Privacy Policy

1. Controller and roles

With respect to merchant account data (you, our user), Fastidelity acts as the data controller.

With respect to end-customer data that each merchant uploads to the platform, the merchant is the controller and Fastidelity acts as a processor, handling that data on behalf of and per the merchant's instructions.

2. Data we collect

Depending on how you use the Service, we may process the following categories of data:

• Account data: name, email, password (hashed), business, role.
• Billing data: plan, cycle, payment identifiers (processed by the payment provider).
• End-customer data: name, contact, date of birth (optional), loyalty progress, as uploaded by the merchant.
• Technical data: IP address, device, usage logs, cookies and product events.

3. Purposes and legal bases

We use data for the following purposes:

• Provide and maintain the Service (contract performance).
• Process payments and manage subscriptions (contract performance and legal obligation).
• Send transactional and support communications (legitimate interest / contract).
• Improve and secure the platform, prevent fraud (legitimate interest).
• Comply with legal obligations and respond to authority requests.

4. Providers and third parties

We share data with providers that help us deliver the Service, under confidentiality and data-processing agreements. For example:

• Payment processors (e.g. Mercado Pago).
• Wallet providers (Apple Wallet, Google Wallet).
• Transactional email providers (e.g. Resend, Brevo, SendGrid).
• Infrastructure and hosting, error monitoring (e.g. Sentry) and product analytics (e.g. PostHog).

5. International transfers

Some providers may store data outside your country. When this happens, we adopt appropriate safeguards (such as standard contractual clauses) in accordance with applicable law.

6. Retention

We retain data while your account is active and for as long as necessary to fulfill the described purposes and legal obligations. Unverified accounts may be deleted automatically after a period of inactivity.

7. Your rights

Depending on your jurisdiction, you may exercise rights of access, rectification, erasure, objection, restriction and portability of your data. You may also withdraw consent where processing is based on it.

You can exercise these rights from the privacy section of the platform or by writing to hello@fastidelity.com. If you are a merchant's end customer, please direct your request to that merchant, who is the controller of your data.

8. Security

We apply reasonable technical and organizational measures to protect data: encryption in transit, role-based access control, tenant isolation and audit logs. No system is 100% infallible, so we cannot guarantee absolute security.

9. Cookies and analytics

We use cookies and similar technologies for authentication, preferences and product metrics. You can manage cookies from your browser settings.

10. Minors

The Service is aimed at businesses and not at minors. We do not knowingly collect minors' data without an appropriate legal basis.

11. Changes to this Policy

We may update this Policy. If changes are material, we will notify you by reasonable means. The “last updated” date indicates the current version.

12. Contact

For privacy questions or to exercise your rights, write to us at hello@fastidelity.com.