Security and privacy
Your records. Clear protections.
Updated November 3, 2026
Credit reports contain sensitive information. Here is how FixMy.Money handles access, files and optional AI processing. These controls reduce risk; they are not a guarantee that every security risk is eliminated.
Access to your workspace
Authentication, database row-level security and application authorization scope records to the selected workspace. Documents use private storage and server-authorized access. Administrative access requires a verified administrator role and step-up authentication. HTTPS protects transport to the site.
What AI receives
The assistant processes the text you deliberately submit after acknowledging the sensitive-data notice; it does not automatically read your files. Report review uses minimized structured information after explicit consent. The report-analysis gateway does not send raw uploaded report files to the AI provider. Identifier redaction is a precaution, not a guarantee of complete anonymization.
AI letter introductions use a generic instruction. Account facts and your statements are inserted separately by the application. Always verify the source and review a draft before using it.
AI eligibility and usage limits
The workflow assistant and consented AI report review are available to eligible personal and business workspaces with confirmed paid access or an active eligible trial. Registration alone does not grant AI access. Trials share four successful AI runs across the assistant, report review and GPT-6 letter introductions, teammates and the trial owner’s workspaces; failed generations do not count. Paid personal plans include 20 AI runs per month; business allowances are shared across the team. AI can pause at the account allowance or a separate service spending safeguard, without automatic overage charges. Review every output before use.
Service providers
- Sites and its hosting infrastructure deliver the website, application runtime and operational logs.
- Supabase provides authentication, database records and private file storage; Resend supports transactional email through the configured email service.
- Stripe handles subscription payment details through its hosted interface. FixMy.Money does not store raw card numbers or security codes.
- OpenAI processes the consented AI requests described above.
- Google Analytics and masked, cookieless Microsoft Clarity analytics load only after you allow optional analytics. Clarity is limited to eligible public marketing pages; private account, payment and report workflows are excluded.
Export, cancellation and deletion
Cancellation stops renewal; it does not delete your records. Before ending paid access, use the export options available to your plan or contact support to request your records. Export requests and deletion requests are separate. Identity and authority checks apply, and some billing, security or legally required records may be retained.
To request access, export, correction or deletion, email support@fixmy.money with your account email and the request type. Do not email passwords, credit reports or full payment details. Fixed retention periods and a guaranteed post-cancellation export window are not currently published.
Report a security concern
Email security@fixmy.money with the affected page and a brief description. Avoid including real customer records or credentials. Support hours and a guaranteed response time are not currently published.