Privacy

Privacy policy.

gapizo turns job descriptions into personal learning and interview preparation. Doing that means processing some of your data. This page explains — in plain language — what we process, why, who processes it for us, and the rights you have over it.

Who we are

gapizo is operated from Croatia (European Union). For anything in this policy, including exercising your rights, contact support@gapizo.com.

What we process

• Account data. You sign in with Google or Microsoft. We receive your name, email address, and profile picture from them, plus a sign-in identifier. We never see your password.
• Content you give us.The job descriptions you paste, the details you fill in (skill levels, fit-check answers, career-change profile), the “About you” text, and your answers in the interview simulation. If you upload a CV (PDF), it is processed once to draft your “About you” text — the file itself is not stored on our servers; only the text draft you choose to save is kept.
• Generated content. The courses, plans, and preparation material created for you, saved to your account so you can come back to them.
• Service data. Technical metadata needed to run the service: generation status and cost accounting, abuse-prevention counters (rate limits), and feedback you choose to send us.

What we don’t do: we use no advertising and no analytics or tracking cookies — only the essential cookies that keep you signed in. We do not sell your personal data, and we do not use your content to train AI models.

Why we process it

• To provide the service (performance of a contract): generating your courses, saving your progress, sending you the email with your finished course.
• To keep the service safe (legitimate interest): content-safety screening of submitted text and rate limiting against abuse.
• To meet legal obligations where they apply to us.

AI processing

Your course content is generated by AI. The material you provide (job description, your inputs, and — during the one-off draft step — your CV) is sent to AI models through OpenRouter, a US-based routing service, and processed by the model provider it routes to. We use these providers only to generate your content. gapizo makes no automated decisions about you with legal or similarly significant effect — everything generated is study material and practice feedback, and hiring decisions are only ever made by real employers, not by gapizo.

Who processes data for us

We use a small set of processors to run gapizo:

• Google Firebase — sign-in and database (your account and courses).
• Vercel — hosting and running the application.
• OpenRouter — routing content to AI model providers for generation.
• Resend — transactional email (e.g. your finished course).
• Upstash — background job queue for longer generation tasks.

Some of these providers process data in the United States. Where data leaves the EEA, it is protected by the EU–US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

Your account and courses are kept for as long as your account exists, so your material stays available to you. When your account is deleted, your courses and personal data are deleted with it (short-lived technical backups age out automatically). Uploaded CV files are not retained at all — they are processed in memory and discarded.

Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interest. You can delete your account yourself at any time — account menu → Delete account — which permanently removes your account and everything in it. For anything else, email support@gapizo.com and we will respond within 30 days. You can also download any course as a PDF directly from the app at any time. If you believe we handle your data unlawfully, you have the right to complain to your supervisory authority — in Croatia, AZOP (Agencija za zaštitu osobnih podataka), or the authority in your own EU country.

Children

gapizo is a job-preparation tool and is not directed at children. Do not use it if you are under 16.

Changes

If we change this policy in a way that matters, we will update this page and the date below. Significant changes will be flagged in the app.

Last updated: July 2026