How wiz.legal handles your data, on what terms the service is provided, and the rights you hold under the GDPR. Written plainly; the binding version is the one in force on the date shown.
Wiz (the operator of wiz.legal), Ljubljana, Slovenia, is the controller of the personal data described here. Questions, requests and complaints: hello@wiz.legal.
To provide the service and your workspace (performance of a contract), to keep the service secure and to improve reliability (legitimate interest), to bill you (contract), and to meet accounting and legal obligations (legal obligation). Where we ever rely on consent — for example an optional product newsletter — you may withdraw it at any time.
Material you upload stays in your workspace. It is not used to train or fine-tune any model, ours or a third party's, and it is not shared with other customers. Queries sent to the underlying language-model provider are transmitted under a zero-retention arrangement for training purposes.
We use a small set of vendors to run the service: cloud hosting and storage, the language-model provider that powers research and drafting, an e-mail delivery service, a payment processor and product-analytics tooling. Each is bound by a data-processing agreement. Processing takes place within the EU/EEA; where a transfer outside it is unavoidable, it is covered by the European Commission's Standard Contractual Clauses. A current list of sub-processors is available on request.
Workspace content is kept for as long as your account is open and deleted within 30 days of account closure or of your deletion request, except where we must retain records longer by law (invoices: as required by Slovenian accounting rules). Security logs are kept for up to 12 months.
Data is encrypted in transit (TLS) and at rest. Access by our staff is role-based, logged and limited to what is needed for support and operations. We maintain backups and test restoration. If a breach affecting your data occurs, we notify the supervisory authority within 72 hours and inform you without undue delay where the law requires it.
The marketing site uses only what is necessary to serve the page and remember your language choice. The application uses a session cookie to keep you signed in and privacy-respecting analytics to count feature usage. No advertising or cross-site tracking cookies are set.
If we change this policy materially we will e-mail account holders at least 14 days before it takes effect. The date at the top always reflects the version in force.
By creating an account you agree to these terms. If you accept them for a firm, you confirm you are authorised to bind it. The service is offered to legal professionals and organisations, not to consumers.
wiz.legal is a research and drafting assistant over public Slovenian and EU case law and legislation, plus a workspace for your own matters. It is a professional tool. It does not provide legal advice and it is not a lawyer. Every output must be verified by a qualified professional before it is relied on or filed.
Keep your credentials confidential; you are responsible for activity under your account. Seats are personal and may not be shared. Notify us promptly of any suspected unauthorised access.
You keep all rights in what you upload and in the documents you produce. You grant us only the limited licence needed to host and process that material so the service can run. We keep all rights in the software, interface and database compilation.
Starting is free and requires no card. Paid plans are billed in advance per the price agreed at sign-up, renewing for the same period unless cancelled before the renewal date. Fees are exclusive of VAT. Cancellation stops future billing; part-periods already paid are not refunded.
We aim for continuous availability and give notice of planned maintenance where practical, but the service is provided without an uptime guarantee unless a separate written service-level agreement is in place.
To the extent permitted by law, our aggregate liability is limited to the fees you paid in the 12 months before the event, and we are not liable for lost profits, lost business or indirect damage. Nothing here excludes liability for intent, gross negligence, death or personal injury. Because outputs require professional verification, we are not liable for decisions taken on unverified output.
You may close your account at any time. We may suspend or terminate access for material breach of these terms, with notice where circumstances allow. On termination you may export your content for 30 days, after which it is deleted.
Slovenian law applies, with the courts of Ljubljana having jurisdiction. We will always try to resolve a dispute informally first — write to hello@wiz.legal.
Two roles matter here. For your account data we are the controller. For the client material you upload you are the controller and we act as your processor — a data-processing agreement on Article 28 terms is available and forms part of your contract on request.
Ask what we hold about you, and have anything inaccurate corrected.
Have your data deleted, or its processing paused while a dispute is settled.
Export your data in a machine-readable form, or object to processing based on legitimate interest.
Write to hello@wiz.legal. We answer within 30 days and charge nothing for a first request. If you are not satisfied, you may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or to the supervisory authority where you live or work.
The assistant generates research and drafts at your instruction. We do not make automated decisions with legal effect about you, and we do not profile you for advertising.
We will send a signed data-processing agreement, the sub-processor list and our security overview the same working day.
→Request the DPA