Who Operates FixMyGPA?
Identify the legal entity, business address or required contact information, and responsible privacy contact.
Read how FixMyGPA collects, uses, shares, secures, and retains personal information, subject to confirmed service and technology practices.

Privacy & Data Governance
Transparent Collection, Retention & Rights
Effective date: [APPROVED_DATE]. Business/controller identity: [LEGAL_ENTITY_NAME]. Contact: [PRIVACY_EMAIL]. This is a compliance draft that must match actual collection and processing practices.
Identify the legal entity, business address or required contact information, and responsible privacy contact.
Explain the actual data received through forms, bookings, billing, communications, optional uploads, and technical cookies or analytics. List only categories actually collected.
Describe each business purpose and the relevant third parties accurately.
To respond to requests, evaluate appropriate tutoring services, schedule sessions, and provide purchased support where applicable.
State whether card details are handled by a third-party processor and which billing records FixMyGPA receives: [VERIFY_PAYMENT_FLOW].
List actual hosting, scheduling, email, payment, analytics, tutor, and other service providers along with the purpose and data-sharing basis.
Disclose the true practices and applicable legal definitions; do not claim no sale or no tracking until vendors and configurations are audited.
Explain technologies and realistic security practices instead of making absolute promises.
List essential and optional technologies, purposes, providers, and choices. Link to the Cookie Policy.
Provide real retention periods or criteria for inquiries, tutoring records, support requests, analytics, and billing records.
Describe genuine safeguards, restricted access, and vendor controls without claiming zero risk.
Disclose permitted uploads, storage location, access restrictions, retention, deletion, and restrictions on passwords or protected exam content.
The applicable rights depend on jurisdiction and actual data-handling activities.
Provide a verified privacy contact, identity-verification steps, applicable exceptions, and response procedures based on relevant law.
Explain the working unsubscribe or preference controls and any legally required opt-out mechanisms.
State the actual audience and age eligibility; if under-13 data is collected, assess COPPA obligations before launch.
Describe actual hosting locations, service providers, and cross-border transfers if relevant.
Explore our Cookie Policy, Terms of Service, Pricing & Billing details, and Corrections Policy.
Tell users where to find updates and ask questions.
Display a real last-updated date and explain how material changes are announced.
Use [VERIFIED_PRIVACY_EMAIL_OR_REQUEST_FORM] and provide any required regional information.