Privacy Policy

This translation is provided for convenience. If it differs from the Portuguese version, the Portuguese version prevails.

FixResume is an artificial intelligence agent that builds resumes tailored to each job. It is developed and operated by Softwise LTDA (“Softwise”), registered under CNPJ (Brazilian company registration number) 59.176.542/0001-62.

Softwise is the controller of the personal data processed in FixResume: it decides how and for what purposes this data is used. This policy explains what data we process, why, on what legal basis and what your rights are, under Law No. 13,709/2018 (Lei Geral de Proteção de Dados Pessoais, or LGPD, Brazil’s data protection law) and Law No. 12,965/2014 (Marco Civil da Internet, Brazil’s Internet Civil Rights Framework).

It applies to the FixResume website and app and supplements the Terms of Use and the Cookie Policy. For any privacy matter, write to contato@softwise.tech.

We process only the data FixResume needs to work. It falls into the categories below.

2.1 Account and access

• Name and email address, provided at sign-up.
• The interface language you chose.
• Sign-in dates and times and technical authentication logs, which include your IP address.

FixResume does not use passwords. To sign in, you receive a 6-digit code by email, valid for 10 minutes.

2.2 Professional profile

What you fill in on your profile to generate resumes: name, professional headline, email, phone, location, LinkedIn, GitHub, website, professional summary, field of work, experience (role, company, dates, location, work arrangement, descriptions, achievements and technologies), education, projects, languages, skills and, if you want, a photo.

If you import a PDF resume, its text is extracted in your own browser and sent to the artificial intelligence to fill in your profile. The PDF file itself is neither sent to our servers nor stored.

FixResume does not ask for sensitive personal data, such as racial or ethnic origin, religion, political opinions, union membership, health or sex life. We recommend not including it in your profile or in the text you send, unless it is relevant to the job. If you do include it, it will be used only to produce what you asked for, like the rest of the content.

2.3 Jobs, analyses and resumes

• The jobs you analyze: title, company, location and the text of the job post.
• The text of the resume analyzed and the result of the analysis: match score, strengths, gaps, keywords and rewrite suggestions.
• The tailored resumes generated by the artificial intelligence, kept so you can view and export them. The exported PDF is generated in your own browser.

2.4 Applications

The applications board holds the information you record about each hiring process: company, role, location and work arrangement, job link and source, contact, salary, notes, job post text, whether the job is abroad, the stage of the process and its dates, the reason it was closed, interviews (date, title, format and participants), deadlines, accepted offers and the interview guide generated by the artificial intelligence.

If you record data about other people, such as the name of an interviewer, record only what you need to organize your application.

2.5 Credits, plan and payments

• A record of each use of the artificial intelligence (type of operation, day and time), to apply the daily credit and usage limits.
• Subscription data: Stripe customer ID, plan, subscription status, end of the paid period and day passes bought.
• If you withdraw from a purchase paid by boleto, the Pix key you email us to receive the refund.

Card details are entered directly on Stripe’s payment page and never reach FixResume.

2.6 Data collected automatically

• Logs of requests to the website and the app, which include your IP address.
• Bot check: Cloudflare Turnstile analyzes your IP address and browser signals at sign-up, at sign-in and at the code step.
• Audience measurement, only if you accept analytics cookies: pages visited, where the visit came from, device, browser and approximate location derived from your IP address, through Google Analytics 4.
• Cookies, described in section 7 and in the Cookie Policy.

2.7 Data that stays only on your device

The resume template you last chose for export is kept in your browser’s local storage and is not sent to our servers.

Each use has a legal basis under art. 7 of the LGPD:

• Creating and maintaining your account, sending the sign-in code and other transactional emails, and keeping you signed in: performance of a contract (art. 7, V).
• Providing FixResume’s features (profile, PDF import, analyses, tailored resumes, text improvements, skill and technology suggestions, applications board and interview guides): performance of a contract (art. 7, V).
• Charging for plans and day passes, managing credits and refunding a purchase you withdraw from: performance of a contract (art. 7, V) and, for the refund, compliance with a legal obligation (art. 7, II, and article 49 of the Código de Defesa do Consumidor).
• Protecting the service: checking that access is made by a person, preventing fraud and abuse, applying usage limits and investigating incidents: legitimate interest (art. 7, IX).
• Improving FixResume, using only the data needed for that: legitimate interest (art. 7, IX).
• Measuring the website’s audience with Google Analytics: consent (art. 7, I), which you can withdraw at any time.
• Keeping tax records and access logs and complying with orders from authorities: compliance with a legal or regulatory obligation (art. 7, II).

When we rely on legitimate interest, we process only what is necessary and respect your rights and expectations. You can object to this processing by writing to the email address in section 12.

We do not sell personal data, do not use it for advertising and do not hand it over to companies or recruiters. You decide what to send for each job, and to whom.

FixResume does not make automated decisions with legal effects on you. The match score and the artificial intelligence’s suggestions are there to guide your resume, and the decision to use them is always yours.

The artificial intelligence features (job analysis, tailored resume, text improvements, skill and technology suggestions, PDF reading and interview guide) send the necessary text to OpenRouter, Inc., in the United States, which forwards the request to the DeepSeek V4.1 Flash model, run by one of these inference providers, also headquartered in the United States: DeepInfra, Together AI, Fireworks AI, Baseten, Parasail or CoreWeave. The request is never sent to DeepSeek, the company that developed the model, and we only use providers that neither keep the data sent nor use it to train models.

