قانوني

1. Privacy Policy

This Privacy Policy describes how FixMyBadResume ("we", "us", "our") collects, uses, and shares information when you use our service at fixmybadresume.com (the "Service").

1.1 Information we collect

• Account data. Email address and authentication identifier from our identity provider (Supabase Auth).
• Profile data. The CV content you upload or enter (work history, education, skills, links). We store only what you give us.
• Job descriptions. Job descriptions you paste in to be tailored against. Stored alongside the resulting tailored CV.
• Generated artifacts. The tailored profiles, rendered PDFs, and metadata about how each tailoring was produced (template used, JD analysis, coverage report).
• Billing data. Subscription tier, status, and usage counters. Payment details are handled by our payment processor (StreamPay), we never see your card.
• Operational logs. Standard request logs (IP, user-agent, timestamps) retained for security and abuse prevention.

1.2 How we use your data

We use your data only to provide the Service: to authenticate you, store your profiles, run the tailoring pipeline you ask for, meter usage against your plan, and provide support. We do not sell your data and we do not use it to train any model.

1.3 Subprocessors

The Service relies on the following third parties. By using the Service you consent to your data being processed by them:

• Supabase, authentication, Postgres database, and object storage.
• Anthropic, primary LLM provider for CV analysis and rewriting. Inputs are sent over TLS and are not used to train Anthropic's models.
• OpenRouter, failover LLM provider, used only when Anthropic is unavailable.
• StreamPay, payment and subscription billing.
• Cloudflare R2 / S3-compatible storage, object storage for uploaded CVs and rendered PDFs.

1.4 Retention

We retain account, profile, and application data for as long as your account is active. You may delete individual profiles or applications at any time from inside the app. To delete your entire account, see Section 5 below.

1.5 Your rights

You may access, correct, export, or delete your personal data at any time. Email support@fixmybadresume.com from your account email to make a request.

2. Terms of Service

By creating an account or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

2.1 Eligibility and account

You must be at least 18 years old to create an account. You are responsible for keeping your credentials safe and for all activity under your account.

2.2 Acceptable use

You agree not to (a) upload content you do not have the right to upload; (b) use the Service to generate fraudulent or materially misleading credentials; (c) attempt to access other users' data; (d) reverse engineer, scrape, or overload the Service; (e) use the Service for unlawful purposes.

The Service includes safeguards against fabricating experience you didn't provide, but you remain responsible for reviewing any tailored CV before submitting it to an employer.

2.3 Subscriptions and billing

Paid plans renew automatically until canceled. Prices are in Saudi Riyals (SAR) and exclude any applicable VAT, which will be shown at checkout. You can cancel at any time from the Billing page; cancellation takes effect at the end of the current billing period.

2.4 Intellectual property

You own the content you upload and the tailored output produced for you. We own the Service, including its codebase, prompts, and templates. The reference templates remain ours; the rendered PDF is yours to use freely.

2.5 Disclaimers

The Service is provided "as is". We don't guarantee that any tailored CV will result in a job interview, offer, or any specific outcome. ATS-coverage scores and JD analyses are estimates, not guarantees.

2.6 Limitation of liability

To the maximum extent permitted by law, our total liability for any claim related to the Service is limited to the amount you paid us in the twelve months preceding the claim.

2.7 Termination

You may close your account at any time. We may suspend or terminate accounts that violate these Terms. On termination, your data will be deleted in accordance with Section 5.

2.8 Governing law

These Terms are governed by the laws of the Kingdom of Saudi Arabia. Disputes will be resolved in the competent courts of Riyadh.

3. Refund Policy

We want you to be happy with the Service. Our refund policy:

• First subscription within 7 days. If you are a new paying customer and have used fewer than 5 tailored CVs in your first 7 days, email us for a full refund, no questions.
• Failed renewals. If a renewal charges you after you canceled or after a subscription was already downgraded, contact us and we will refund the charge in full.
• Service outages. If the Service was unavailable for a sustained period during your billing cycle, we will pro-rate that month on request.
• Outside these cases. We don't offer pro-rated refunds for partial-month cancellations. Cancel any time, you keep access until the period ends.

To request a refund, email support@fixmybadresume.com from your account email with the subject "Refund request". We respond within 3 business days.

4. Security

Security is a feature, not a checkbox. The basics:

• Transport. All traffic to the Service is encrypted with TLS 1.2+.
• Authentication. We use Supabase Auth (JWTs signed with RS256/ES256). Passwords are never stored by us.
• Storage. Profile data is stored in a managed Postgres database. Uploaded CVs and rendered PDFs are stored in object storage with per-user prefixes; download URLs are short-lived (1-hour TTL) and signed.
• Isolation. The frontend never talks to Postgres or storage directly, every read and write goes through our API, which verifies the user's JWT on every request.
• LLM safety. The tailoring pipeline includes a deterministic anti-fabrication pass that drops any experience, project, or skill not present in your source profile, and re-locks contact info from the source. The LLM never produces LaTeX directly.

Found a security issue? Please report it privately to support@fixmybadresume.com, we read these the same day.

5. Data Deletion

You can delete your data in two ways:

• Inside the app. Profiles, applications, and tailored PDFs can be deleted individually from the Profiles and Applications pages. Deletion is immediate.
• Full account deletion. Email support@fixmybadresume.com from your account email with the subject "Account deletion request". We'll wipe your account, profiles, applications, and rendered PDFs within 7 days.

Some data (billing records, webhook event logs) may be retained for the period required by tax and accounting regulations in the Kingdom of Saudi Arabia. These records are kept in a separate system and are not used for any other purpose.