Privacy Policy
Last updated: 2026-05-01
This Privacy Policy describes how fixMy Apps LLC, a Virginia limited liability company (“fixMy Apps,” “we,” “us,” or “our”), collects, uses, and shares information in connection with your purchase or activation of fixMyIM (the “Service”). Capitalized terms not defined here have the meanings given in our Terms of Service. By using the Service you also agree to the practices described in this Policy.
1. Information we collect
| What | Why |
|---|---|
| Tablet hardware serial number | Required to bind your activation to the correct Tablet and to prevent a single license being installed on multiple Tablets. |
| IP address (only at the moments you call our backend) | Anti-fraud / license-abuse detection: identify anomalous patterns such as the same license being polled from many distinct addresses. |
| License poll timestamps | Operational: confirm activation succeeded; troubleshoot reports of activation not taking on a customer’s Tablet. |
| Email address (if you contact support) | To respond to your inquiry and keep a record of the conversation. |
| Payment data | Processed entirely by Stripe, Inc. We receive a confirmation token and the last 4 digits of the card; we never see, store, or have access to full card numbers. |
2. What we do not collect
- We do not collect, log, or transmit any vehicle data, VINs, scan results, key codes, PIN codes, or any data derived from your use of your Tablet on a vehicle.
- We do not collect personal location data.
- We do not place advertising trackers on our pages.
- We do not run third-party analytics that profile individual visitors.
3. How we use information
We use the information described in Section 1 only to: (a) provide, maintain, and support the Service; (b) bind activations to the correct Tablet and detect license abuse; (c) respond to your support inquiries; (d) comply with legal obligations; and (e) enforce our Terms of Service. We do not use your information for advertising, profiling, or automated decision-making that produces legal effects concerning you.
4. Third parties we share with
- Stripe, Inc. handles payment processing. Stripe’s privacy policy.
- Cloudflare, Inc. provides CDN and DNS for our domains. Cloudflare may receive your IP address and request metadata as part of standard TLS termination and routing. Cloudflare’s privacy policy.
We may also disclose information if required by law, subpoena, or similar legal process, or to protect our rights, property, or safety, or that of our customers or the public.
5. We do not sell or “share” your personal information
We do not sell your personal information to anyone, and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA), as amended. We have not done so in the preceding twelve (12) months and have no plans to do so.
6. How long we keep your data
- Tablet serial + license record: kept for the operational lifetime of the activation, unless you ask us to delete it (see Section 8).
- License poll log entries: kept for up to 12 months for anti-fraud purposes, then deleted.
- IP addresses associated with poll log entries: retained on the same schedule as poll log entries (up to 12 months).
- Support emails: kept for up to 24 months from the last message in the thread.
- Payment-confirmation tokens: kept as long as our payment processor requires (typically the chargeback window plus a reasonable buffer) and as needed for tax and accounting compliance.
7. Security
License keys and customer-bound activation assets are signed with HMAC-SHA-256 derived from a server-side secret. Backend access is restricted to authorized operators via authenticated tokens. We use TLS for all data in transit. We employ commercially reasonable administrative, technical, and physical safeguards but cannot guarantee absolute security. No method of transmission or storage is 100% secure.
8. Your rights and choices
You can request access to, correction of, or deletion of your activation record by emailing [email protected] with your Tablet’s hardware serial number. Note that deleting the record will also revoke the license. If you re-activate later, a new purchase is required.
If you are a California resident, you may have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of any sale or sharing (which we do not engage in), and the right to non-discrimination for exercising your privacy rights. We do not use sensitive personal information for inferring characteristics about you.
You may submit any privacy request by emailing [email protected]. We will respond within the timeframe required by applicable law (and in any event within 45 days for CCPA requests). We will verify your request by matching the Tablet serial number against our records.
9. EU/EEA and UK residents (GDPR / UK GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the following rights with respect to your personal data:
- Access: you may request a copy of the personal data we hold about you.
- Rectification: you may ask us to correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”): you may ask us to delete your data, subject to certain legal exceptions.
- Restriction: you may ask us to limit how we process your data in specific circumstances.
- Portability: you may receive your data in a structured, commonly used machine-readable format.
- Objection: you may object to processing based on legitimate interests.
- Withdrawal of consent: where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing already carried out.
- Lodge a complaint: you may complain to your local data-protection supervisory authority.
Legal bases for processing. We rely on the following legal bases under Article 6 of the GDPR / UK GDPR:
- Performance of a contract (Art. 6(1)(b)) for the Tablet serial, license records, and license-poll timestamps that are necessary to deliver and operate the Service you purchased.
- Legitimate interests (Art. 6(1)(f)) for IP-address logging used to detect license abuse and protect the Service. We balance this against your privacy rights and limit retention to twelve (12) months.
- Compliance with legal obligations (Art. 6(1)(c)) for tax records, fraud-investigation cooperation, and any other statutory record-keeping requirement.
- Consent (Art. 6(1)(a)) only where you have affirmatively asked to receive a non-essential communication from us. We do not currently send marketing emails.
International data transfers. The Service is operated from the United States. If you access the Service from the EEA, the UK, or another country whose data-protection law restricts cross-border transfers, your personal data will be transferred to and processed in the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses (or the UK addendum to the SCCs) as the transfer mechanism with our US-based processors (Stripe, Cloudflare, and others listed in Section 4). You can request a copy of the relevant SCCs by emailing [email protected].
Data controller and EU/UK representative. fixMy Apps LLC is the data controller for personal data described in this Policy. fixMy Apps has not yet appointed an Article 27 GDPR representative inside the EU/UK. Until one is appointed, EU/EEA and UK residents may exercise their rights and address any inquiry directly to [email protected].
10. Do Not Track
Some browsers transmit “Do Not Track” (DNT) signals. We do not currently respond to DNT signals because our website and the Service do not track you across third-party sites. We disclose this here as required by some state laws.
11. Data breach notification
In the event of a confirmed security breach that materially compromises the personal information we hold about you, we will notify affected customers without undue delay and no later than thirty (30) days after confirmation, unless a shorter period is required by applicable law or a longer period is permitted to accommodate the legitimate needs of law enforcement. Notice will include the nature of the breach, the categories of information involved, and the steps we are taking in response.
12. Children
The Service is a professional locksmith tool not intended for use by anyone under 18. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe a child has provided us with personal information, please contact us and we will delete it.
13. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page and, where reasonable, by additional notice. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
14. Contact
Questions about this Privacy Policy, or to exercise any of the rights described above? Email [email protected], or write to fixMy Apps LLC at the mailing address listed in Section 21 of our Terms of Service.
fixMy Apps LLC is a Virginia limited liability company. “fixMyIM” is a product of fixMy Apps LLC. “Autel,” “MaxiIM,” “MaxiSys,” “IM508,” “IM608,” and related marks are the property of their respective owners and are used here only to describe compatibility.