Privacy policy
Last updated: September 24, 2026
FixRamp is operated by Himo Technologies Inc., a Quebec, Canada corporation (130-5645 Grande Allée, Unit 162, Brossard, QC J4Z 3G3, Canada). This policy explains what personal information we collect, why, who we share it with, how long we keep it, and your rights. It is written to meet Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA.
Person in charge of privacy
Our person in charge of the protection of personal information is Hicham Mounir. Contact: privacy@fixramp.com, or by mail at Himo Technologies Inc., 130-5645 Grande Allée, Unit 162, Brossard, QC J4Z 3G3, Canada.
What we collect and why
- Order email address: to deliver your report, send receipts and answer your questions.
- Billing name and address: collected by Stripe during checkout to process payment and calculate taxes. We never see or store your full card number.
- Website address (URL): to run the scan you ordered and produce your report.
- IP address: for security, fraud prevention and rate limiting.
- Email correspondence: when you write to us, we keep the messages to answer you and keep a record of your requests.
We do not ask for passwords or access to your website, and we do not install scripts or overlays on it. We only read public pages.
Free scan
When you use the free scan, we scan one public page of the URL you submit. We do not store personal information from the free scan other than the URL. Your IP address is used only in memory to limit abuse, and is not saved.
Business outreach emails
We may send business-to-business emails to addresses that companies publish on their websites, sometimes including a free automated scan of the company's public homepage. We keep a record of where each address was published, as required by Canada's Anti-Spam Legislation (CASL) and the U.S. CAN-SPAM Act. Every email includes an unsubscribe link, and we honour it immediately. After you unsubscribe, we keep your address on a suppression list only so that we never email you again.
Service providers
We share personal information only with providers that help us run the service, and only what they need:
- Stripe: payment processing and tax calculation.
- Vercel (United States): website hosting and report storage.
- Resend (United States): transactional email, such as report delivery and receipts.
- Instantly: sending business outreach emails.
- Anthropic: AI assistance to draft replies to support emails. We do not share payment data with Anthropic.
We do not sell or rent personal information.
Information stored outside Quebec
Your personal information may be stored and processed outside Quebec, mainly in the United States, by the providers listed above. Before any such transfer, we assess whether the information will be adequately protected, and we rely on contractual commitments from these providers. Information held outside Canada may be accessible to foreign authorities under the laws of those countries.
How long we keep it
- Orders, invoices and reports: 3 years, for accounting and tax purposes.
- Outreach records: until you unsubscribe. Your address then stays on our suppression list so we can honour your opt-out.
- Support correspondence: as long as needed to handle your request, and no longer than 3 years.
When information is no longer needed, we delete or anonymize it.
AI assistance
Replies to support emails may be drafted and sent by an AI assistant, with human oversight. Fix guidance in reports comes from a reviewed library assembled with AI assistance. No decision about you is made solely by automated processing. If you would rather talk to a person, say so in your email.
Cookies
This site uses no advertising or analytics cookies. We only use what is strictly necessary for the site and checkout to work. If this ever changes, we will add a consent banner and ask for your consent first.
Your rights
You can ask us to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- delete your information, or stop using it, subject to what we must keep by law (for example, tax records);
- withdraw your consent to a use of your information;
- receive your information in a structured, commonly used technological format (portability).
Write to privacy@fixramp.com. We answer within 30 days. We may need to confirm your identity before acting on a request.
Security
We use encrypted connections (HTTPS), limit access to personal information to those who need it, and use unlisted, hard-to-guess links for reports. If a confidentiality incident poses a risk of serious injury, we will notify the people affected and the Commission d'accès à l'information as the law requires.
Complaints
If you have a concern, contact our person in charge of privacy first at privacy@fixramp.com. You can also file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or, outside Quebec, the Office of the Privacy Commissioner of Canada.
Changes
If we change this policy, we will update the date at the top of this page. Significant changes will be announced on this page before they take effect.