Privacy Policy

1. Controller and roles

With respect to merchant account data (you, our user), Fastidelity acts as the data controller.

With respect to end-customer data that each merchant uploads to the platform, the merchant is the controller and Fastidelity acts as a processor, handling that data on behalf of and per the merchant's instructions.

2. Data we collect

Depending on how you use the Service, we may process the following categories of data:

• Account data: name, email, password (hashed), business, role.
• Billing data: plan, cycle, payment identifiers (processed by the payment provider).
• End-customer data: name, contact, date of birth (optional), loyalty progress, as uploaded by the merchant.
• Technical data: IP address, device, usage logs, cookies and product events.

3. Purposes and legal bases

We use data for the following purposes:

• Provide and maintain the Service (contract performance).
• Process payments and manage subscriptions (contract performance and legal obligation).
• Send transactional and support communications (legitimate interest / contract).
• Improve and secure the platform, prevent fraud (legitimate interest).
• Comply with legal obligations and respond to authority requests.

4. Providers and third parties

We share data with providers that help us deliver the Service, under confidentiality and data-processing agreements. These are the categories of providers involved; you can ask us for the current list of specific providers by writing to hello@fastidelity.com.

• Payment processors, which receive the data needed to charge your subscription.
• Wallet providers (Apple Wallet, Google Wallet).
• Transactional email providers, which receive the destination address and the message content.
• Infrastructure and hosting, error monitoring, product analytics and web traffic analytics on our public website.

5. International transfers

Some providers may store data outside your country. When this happens, we adopt appropriate safeguards (such as standard contractual clauses) in accordance with applicable law.

6. Retention

As a general rule we retain data while your account is active and for as long as necessary to fulfil the described purposes and our legal obligations. In addition, we apply these periods automatically:

• Incomplete sign-ups (email never verified and no payment): deleted after 7 days.
• Wallet notification delivery records: deleted after 30 days.
• Technical events from payment providers, kept to prevent fraud: deleted after 90 days.
• Payment and subscription records: retained for the periods required by tax law, even after account closure.

7. Your rights

Depending on your jurisdiction, you may exercise rights of access, rectification, erasure, objection, restriction and portability of your data. You may also withdraw consent where processing is based on it.

You can exercise these rights from Settings → Privacy in the platform, where you can request a copy of your data or its deletion, or by writing to hello@fastidelity.com. We respond within the deadlines set by applicable law.

When you request deletion, we erase or irreversibly anonymise your personal data — your email is no longer recoverable, your password is voided and all your sessions are closed — and we keep only the payment records required by tax law. Note that the data of your own end customers is managed and deleted by you from the platform.

If you are a merchant's end customer, please direct your request to that merchant, who is the controller of your data. If you believe we have not handled your request properly, you may lodge a complaint with the relevant supervisory authority: the URCDP in Uruguay, your national data protection authority in the European Union, or the ANPD in Brazil.

8. Security

We apply reasonable technical and organizational measures to protect data: encryption in transit, role-based access control, tenant isolation and audit logs. No system is 100% infallible, so we cannot guarantee absolute security.

9. Cookies and analytics

We use cookies and similar technologies for authentication, preferences and product metrics. You can manage cookies from your browser settings.

On the public pages of our website (home, pricing and sign-up) we use Google Analytics to measure traffic and where visits come from. Google Analytics sets its own cookies (for example, _ga) and processes IP addresses in anonymised form; we do not use it for personalised advertising and do not load it in your account dashboard or on the pages your customers see. You can block it from your browser settings or with the Google Analytics opt-out add-on.

10. Minors

The Service is aimed at businesses and not at minors. We do not knowingly collect minors' data without an appropriate legal basis.

11. Changes to this Policy

We may update this Policy. If changes are material, we will notify you by reasonable means. The “last updated” date indicates the current version.

12. Contact

For privacy questions or to exercise your rights, write to us at hello@fastidelity.com.