Privacy Policy

Your privacy matters to us. Here’s how we handle your information:

What we collect

Account details (name, email)
CV content you create or upload
Video introductions (if you record one)
AI inputs and generated content
Usage and technical data
Payment info (processed securely by providers like Stripe)
CV information provided by a career professional acting on your behalf, where you have consented to that

Why we collect it

To run the platform and your account
To create and display your Virtual CV
To provide AI-assisted features
To improve security, performance, and support

AI & your data

We do NOT use your data to train AI models
AI providers only process data to deliver features you request
You stay in control of what’s published

If you make your Virtual CV public or share a link:
- Anyone with access can view it
- Others may copy or share it
You can change visibility or unpublish at any time

If someone created a CV for you

A career coach or CV writer can prepare a draft Virtual CV for you, but only with your consent
It stays private — it is never public before you claim it
We email you a link to claim it, and a reminder before it expires
If you do nothing, it is deleted automatically after 90 days
You can delete it immediately using the link in that email

Trusted service providers (hosting, AI, analytics, payments)
Legal authorities if required by law
No selling your data to advertisers

Overseas data

Some providers operate outside Australia
We take reasonable steps to ensure compliance with Australian privacy laws

Your rights

You can access or correct your data
You can request account deletion
You can lodge a privacy complaint if needed

Bottom line

Your data is used to power your Virtual CV — nothing more
You control what’s public
We follow Australian privacy laws

👉 For full details, read the complete Privacy Policy below.

1. Introduction

This Privacy Policy applies to all personal information collected by Wipperoz Pty Ltd (ACN 623 500 603) (“Wipperoz”, “we”, “us”, “our”).

This policy explains how we collect, hold, use, disclose, and protect your personal information when you access or use the Wipperoz Virtual CV platform and related services (the “Services”), available at wipperoz.

Wipperoz allows users to sign in using Google Sign-In (OAuth). Where users choose to sign in with Google, Wipperoz may receive limited Google user data such as your email address, profile name, profile picture, and a Google account identifier, strictly for authentication and account creation purposes. Wipperoz does not access Google Drive files, Gmail content, Google Calendar data, Google Contacts, or any other Google services unless explicitly stated in this Privacy Policy and authorised by the user.

Wipperoz’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalized AI and/or machine learning models.

By using our Services, you agree to this Privacy Policy and the Wipperoz Terms & Conditions.

Wipperoz is committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

A copy of the APPs is available at: Office of the Australian Information Commissioner

2. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes that affect how we use or disclose your personal information, we will notify you via your registered email address or through the platform. You should review this policy periodically.

3. What personal information we collect

The types of personal information we may collect include:

3.1 Identity & account information

Full name
Email address
Phone number (optional)
Username and password (stored securely)
Profile settings and preferences

3.2 Career & profile content

Resume / CV information (work history, education, skills)
Portfolio links and descriptions
Cover letter content
Career goals and preferences
Any information you choose to include in your Virtual CV

3.3 Uploaded content

PDF resumes or other documents you upload
Images or media you choose to attach

3.4 Video & audio content

Recorded video introductions
Thumbnails and basic metadata (duration, upload time, device type)

3.5 AI interaction data

Text you input into AI-assisted features
Prompts, edits, feedback, and preferences
AI-generated outputs such as rewritten content, summaries, or suggestions

Important: We do not use your personal information, uploads, or AI interactions to train artificial intelligence models.

3.6 Payment & billing information

Payment method details (processed securely by third-party providers such as Stripe)
Transaction records and credit usage

3.7 Usage & technical data

IP address
Browser and device type
Operating system
Log files, error reports, and performance metrics
Pages or features used within the Services

Wipperoz allows users to sign in using Google Sign-In (OAuth).

When you choose to sign in with Google, we may collect and process limited Google user data including:

Your Google account email address
Your Google profile name
Your Google profile picture (if available)
A Google account identifier (OAuth subject ID)

We use this information strictly for the purposes of:

authenticating your identity
creating or logging you into your Wipperoz account
displaying basic profile information within the platform

We do not access or request Google user data from other Google services such as:

Google Drive files
Gmail content
Google Calendar data
Google Contacts
Google Photos
or any other Google services

Wipperoz does not sell Google user data and does not share Google user data with advertisers.

Google user data may be stored and processed only as required to operate the Services and may be handled by trusted infrastructure providers (such as hosting services) strictly for the purpose of operating Wipperoz.

Wipperoz’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to develop, improve, or train generalized AI and/or machine learning models.

3.9 Information provided by a career professional on your behalf

Where a career coach, CV writer, or other career professional prepares a Virtual CV on your behalf, we may receive your name, email address, career information, and uploaded documents from that professional rather than directly from you. See section 16.

4. Why we collect personal information

We collect and use personal information to:

Create and manage user accounts
Provide and operate the Services
Create, edit, publish, and host Virtual CVs
Enable video introductions and profile sharing
Provide AI-assisted features (such as CV generation, rewriting, and feedback)
Process uploaded documents (e.g. PDF to Virtual CV conversion)
Process payments, credits, and billing
Communicate with you about your account and the Services
Provide customer support
Improve platform performance, usability, and security
Detect and prevent fraud, misuse, or security incidents
Comply with legal and regulatory obligations

5. AI features and data use

Wipperoz offers AI-assisted features to help Users improve and present their career information.

You acknowledge that:

AI-generated outputs are assistance only, not professional or legal advice
AI outputs may be incomplete, generic, or inaccurate
You are responsible for reviewing and deciding what content to use or publish

AI training

We do not use your personal information, uploads, or AI interactions to train AI models.
AI service providers process your data only to generate outputs requested by you and to operate the Services.

