What we keep, where it lives, and what happens when you delete it.

This is a working draft. It describes how the product is actually built. It has not been reviewed by a solicitor and must be before it goes live.

Who we are

FSITES LTD, 105 Seven Sisters Rd, Finsbury Park, London N7 7QP, United Kingdom. We are the data controller for FastSuite, FastDrive, FastSites and GetInbox. You can reach us at hello@fastsites.app.

What we collect, and why

• Your account — name, email address and a password we store only as a salted hash. Needed to sign you in and to reach you about your account.
• Your files — the documents, spreadsheets and presentations you make, and anything you upload. This is the product. We never read them for advertising, training, or anything other than serving them back to you and the people you share them with.
• Comments — when someone comments on a file you shared, we keep the comment, the name they typed, and which link it came through, so you can see who said what and so one link can be rate-limited without affecting another.
• Usage needed to run the service — how much storage you use, when a file was last changed, which share links exist. Needed to enforce your plan and to keep two browser tabs from overwriting each other.
• What we do not collect — we run no third-party analytics or advertising trackers on the product.

Where it lives

• Account and file records are in a Postgres database hosted by Neon.
• File contents you upload — photos, PDFs, anything not made in an editor — are in object storage at Backblaze. Documents, spreadsheets and presentations made in the editors are stored in the database, not in object storage.
• The application runs on Vercel.
• Vault files are encrypted in your browser before they leave it. We hold no key and cannot read them, which also means we cannot recover them if you lose your passphrase.

Storage object paths never contain your email address or any other identifier a person could read.

Share links

A share link is a long random token. Anyone holding it can open the file it points to until you revoke the link, it expires, or it reaches a download limit you set. If you turn on comments for a link, a reader can comment without an account; they are asked for a display name and nothing else. Reading a shared file does not count as a download.

Deleting

A deleted file goes to your bin for thirty days, then is purged. Purging removes the file, its contents, its versions, its comments and its share links — all of them, not just the entry in the list. Deleting your account purges everything under it.

Your rights

You can export any file at any time in a standard format. You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email hello@fastsites.app. We answer within one month, as UK GDPR requires, and usually far sooner.