Privacy Policy

FastPage (ABN 16 158 841 761) is a sole trader business based in Victoria, Australia. In this policy, "we", "us" and "our" mean FastPage. "You" means the person or business using FastPage.

You can reach us about anything in this policy at team@fastpa.ge.

This policy applies to:

• our marketing website at fastpa.ge;
• the FastPage app at admin.fastpa.ge, where you build and manage your site; and
• the websites we host for our customers, whether they are served on a fastpa.ge address or on a customer's own domain.

Two different roles. For information about you as a FastPage customer, we decide how it is handled and this policy governs it. For information about visitors and enquiries on a customer's published site, we act on that business's behalf — the business decides how it is used, and their own privacy practices apply as well as ours.

This policy does not cover the websites of our customers beyond the hosting we provide, or third-party services you choose to link to from your site.

Account information. Your email address and a password, handled by our authentication provider — we never see or store your password in a readable form. Your name and business details if you provide them.

Your site content. Everything you put into your site: business name, address, phone, opening hours, menus and services, photos you upload, and the copy you write or generate.

Business information you import. If you connect your Google Business Profile, we import public details such as your name, address, hours, photos, rating and reviews to pre-fill your site, and refresh them periodically.

Billing information. Payments are processed by Stripe. We never receive or store your full card number. We keep a Stripe customer and subscription reference, the plan you are on, your billing currency, and your payment status.

Support and correspondence. Emails you send us, and the notes we make to answer them.

Technical information. Standard server logs and error reports generated when you use the app — including IP address, browser type and the page that errored — used to keep the service working and secure.

Push notifications. If you turn on notifications for new enquiries, we store the browser push subscription your device gives us. You can turn this off at any time in your browser or in the app.

Every published FastPage site includes our own lightweight analytics so the business owner can see how their site is performing. It is deliberately minimal and privacy-preserving.

No cookies. The tracker sets no cookies, writes nothing to local storage, and does not follow visitors between websites. Because of this, FastPage sites do not need a cookie consent banner for our analytics.

For each page view or link click we record:

• the page on the site that was viewed, and the link that was clicked;
• the referring website's domain only — never the full referring URL;
• the visitor's country, derived from their network connection; and
• a short anonymous identifier used to count daily unique visitors.

How that identifier works. It is a one-way hash of the visitor's IP address, browser user-agent, the date and the site ID. The IP address and user-agent are used only to compute it and are never stored. The identifier changes every day and is different on every site, so it cannot be used to recognise a visitor tomorrow, or to follow them from one FastPage site to another.

Retention. Individual event records are deleted after 90 days. Daily totals — views, clicks, unique counts, top pages, top referring domains and top countries — are kept for as long as the site exists so owners can see long-term trends.

We do not place third-party advertising or tracking scripts on customer sites, and we never sell or share this data with advertisers.

Many FastPage sites have a booking, enquiry or quote form. When someone submits one, we collect the details they enter — typically name, email, phone number, the message or request, and any files they attach — and pass them to the business that owns the site by email and in their FastPage inbox.

We hold this information on behalf of that business. We use it to deliver the enquiry, to send confirmation and status emails to the person who submitted it, and to keep the inbox working. We do not use it for our own marketing.

Uploaded attachments are stored in private storage and are only accessible through short-lived links issued to the business.

If you submitted an enquiry through a FastPage site and want it accessed, corrected or deleted, contact the business directly. If you cannot reach them, email us at team@fastpa.ge and we will help.

On fastpa.ge and admin.fastpa.ge — and nowhere else — we use PostHog to understand how our own product is used: pages viewed, features used, and where people get stuck. This runs only on our own domains and never on a customer's published site.

Session recording. Inside the app at admin.fastpa.ge we may record a replay of an app session to diagnose bugs and improve the interface. All text you type into form fields is masked before it leaves your browser. Recording never runs on the marketing site or on customer sites.

Error and performance monitoring. We use Sentry to capture errors and Vercel Speed Insights to measure page performance so we can fix problems.

We use a small number of cookies, all on our own domains:

• Authentication cookies, set when you sign in, which keep you signed in. Without these the app cannot work.
• A cookie that remembers which of your sites you were last working on.
• PostHog analytics cookies on fastpa.ge and admin.fastpa.ge, which distinguish one visit from another.

We do not use advertising cookies, and no FastPage cookie is set on the customer sites we host.

We use the information described above to:

• create and run your account, and build, host and publish your site;
• take payment and manage your subscription;
• send you transactional and service emails — receipts, enquiry notifications, expiry warnings and important account notices;
• send occasional product updates, which you can opt out of;
• answer your support requests;
• detect, prevent and investigate abuse, fraud and technical problems; and
• understand how the product is used so we can improve it.

What we do not do. We do not sell personal information. We do not share it with advertisers. We do not use your site content, your business data, or your customers' enquiries to train AI models.

When you use a feature that generates copy for your site, the business details you have given us — such as your business type, location, services and tone preferences — are sent to our AI provider, Anthropic, which generates the text and returns it. That content is processed to fulfil your request and is not used to train their models.

Generated copy is a starting point. You are responsible for reviewing it and making sure what your published site says about your business is accurate.

We share information only with the service providers we need to run FastPage, and only for that purpose. They are:

• Supabase — database, authentication and file storage (hosted in Sydney, Australia);
• Vercel — application hosting and content delivery (United States and global edge network);
• Cloudflare — content delivery, DNS and bot protection (global);
• Stripe — payment processing and subscription billing (United States and Australia);
• Resend — transactional and notification email (United States);
• Anthropic — AI copy generation (United States);
• PostHog — product analytics for our own website and app (United States);
• Sentry — error monitoring (United States);
• Google — Business Profile and Places data you choose to import, and web fonts (global).

We may also disclose information where the law requires it, to enforce our terms, to protect someone's safety, or as part of a sale or transfer of the business — in which case we will tell you first.

Your account data, site content and uploaded images are stored in Australia (Sydney). Some of the providers listed above process data in the United States and other countries. When information leaves Australia we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including through the contractual terms our providers offer.

Your account and site. For as long as your account is open. If your subscription ends, your site is taken offline and held for 30 days so you can come back. After that it is permanently deleted — content, images, enquiries and analytics — and cannot be recovered.

Visitor analytics. Individual events for 90 days; daily totals for the life of the site.

Enquiries. For as long as the site exists, unless the business deletes them sooner.

Billing records. Kept for as long as Australian tax and record-keeping law requires, generally seven years.

Email and support correspondence. Kept while it is useful for support history, then deleted.

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong or out of date;
• delete your account and the data associated with it; or
• export your site content and enquiry data.

Email team@fastpa.ge and we will respond within 30 days. We may need to verify who you are first. Some information has to be kept where the law requires it — for example billing records.

If you are unhappy with how we handled a privacy issue, tell us first and we will try to resolve it. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If you are in the UK or the European Economic Area, we will honour equivalent rights of access, correction, erasure, portability and objection on request.

All traffic to FastPage and to the sites we host is encrypted in transit. Passwords are hashed by our authentication provider and are never visible to us. Enquiry attachments are held in private storage behind short-lived signed links. Card details are handled entirely by Stripe and never touch our systems. Access to production data is limited to what is needed to run the service.

No online service can promise perfect security. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

FastPage is a product for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe we have, email team@fastpa.ge and we will delete it.

We may update this policy as the product changes. The date at the top always shows the current version. If a change materially affects how we handle your information, we will email active customers at least 14 days before it takes effect.

For privacy questions, access or deletion requests, or anything else in this policy: team@fastpa.ge.