You may choose to:

Keep your Virtual CV private
Share it via an unlisted link
Publish it publicly

If you publish or share your Virtual CV:

The information you include (including video introductions) may be accessible by third parties
Third parties may copy, share, screenshot, or store your content
You can change visibility settings or unpublish your Virtual CV at any time, subject to technical limitations and third-party caching beyond our control

7. How we collect personal information

We collect personal information:

Directly from you when you sign up, edit your profile, upload content, or use features
Automatically through your device or browser when you use the Services
Through cookies, analytics tools, and similar technologies
From payment providers in relation to transactions
From a career professional acting on your behalf with your consent, as described in section 16

8. Disclosure of personal information

We may disclose personal information to:

8.1 Service providers

Third-party providers who help us operate the Services. Our principal providers are:

Amazon Web Services (AWS) — cloud hosting, data storage, and transactional email delivery
AI model providers — process CV content and prompts in order to generate the outputs you request
PostHog — product analytics, monitoring, and error reporting
Stripe — payment processing

We may also use customer support and communication tools in the course of assisting you.

These providers are authorised to use personal information only as necessary to provide services to us, and are not permitted to use it for their own purposes.

Where a Virtual CV is created on your behalf by a career professional (see section 16), we limit what is shared with analytics providers: analytics events record the email domain only, and do not include the name or email address of the person the Virtual CV is about.

8.2 Payment providers

Payments are processed by third-party providers. Wipperoz does not store full payment card details.

8.3 Legal and regulatory authorities

Where required by law, court order, or regulator, or where reasonably necessary to protect rights, safety, or prevent unlawful activity.

Where you explicitly authorise us to do so.

9. Overseas disclosure

Some service providers may store or process personal information outside Australia, including in the United States or other jurisdictions.

We take reasonable steps to ensure overseas recipients handle personal information in accordance with the Australian Privacy Principles.

10. Cookies and analytics

We use cookies and similar technologies to:

Operate and improve the Services
Understand user behaviour
Measure performance and usage

You can control cookie settings through your browser.

11. Security of personal information

We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.

However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials.

12. Data retention

12.1 General

We retain personal information only for as long as necessary to:

Provide the Services
Meet legal and regulatory requirements
Resolve disputes and enforce agreements

When information is no longer required, we take reasonable steps to delete or de-identify it, unless retention is required by law.

12.2 Virtual CVs created on your behalf (unclaimed)

Where a career professional creates a Virtual CV on your behalf and you have not yet claimed it, that draft is held for a maximum of 90 days from the date it is created.

We email you a reminder 7 days before the draft is due to be deleted
If it is not claimed within 90 days, it is permanently deleted, including the CV content and any uploaded documents
You can ask us to delete it sooner at any time, using the link in the email we send you or by contacting us

After the deletion, we retain a minimal record of the invitation — the email address it was sent to, the identity of the professional who sent it, and the relevant dates. We keep this to evidence the consent that was relied on and to avoid sending you a repeat invitation you did not ask for. You may request the deletion of that record by contacting us at privacy@wipperoz.com.

Once you claim a Virtual CV and create an account, the information becomes part of your account and is retained under section 12.1.

13. Access and correction

You may request access to, or correction of, your personal information by contacting us.

We will respond in accordance with the Australian Privacy Principles and may require verification of identity.

14. Complaints

If you believe we have mishandled your personal information, contact us at: privacy@wipperoz.com

We will investigate and respond within 30 days.

If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

15. Contact us

For questions about this Privacy Policy: privacy@wipperoz.com

16. Personal information collected from a third party (Virtual CVs created on your behalf)

In some cases we receive personal information about you from someone other than you — specifically from a career coach, CV writer, or other career professional (a “Partner”) who uses Wipperoz to prepare a Virtual CV on your behalf. This section explains what happens in that case, and is provided to meet our obligations under Australian Privacy Principle 5.

16.1 What we receive, and from whom

A Partner may provide us with your name, email address, and career information (work history, education, skills, and similar), together with any documents they upload. We then generate draft Virtual CV content from that information using the AI features described in section 5.

16.2 The basis on which we hold it

A Partner may only do this where they have a genuine professional engagement with you and have obtained your informed consent. Partners give us a contractual warranty to that effect under our Partner Terms, and we record the consent statement they confirmed, its version, and the date and time it was confirmed.

If you believe a Virtual CV has been created for you without your consent, contact us at privacy@wipperoz.com and we will delete it.

16.3 What we do with it before you claim it

Before you claim the Virtual CV:

It is never public. It is not published, not shared by link, and not indexed by search engines.
It is visible only to the Partner who created it, and to authorised Wipperoz personnel where necessary for support, security, or investigating misuse.
It is not used to train AI models (see section 5).
We do not use your details for marketing. The only messages we send you are the invitation to claim the Virtual CV and one reminder before it expires.

16.4 How long we keep it

A maximum of 90 days, with a reminder 7 days before deletion. See section 12.2.

16.5 Your choices

You may:

Claim the Virtual CV, by creating a Wipperoz account
Delete it immediately, using the link in the email we send you
Contact us at privacy@wipperoz.com to ask what we hold, to correct it, or to have it removed

Your rights of access and correction under section 13, and to complain under section 14, apply to this information in the same way as to any other personal information we hold.

16.6 If you claim it

When you claim a Virtual CV you create your own Wipperoz account and accept the Wipperoz Terms and Conditions directly. From that point the information is held under your account, you control it, and the Partner’s access to it ends unless you choose to grant it again.

16.7 If you take no action

The draft is deleted as described in section 12.2, and the Partner’s access to it ends at the same time.