Analytics consent
We only run browser product analytics (PostHog) after you grant consent in our cookie banner. Session replay is switched off. You can withdraw consent at any time. If you have not made an analytics choice, a browser Global Privacy Control (GPC) signal is treated as a refusal of analytics; it does not override a choice you already made. Our servers separately record service events without cookies.
opens the consent panel.
Email notifications
Check-up emails are part of the purchase and do not include an unsubscribe option. Other notification emails follow your settings in Account → Settings.
Access, export, delete
Self-serve from Account → Privacy:
- download a JSON export of your account, organizations, scan metadata, and findings (free-plan exports include at most two findings per scan); it does not include commerce, payment, recovery, email-outbox, integration, or stored-artifact records;
- delete your account and owned-organization scans and findings. The request can return 409 if your organization has other members or you have an unsettled check-up. Stored files are deleted shortly after; audit metadata may remain, and data in organizations you do not own is not deleted.
For requests we can't satisfy via self-serve (rectification of a field we don't expose, restriction of processing, objection), email privacy@fixweb.app with subject “Privacy request”. We respond within 30 days.
California residents — CCPA and CPRA
You have the rights described above plus the explicit CCPA rights detailed in the Privacy Policy. Notably:
- Right to opt out of sale or sharing: not applicable — we neither sell nor share for cross-context behavioral advertising.
- Right to limit use of sensitive personal information: if this right applies to your data, you may ask us to limit use as provided by law.
- Right to non-discrimination: exercising any of these rights does not change what you can do on FixWeb.
Authorized agent requests
If an authorized agent submits a privacy request on your behalf, they should email privacy@fixweb.app with proof of authorization (permission plus your verifiable email). We may verify directly with you before acting.
Questions
For privacy requests, email privacy@fixweb.app.

