Legal

Privacy Policy

Last updated: October 12, 2026

Fix My Resume operates this service and is the controller of personal data processed through it. For privacy questions or requests, contact support@tryfixmyresume.com.

Information we process

We process the resume file you upload and text extracted from it. The service accepts English PDF files. Resumes can contain your name, contact details, work history, education, skills and other information you include. For a purchase, we also process your delivery email address and order status and reference received from Polar.

We process a job identifier, an essential browser cookie used to authorize access to that job, and technical information about requests and service operation. A purchase-specific access cookie may remain in your browser for up to 90 days; it cannot grant access after the associated job is removed. Rate limiting uses a keyed hash of the client IP address. Nginx access logs also contain the client IP address, timestamp, request method and path, status and response size. Warning-level error logs may contain technical details about failures.

If you request a launch notification, we store your email address and the time of your consent separately from your resume for up to 90 days. We use it only to notify you when the full PDF becomes available, based on your consent. You can withdraw consent or request deletion by emailing support@tryfixmyresume.com. Notification emails are delivered through Resend.

Purposes and legal bases

We use resume files and extracted text to check whether a file can be processed, prepare the review, create the final PDF after purchase and provide access to it. We use the delivery email and payment status to fulfill and support a purchase. These activities are necessary to provide the service and perform our contract with you.

We use technical records and server logs to operate and secure the service, prevent abuse, enforce rate limits and diagnose failures. We do this for our legitimate interests in maintaining a reliable and secure service. Where applicable law requires us to retain or disclose records, we process them to comply with legal obligations.

Service providers

We send selected, prepared resume text fragments to OpenAI through its API to generate review suggestions; we do not send the uploaded PDF file itself to the API. OpenAI states that API data is not used to train or improve its models by default. Under OpenAI's current API data policy, abuse-monitoring logs may contain prompts and responses and are retained for up to 30 days by default, subject to stated exceptions. See OpenAI's API data controls.

We use Resend to deliver the paid result by email. Resend receives the recipient email address, email content and generated PDF attachment.

Polar acts as Merchant of Record and provides checkout through its payment processors. Polar and its payment processors receive the information needed to process the transaction. We receive order status and reference information needed to confirm the purchase and deliver the result; we do not receive or store full payment card details. See Polar's Privacy Policy for its data practices.

Our hosting provider supplies the server and private storage used for uploaded files, generated PDFs, job records and service logs, and may process that data to provide the infrastructure.

Data retention and server logs

Unpaid jobs normally expire 24 hours after creation. After a paid PDF is generated and delivery is resolved, its normal access period is 72 hours from generation. Jobs with an unresolved checkout, payment verification, paid generation or email-delivery issue are retained and may remain accessible beyond these periods so that we can resolve the purchase; there is no fixed automatic deletion deadline for unresolved cases. Once resolved, normal expiry and cleanup apply. The cleanup task removes expired job files and related database records when the host scheduler runs it. The deployment runbook documents an hourly schedule; physical deletion may happen after access expires. Deletion is not guaranteed at the exact expiry time.

We keep minimal payment references, amounts, currency, status and technical binding identifiers for 90 days after the associated job is removed, then delete them during cleanup. The delivery email and any saved email payload are removed with the job; a successfully delivered email payload is cleared earlier. Processed webhook event identifiers and technical delivery metadata are eligible for deletion after 90 days. We do not store full webhook bodies.

Nginx writes access logs to Docker container output and warning-level error logs to container error output. Production Compose configures Docker's json-file driver to rotate each service log at 10 MB and retain up to three files. This is size-based rotation, not a fixed time-based retention period; the age of retained logs depends on log volume. Server logs may contain IP addresses and technical request and failure data.

After an email is sent, copies of the message and PDF may remain in your mailbox, your email provider or email-delivery infrastructure under their own policies. We do not control or promise deletion of those copies.

Optional product analytics

When analytics is enabled, we ask for your permission before measuring your visits and the steps from upload to purchase and download with PostHog EU. You can decline and use the service, or change your choice at any time using Analytics settings. We honor Global Privacy Control and Do Not Track by disabling optional analytics. We use consent for this optional processing.

With permission, an optional random identifier cookie lasts up to 90 days. We send only approved event names, public page names, broad traffic source and medium categories, approved campaign codes, and the currency and discounted amount excluding tax of a server-confirmed purchase. We do not send your resume, PDF, extracted text, name, email, IP address, full URLs, query strings, recovery tokens or job identifiers to PostHog. We do not use session recordings, form autocapture, advertising pixels or person profiles. Random identifiers may still be personal data under applicable privacy laws.

PostHog processes these analytics events in its EU region (Frankfurt, Germany). Our local analytics records become eligible for deletion after 90 days and are removed when cleanup runs. Retention of events already sent to PostHog depends on the retention and deletion settings in our PostHog project; we do not promise a fixed 90-day deletion period for those copies. Withdrawing consent clears the optional identifier and stops future tracking and unsent associated events. Events already submitted may remain until removed under those settings; contact support for a deletion request. Our operational payment records remain necessary to fulfill purchases and handle accounting and support. We do not sell or share analytics data for cross-context behavioral advertising. See PostHog Privacy Policy.

Your privacy rights

Depending on the law that applies to you, you may have the right to request access to, correction of or deletion of your personal data, and may have rights to restrict or object to processing, receive a copy of data or withdraw consent where processing is based on consent. To make a request, email support@tryfixmyresume.com. We may ask for information needed to verify and locate your request. Where applicable law provides the right, you may also lodge a complaint with your local data-protection supervisory authority.