Privacy Policy

Effective Date: August 9, 2026 | Entity: Resilient Capital LLC

What Data We Collect

When you use FixMyRecord, we collect the following information:

• Full legal name, exact adult date of birth, city, and state (required for every reputation scan). The exact date is used privately for local identity comparison, is not sent in search or AI requests, and is not retained in the main audit record; only the birth year is retained there for age comparison.
• Email address (for report delivery)
• If you separately consent, optional phone number, street address, and ZIP code for held or manual follow-up. The free preview does not use these fields to verify a listing or start a removal.
• Scan results, including passive Google/search evidence and clearly labeled court-record and mugshot findings from sources successfully checked (people-search and data-broker coverage may be unavailable)
• This free preview does not collect a model or provider sample
• If you use the optional result-page interest form, the help categories you select, your optional note, and the time submitted

How We Use Your Data

We use your information to:

• Generate your personalized reputation report
• Deliver access to your private report (secure link and transactional email notices)
• Understand which future help people want and notify you at the audit email if relevant help becomes available
• Improve our scanning and reporting services

Human Review Before Delivery

Reports are not emailed automatically. After a scan finishes, the report is frozen and a person at FixMyRecord opens and reads it before anything is sent to you. That reviewer sees the report's contents and the identity details on the request — your name, the locations you listed, and your email address. This is how we catch a finding about a different person with the same name before it reaches you. We aim for same-day review, but timing depends on the review queue and is not guaranteed. Each report is emailed once; a repeat send of the same report is refused.

This review step applies to the free audit and to the optional paid report alike.

Service Providers and Search Queries

To run and deliver the service, limited data is processed by vendors acting as service providers. Name and location search queries are sent to our search provider (Serper). If you choose Professional Reputation or Social & Privacy Cleanup and supply public social profile URLs or handles, those identifiers may also be included in a bounded Serper public-index search. FixMyRecord does not open the social-network pages or inspect private social content. Resend handles transactional email (support replies and report notices). Our hosting and security providers process the technical data needed to operate the service. The public product is the free audit; the interest form does not open checkout or create a charge. The optional paid report described below is held and not currently offered. Operator alerts for internal request IDs and status may use an operations channel, but those alerts do not include customer names, email addresses, locations, free-form messages, report contents, or access tokens.

LLM Sampling

The free preview does not run a model or provider sample and does not send your name to an AI provider. No AI result is produced, scored, or used to authorize outreach, removal, or an identity ruling. If an invited paid report later includes a sample, that requires a separate consent described below and is not part of the free audit.

Optional Paid Report

The optional paid report is a separate, separately authorized request. Nothing in this section happens during a free audit. When you request it and give the specific consents shown at the time, the following additional processing can occur:

• Closed-book API observations. Your full name, primary city/state, and at most one distinct prior city/state explicitly supplied through customer intake or owner authorization are sent through the single Vercel AI Gateway seam. Each model has one hard processor allowlist: the OpenAI API sample (openai/gpt-5.4-mini) runs only via Microsoft Azure; the Google Gemini API sample (google/gemini-3.6-flash) runs only via Google Vertex AI; and the Anthropic Claude API sample (anthropic/claude-sonnet-5) runs only via Anthropic. Every request sets zeroDataRetention=true and disallowPromptTraining=true, requiring zero-data-retention routing and explicit prompt-training prohibition. If that exact route is unavailable, the call fails instead of switching provider or model. These are closed-book samples—existing model knowledge only, no live web search. They exclude date of birth, email, phone, and street address. Other retained locations are not sent in the prompt. Perplexity Sonar is not included and remains unavailable under this privacy policy. Every association is unverified one point-in-time API output that may be wrong; it is not identity proof, a verified fact, a verified finding, or a clearance. Verify it against original sources. Model output never affects your Safety score, Privacy score, overall score, broker state, removal eligibility, or whether the report is delivered.
• Direct broker/privacy source-site lookups. With request-bound direct-source consent, FixMyRecord may visit data-broker and people-search source sites using the bound name and location inputs. These visits can create ordinary search or pageview signals at those sites. Some sites are reached through an infrastructure provider (Bright Data) that operates the browser session on our behalf; the same lookup data transits that provider. When a source site presents an anti-bot challenge, we may use a challenge-solving service (2Captcha) to answer it. That service receives only the challenge itself — never your name, date of birth, email address, location list, or any part of your report. No opt-out, removal, complaint, or monitoring starts from this consent.
• Optional dedicated court and mugshot source checks. These are available only when the Records & Public-Record Context path was selected and require a separate, independently revocable consent for the exact request. They can create ordinary search or pageview signals at the source sites. If they are not requested, no dedicated court or mugshot source is visited and the report says “not requested/not checked”—never zero, clear, or all clear. A record-related page can still appear incidentally in ordinary public-search results and is then labeled as an unconfirmed public-web candidate.
• Private identity sorting. Every audit requires an exact adult date of birth. During an invited paid checkout, you may also provide up to five former or other names. These details help us tell similarly named people apart only in results we already find; they are never added to search queries, source-site visits, AI prompts, payment metadata, email, or analytics. The paid path encrypts the raw values for the exact request and checkout attempt, uses them locally, and erases them before the report becomes terminal. The report shows only match, conflict, or unavailable. A match does not verify an underlying claim or legal status.
• Payment. Stripe processes the payment as our payment processor. FixMyRecord does not receive or store your card number. That path is not currently offered. When it last existed as an invited report, the amount was $10, with Stripe placing an authorization hold that was captured only after completeness checks.

The paid report does not promise clearance, complete broker discovery, removal, or any particular outcome. Sources that could not return a determinate answer are reported as unavailable, never as clear.

Age Eligibility

FixMyRecord is available only when the person being reviewed is age 18 or older, on every starting path. Social & Privacy Cleanup additionally requires that person's participation. We do not accept requests for minors.

Data We Do NOT Collect or Sell

• We do NOT sell your personal data to third parties.
• We do NOT collect credit card information. The free audit takes no payment at all, and the optional paid report's card details go directly to Stripe — we never receive or store them.
• We do NOT publish your scan results or share them for third-party advertising. The service providers described above process only what is needed to operate the service.

Data Retention

Scan results and report data are retained while your case is open and for a reasonable period afterward so we can support you and operate the service. Every audit requires an exact adult date of birth. For a free audit, it is used only in memory during that run and is not retained as a raw value. For an invited paid report, the date of birth and any optional other-name values follow the shorter encrypted, request-bound lifecycle described above and are erased before the report becomes terminal; only non-reversible comparison outcomes remain. You may request deletion at any time by contacting us at support@fixmyrecord.io.

Cookies

We use cookies or similar storage for site functionality and Google Analytics to understand site usage. We do not sell personal data or use it for third-party advertising. You can limit cookies through your browser settings.

FCRA Disclaimer

FixMyRecord is not a consumer reporting agency as defined by the Fair Credit Reporting Act (FCRA). Reports generated by FixMyRecord are not consumer reports under the FCRA and should not be used for employment screening, tenant screening, credit decisions, or any other purpose governed by the FCRA.

Contact

For questions about this privacy policy or to request data deletion, contact us at support@fixmyrecord.io.