Privacy notice

1. Who is responsible for your data

FSITES LTD is the data controller for the personal data described here. FastDrive is a service of FSITES LTD, a company registered in England and Wales (company number 14446987) at 105 Seven Sisters Road, London, N7 7QR, United Kingdom. Our VAT registration number is GB 427 6738 65. You can reach us at hello@fastsites.app.

For any privacy question, or to exercise any of the rights below, email hello@fastsites.app.

2. What we collect

Account data: your name, email address, and your password, which is stored in a form we cannot read.

Your files: the files and folders you upload, their names, sizes and types, and the share links you create — including who you sent a link to, if you used us to send it.

Billing data: what you bought, when, and the country you are billed in. Card details are handled by our payment providers and never reach our servers.

Technical data: log data created when you use the service, including IP address and timestamps. This is what lets us investigate faults and abuse.

3. Why we use it, and our lawful basis

To provide the service you bought — storing your files, serving them back to you, and making your share links work. This is necessary to perform our contract with you.

To bill you and keep proper financial records. This is necessary for the contract and to meet our legal obligations.

To keep the service secure and prevent abuse. This is our legitimate interest in running a service that stays usable.

To contact you about the service — renewals, faults, security matters and changes to these documents. This is necessary for the contract.

4. What we do not do

We do not sell your personal data and we do not share it with advertisers. We do not open your files to profile you or to target advertising, and we do not use their contents to train machine-learning models.

Our staff do not browse customer files. Access happens only where we genuinely need it — when you ask us to help with a specific problem, or where the law requires it.

5. Where your files are stored

Files are stored with Backblaze B2, in its EU Central region, which is located in the Netherlands.

Our website and application run on Vercel, and account and subscription records are held in a database hosted by Neon. Payments are processed by Paddle and Stripe; where Paddle is the merchant of record for your purchase, it is a controller of the payment data it holds, under its own privacy notice.

Some of these providers are based outside the UK and EU, so some data is transferred internationally. Where it is, that transfer relies on safeguards recognised under UK and EU data protection law, such as standard contractual clauses.

6. Security

Connections to FastDrive are encrypted in transit using TLS. Files are encrypted at rest by our storage provider. Passwords are stored hashed, not in readable form, and access to production systems is limited to the people who need it.

No service can promise it will never be breached. If a breach affects your personal data and is likely to be a risk to you, we will tell you, and we will tell the regulator where we are required to.

7. How long we keep it

Your files are kept while your subscription is active, and are deleted after a short grace period once it ends. Deleted files may persist briefly in the bin and in version history before being removed.

Billing records are kept for as long as tax and company law requires — currently six years in the UK.

Technical logs are kept for a short period for security and fault investigation, then discarded.

8. Your rights

You can ask us for a copy of the personal data we hold about you, to correct it if it is wrong, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Your files themselves are portable at any time: download them from your account.

To make a request, email hello@fastsites.app. We will respond within one month.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

9. Cookies

Our website uses only the cookies needed to make it work — for example, keeping you signed in. We do not use advertising or cross-site tracking cookies.

10. Changes

If we change this notice in a way that materially affects you, we will tell you by email before it takes effect.