• What is sent: only the content needed for that action, such as your profile or resume data and the job post text, along with an internal identifier of your account (not your name or email), which helps OpenRouter detect abuse. Payment data is never sent.
• Training: we do not use your data to train artificial intelligence models and do not authorize our providers to do so.
• Retention by providers: the inference providers process the text only to generate the response and, under their own policies, do not keep it. OpenRouter may keep records, under its own policy, to monitor abuse and security.
• Accuracy: the artificial intelligence is instructed not to make up experience, but it can make mistakes. Review everything before using or sending a resume.

If we change provider or model, this policy will be updated.

We share data with the providers that run FixResume, each limited to what it needs for its role:

• Supabase: database and authentication. Stores account, profile, analysis, resume, application, credit and subscription data, as well as technical access logs.
• Vercel: hosting for the website and the app. Receives requests to FixResume and keeps logs of them, with the IP address.
• OpenRouter and inference providers (DeepInfra, Together AI, Fireworks AI, Baseten, Parasail and CoreWeave): artificial intelligence processing (section 4). They receive the text needed for each action.
• Stripe: payments. Receives your name, your email and your account identifier from us. You enter your card and billing details on Stripe’s own payment page, and Stripe also uses them to prevent fraud.
• Resend: sending the sign-in code and other transactional emails. Receives your email address and the content of the message.
• Cloudflare: bot check (Turnstile). Receives your IP address and browser signals.
• Google: audience measurement (Google Analytics 4), only if you accept analytics cookies. Receives browsing data: pages viewed, where the visit came from, device, browser and approximate location derived from the IP address. Advertising features are turned off, and no resume, job post or profile content is sent to Google.

Some of these providers, such as Stripe, also process data under their own privacy policies, for example to prevent fraud. You can read them here: Supabase, Vercel, OpenRouter, Stripe, Resend, Cloudflare and Google.

The website’s fonts are served by FixResume itself, with no requests to Google Fonts while you browse.

We may also share data with public authorities when required by law or by an order from a court or competent authority.

All the providers in section 5 may process data outside Brazil, mainly in the United States. These transfers rely on the grounds set out in art. 33 of the LGPD:

• they are necessary to perform our contract with you and to comply with legal obligations (art. 33, IX, together with art. 7, II and V), since FixResume does not work without these services;
• in the case of Google Analytics, they depend on your consent (art. 33, VIII), which you can withdraw at any time by rejecting analytics cookies.

We use strictly necessary cookies to keep you signed in, store the email address waiting for its sign-in code (and, at sign-up, the name you entered), remember the language you chose and record your choice in the cookie banner. They do not depend on consent. Cloudflare Turnstile and Stripe’s payment page may set their own technical cookies, on their own domains, for security and fraud prevention.

Google Analytics cookies are set only if you accept them. Until you decide, they stay off.

You can change your choice at any time under “Cookie preferences”, in the site footer or in the app’s sidebar. If you reject after having accepted, measurement stops and the Google Analytics cookies are deleted. The list of each cookie, with its duration, is in the Cookie Policy.

• Account and content (profile, analyses, resumes, applications, credits and subscription): for as long as your account exists.
• After a deletion request: we delete the data within 30 days, except what the law requires us to keep.
• Billing and refund records: for the 5-year tax period.
• Access logs: 6 months, as required by art. 15 of the Marco Civil da Internet.

Data kept because of a legal obligation has restricted access and is used only for that purpose. The duration of each cookie is in the Cookie Policy.

• All communications with FixResume use an encrypted connection (HTTPS).
• Sign-in is passwordless, with a 6-digit code sent to your email and valid for 10 minutes.
• There is a bot check at sign-up, at sign-in and at the code step.
• Access controls in the database limit each account to its own records.
• Card details stay with Stripe and never pass through FixResume.
• The providers in section 5 maintain their own security measures.

Since access depends on your email, keep your email account secure.

No system is completely immune to failures. If a security incident occurs that may create a relevant risk or harm to you, we will notify you and the Autoridade Nacional de Proteção de Dados (ANPD, Brazil’s data protection authority), as required by art. 48 of the LGPD.

Under the LGPD (art. 18), you can request at any time:

• confirmation that we process your data;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the LGPD;
• portability of your data to another provider;
• deletion of data processed based on your consent, and deletion of your account;
• information about the entities we share your data with;
• information about the option of not giving consent and what happens if you refuse;
• withdrawal of consent;
• objection to processing based on another legal ground, if the LGPD is not being complied with.

Profile data can be corrected at any time in FixResume itself. The app does not yet offer account deletion or data export: for these and any other requests, write to contato@softwise.tech, preferably from your account’s email address.

We reply within 15 days. If we need to confirm that the account is yours, we may ask for additional information before handling the request. Withdrawal of consent applies from then on and does not affect what was done before it.

If you believe your request was not handled, you can file a complaint with the ANPD.

FixResume is intended for people aged 18 or older and is not directed at children or teenagers. We do not knowingly collect data from anyone under 18.

If we learn that an account belongs to someone under 18, we may close it and delete the data, subject to the legal retention periods in section 8. If you know of such a case, let us know at contato@softwise.tech.

• Controller: Softwise LTDA, CNPJ 59.176.542/0001-62, with its registered office at Quadra ARSE 141, Alameda 10, s/n, Quadra 12, Lote 17, Edif. Cond. do Carmo IV, Casa 02, Plano Diretor Sul, Palmas – TO, CEP 77024-768, Brazil.
• Data protection officer (encarregado pelo tratamento de dados pessoais, or DPO): Lucas Barreto Fontinele, at contato@softwise.tech.

This email address receives questions, requests and complaints about privacy and data protection in FixResume.

We may update this policy to reflect changes in FixResume, in our providers or in the law. The date at the top of this page shows the version in effect.

When a change is significant, we will let you know by email at your account’s address or in FixResume itself before it takes effect. Questions about this policy can be sent to contato@softwise.tech.