Effective date: June 30, 2026  |  Last updated: July 22, 2026  |  Jurisdiction: Texas, United States

Privacy Policy

Fitted Lab ("Fitted," "we," "us," or "our") is a brand operated by Hand Consulting LLC, a Texas limited liability company. This Privacy Policy explains how we handle information when you use our service at fittedlab.com.

The short version: your resume and job description are processed by our AI to generate your optimized resume, then returned to you. Fitted itself does not store them — but our AI processing provider retains a copy on their backend for up to 30 days under their own standard policy, then automatically deletes it. We do not sell your data.

Information we process

When you use Fitted, the following information is processed:

What we do not do

How your data flows

Your resume and job description travel from your browser to our secure proxy server (hosted by a US-based infrastructure provider), and then to our AI processing provider to generate your results. The result is returned to your browser. Fitted's own systems do not write your resume or job description to a database or retain it in persistent storage. Our AI provider does retain a copy on their backend for a limited time as part of processing your request — see "Data retention" below for details.

We have configured this integration to opt out of model training on your data. These practices apply to whichever infrastructure and AI providers we use; if the underlying facts described here ever change, we will update this section accordingly.

Fitted does not currently process payments. If paid plans launch in future, this policy will be updated to name the payment processor used and link to their privacy policy.

Cookies and tracking

Fitted does not use advertising cookies, tracking pixels, or third-party analytics. We use a single session cookie to keep you logged in while you use the application. This cookie is valid for a limited time, after which you'll need to log in again. We do not use persistent tracking or advertising cookies.

California residents — CCPA / CPRA rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

Because Fitted's own systems do not store resume content, most deletion requests related to that content are effectively self-resolving once your session ends — we hold nothing on our end to delete, though our AI processing provider may retain a copy for up to 30 days under their own standard retention policy (see "Data retention" above). For requests related to any information Fitted does store (such as email addresses), contact us at hello@fittedlab.com. We will respond within 45 days.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Texas residents — TDPSA rights

If you are a Texas resident, you have rights under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, including the right to access, correct, delete, and obtain a copy of your personal data, and to opt out of the sale of personal data or targeted advertising. To exercise these rights, contact us at hello@fittedlab.com. We do not sell personal data.

Data retention

Fitted's own systems do not persist resume content, job descriptions, or any additional information you provide beyond your active session — when you close the tab or your session times out, Fitted holds no copy.

Our AI processing provider does retain a copy of this content on their backend for up to 30 days after each request, under their own standard data-retention policy, before automatic deletion. This is a function of how their service works, not a choice Fitted makes, and it applies regardless of whether your Fitted session is still open. We do not have a separate mechanism to force earlier deletion from their systems; content is deleted on their standard schedule unless retained longer as required by law or to enforce their own usage policies.

Anonymous technical logs (timestamps, error codes, general usage counts — no personal content) are retained for up to 30 days for service monitoring, then automatically deleted.

Coach account analytics are retained for up to one year.

If you provide an email address, we retain it until you request deletion.

Security

All data is transmitted over encrypted HTTPS connections. Our proxy server does not log resume content. We use industry-standard security infrastructure including Web Application Firewall (WAF) protection. We limit what we collect to limit what can be exposed.

No system is perfectly secure. If you believe your information has been compromised, contact us immediately at hello@fittedlab.com.

Data breach notification

In the event of a data breach affecting your personal information, we will notify affected individuals without unreasonable delay and in accordance with applicable state and federal law, including any state-specific notification deadlines and, where required, notification to the relevant regulatory authority.

Third-party links

Our service may contain links to third-party websites (such as job posting sites). This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing any personal information.

Children

Fitted is not directed at children under 13, and users must be 18 or older to use the service. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided information to us, contact us and we will promptly delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of Fitted after a policy update constitutes acceptance of the revised policy. We will not reduce your privacy protections without clear notice.

Contact us

For privacy questions, data requests, or concerns:

Fitted Lab
a brand operated by Hand Consulting LLC
Houston, TX

Email: hello@fittedlab.com
We aim to respond within 5 business days.