Privacy Policy
Last updated: 25 February 2026
Privacy Policy
Last updated: 25/02/2026
Filiz ("we", "us", or "our") is operated by Grycode Ltd, a company registered in England and Wales.
This Privacy Policy explains how we collect, use, and protect your information when you use Filiz at https://filiz.app (the “Service”).
1. Data Controller
Grycode Ltd
Office 408 Screenworks
22 Highbury Grove
London, United Kingdom
N5 2ER
Email: [email protected]
Grycode Ltd is the data controller responsible for your personal data.
2. Information We Collect
Account Information
When you create an account, we may collect:
- Email address
- Authentication identifiers (Firebase Auth)
- Sign-in provider information (e.g., Google login)
Resume Content
You may voluntarily provide personal information within resumes, including:
- Name and contact details
- Employment history
- Education history
- Skills and projects
- Uploaded documents (PDF/DOCX)
- Profile images (if uploaded)
This information is stored solely to provide the Service.
Anonymous Usage
Filiz allows users to create resumes without creating an account.
When using Filiz anonymously:
- A temporary anonymous identifier is created
- Resume data may be stored before account registration
- If you later sign up, your data is linked to your account
Anonymous accounts and associated data may be automatically deleted after a period of inactivity.
Usage Data
We may collect limited technical information such as:
- Device and browser type
- Basic usage events
- Log data necessary for service operation
Analytics tools may be introduced to improve the Service.
3. How We Use Your Information
We process personal data to:
- Provide and operate Filiz
- Generate and edit resumes
- Enable sharing and collaboration
- Process payments and subscriptions
- Improve product functionality
- Maintain security and prevent abuse
- Comply with legal obligations
We do not sell personal data.
4. AI Processing
Filiz uses artificial intelligence services to provide writing suggestions and resume improvements.
When AI features are used:
- Relevant resume content may be sent to third-party AI providers (such as OpenAI)
- Data is processed solely to generate responses requested by the user
- Data is not used to train AI models on our behalf
- Prompts are not permanently stored unless necessary to provide features
AI processing occurs only when users actively use AI features.
5. Payments
Payments are processed securely by Stripe.
- We do not store payment card details
- Billing information is handled directly by Stripe in accordance with their privacy practices
6. Data Storage and Hosting
Primary data storage is hosted using:
- Google Firebase (Firestore, Authentication, Storage)
- Google Cloud infrastructure located in the United Kingdom (London region)
Some service providers may process data internationally, including in the United States.
We rely on appropriate safeguards provided by these providers to protect personal data.
7. Sharing and Collaboration
Users may share resumes using generated links.
Access permissions may include:
- Viewer
- Commenter
- Editor
Shared resumes are not indexed by search engines by default.
Users are responsible for managing access permissions they grant.
8. Data Retention
We retain data only as long as necessary to provide the Service.
- Users may delete resumes at any time
- Users may delete their accounts through account settings
- Deleted data is permanently removed from active systems
Anonymous data may be automatically removed after inactivity.
9. Your Rights
Under UK GDPR and applicable data protection laws, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict processing
- Object to processing
- Request data portability
To exercise these rights, contact: [email protected]
10. Cookies
Filiz uses essential cookies required for authentication and operation of the Service.
Additional analytics cookies may be introduced and disclosed via a Cookie Policy.
11. Security
We implement reasonable technical and organisational measures to protect data, including:
- Secure authentication systems
- Encrypted data transmission (HTTPS)
- Access controls
No system is completely secure, but we take appropriate safeguards.
12. Children’s Privacy
Filiz is intended for users aged 16 years or older.
We do not knowingly collect personal data from children under 16.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Updates will be posted on this page with a revised “Last updated” date.
14. Contact
For privacy-related questions or requests: