (Article 6(1)(a)) — where required (for example, certain cookies or similar technologies, depending on your jurisdiction and settings).
• Legal Obligation (Article 6(1)(c)) — to comply with applicable laws, lawful requests, and regulatory requirements.

Your GDPR Rights

Subject to certain exceptions, you may have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Delete your personal information
• Restrict processing of your personal information
• Object to processing (including where we rely on legitimate interests)
• Data portability (receive a copy of certain information you provided)
• Withdraw consent (where we rely on consent)

To exercise these rights, contact us at privacy@wizuto.com.

Complaints

You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

International Data Transfers

Wizuto is based in the United States, and we may transfer personal information to the U.S. or other countries where we or our service providers operate. Where required, we rely on appropriate safeguards for international transfers, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission (and the UK's international data transfer addendum where applicable), and/or
• other lawful transfer mechanisms recognized under applicable data protection laws.

Public Threads and Special Note for GDPR Users

If you post content in a public thread, it may be publicly visible and indexed by search engines. Please avoid submitting personal information or vehicle identifiers (VIN/license plate) in public threads.

9C) California Privacy Rights (CCPA/CPRA)

This section applies to residents of California, as required by the California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA").

Categories of Personal Information We Collect

In the last 12 months, we may have collected the following categories (as defined by CCPA/CPRA):

• Identifiers: email address, username, IP address, device identifiers (where applicable)
• Internet/Network Activity: pages viewed, actions taken, timestamps, analytics events
• Approximate Location Data: derived from IP address (city/region level)
• Account and User Content: thread text, comments, and uploaded images/files (where provided)
• Commercial Information: subscription status and billing metadata from Stripe (we do not store full card numbers)

We do not intentionally collect sensitive personal information (as defined by CPRA). Please do not submit sensitive personal information through the Service.

Purposes for Collection and Use

We collect and use personal information for the purposes described in this Privacy Policy, including:

• Operating and improving the Service
• Providing AI responses and storing threads
• Enabling subscriptions and billing
• Security, fraud prevention, and moderation
• Analytics and performance measurement (including Google Analytics)

Disclosures of Personal Information

We may disclose personal information to service providers/contractors for business purposes, such as:

• OpenAI (processing prompts/images to generate responses)
• Stripe (payments and subscriptions)
• Replit (hosting and platform operations)
• Google Analytics (usage analytics)
• Authentication providers (e.g., Google OAuth)

Selling or Sharing Personal Information

Wizuto does not "sell" your personal information. Wizuto also does not "share" personal information for cross-context behavioral advertising (i.e., ad retargeting), because Wizuto does not intentionally deploy advertising pixels for that purpose.

Your California Rights

Subject to verification and certain exceptions, California residents may have the right to:

• Know what personal information we collect, use, disclose, and share
• Access a copy of personal information
• Delete personal information (including content you can delete directly in the Service)
• Correct inaccurate personal information
• Opt out of "sale" or "sharing" (note: we do not sell/share in this way)
• Limit the use/disclosure of sensitive personal information (note: we do not intentionally collect it)
• Non-discrimination for exercising your rights

To exercise these rights, email privacy@wizuto.com.

Verification and Authorized Agents

We may need to verify your identity before fulfilling requests. You may use an authorized agent to submit a request on your behalf; we may require proof of authorization and identity verification.

Global Privacy Control (GPC)

Because Wizuto does not sell or share personal information for cross-context behavioral advertising, we do not treat GPC signals as necessary for opt-out purposes. If our practices change, we will update this policy and honor GPC where required.

10) International Users

Wizuto is available worldwide. Your information may be processed and stored in the United States or other locations where Wizuto or its service providers operate.

If you are located outside the U.S., you understand that your information may be transferred to and processed in the U.S. under U.S. laws. Where required, we use appropriate safeguards for international transfers (see Section 9B).

11) Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at privacy@wizuto.com so we can take appropriate steps.

12) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no system can be guaranteed 100% secure.

13) Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law. The "Last Updated" date reflects the most recent version.

14) Contact Us