Legal
Privacy Policy
Last updated: 21 April 2026
1. Who we are
FYHR ("FYHR", "we", "us") is a free tool operated by FixYourHR. This Privacy Policy explains what we collect when you use FYHR, why we collect it, and the choices you have. It works alongside our Terms & Conditions.
2. Our privacy posture, in plain language
- We don’t require an account. We don’t ask for your name, email, or CV.
- We store the job titles you submit and the maps we generate from them.
- Generated maps are public by URL. Don’t put personal info in the input fields.
- We use minimal analytics to understand usage and improve the product.
- You can ask us to delete a specific map at any time — see section 8.
3. What we collect
3.1 Inputs you provide
When you generate a map, we store the job title, optional seniority, and optional industry/context you typed, along with the AI-generated map and any follow-up chat messages you send about that map. Each map is assigned a random ID and stored in our database so it can be loaded, shared, and compared later.
3.2 Technical data
Our hosting and edge infrastructure automatically processes standard request metadata such as IP address, user-agent, referrer, and timestamps. This is used for security, abuse prevention, rate-limiting, and basic operational logging. We do not build advertising profiles from it.
3.3 Analytics events
We record lightweight, non-identifying product events (for example: map_generate_submit, map_generated, map_generate_blocked) together with the job title and a few non-personal properties (e.g. seniority, whether industry was provided, duration in ms). These events power our product metrics and help us tune the guardrails. We do not collect cross-site browsing history.
3.4 What we do not collect
We don’t ask for or store names, email addresses, phone numbers, resumes, employer identifiers, or other directly identifying information. Please don’t paste any into the title or industry fields.
4. How we use your data
- To generate, display, and store the career map you requested.
- To enable shareable links, comparisons, and follow-up chat about a map.
- To compute the "trending roles" list from aggregated, anonymized usage.
- To detect, prevent, and respond to abuse, spam, or misuse of the Service.
- To understand product usage, fix bugs, and improve quality.
- To comply with legal obligations.
We do not sell your data, and we do not use your inputs to train third-party AI models for purposes unrelated to running FYHR.
5. Cookies and similar technologies
FYHR aims to be cookie-light. We use only what’s strictly needed to make the Service work (e.g. functional preferences such as your last view-mode toggle, stored in your browser via localStorage), plus minimal analytics tags described in section 3.3.
We don’t set advertising cookies and we don’t share data with ad networks. You can clear cookies and local storage at any time via your browser settings; the Service will continue to work.
6. Third parties who process data on our behalf
To run FYHR, we rely on a small number of trusted providers:
- Hosting & database (Lovable Cloud) — stores generated maps, validation cache, and serves the site.
- AI model providers — receive your inputs (job title, seniority, industry, chat messages) to generate the map and replies. They are contractually restricted to processing data on our behalf.
- O*NET — a public occupational dataset we reference; we send it normalized job-title queries, no personal data.
- Analytics — the lightweight events described in section 3.3.
These providers may process data outside your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses).
7. How long we keep things
- Generated maps and chats: kept indefinitely so that shareable links keep working — until you ask us to delete a specific map (section 8) or we decide to retire it.
- Operational logs: typically retained for up to 90 days for security and debugging.
- Analytics events: retained in aggregate; we don’t need to keep them tied to individual sessions long-term.
8. Your rights and how to request deletion
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Because FYHR is account-less, the practical request you’re most likely to make is deletion of a specific map.
To request deletion, send us an email with:
- The full URL of the map (e.g.
/map/<id>); and - A short note confirming you want it deleted.
Reach us via fixinghr.com. We aim to respond within 30 days. We may need to verify the request to prevent abuse, and we may decline requests that are unlawful, abusive, or that would force us to delete data we’re legally required to keep.
You also have the right to lodge a complaint with your local data-protection authority.
9. Security
We use industry-standard measures (TLS in transit, access controls, audited infrastructure providers) to protect data. No system is perfectly secure, however, and we cannot guarantee absolute security. If you become aware of a vulnerability or potential breach, please tell us at the contact link above.
10. Children
FYHR is not directed at children under 16 and we don’t knowingly collect their data. If you believe a child has submitted information, contact us so we can remove it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date above always reflects the current version. Material changes will be flagged on the homepage where reasonably practical.
12. Contact
Privacy questions or deletion requests? Reach out via fixinghr.com.
