Privacy Policy - Fastack

1. Introduction

Your privacy is important to us. This Privacy Policy explains how Fastack ("we", "our", or "us") collects, uses, discloses, and safeguards your information when you visit our website at fastack.dev, purchase our products, or use our services.

By using our website and services, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us, including:

Account Information: When you purchase Fastack, we collect your name, email address, and any other information you provide during the purchase process.
Payment Information: Payment details are processed securely through Stripe. We do not store your full payment card information on our servers.
Communication Data: When you contact us via email, contact form, or support channels, we collect the information you provide, including your name, email address, and message content.
GitHub Information: To provide access to the private repository, we may collect your GitHub username or email address associated with your GitHub account.

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage:

Device Information: IP address, browser type and version, operating system, device type, and device identifiers.
Usage Information: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths through our website.
Technical Information: Browser language, screen resolution, time zone, and other technical specifications.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your interactions with our website. See our Cookie Policy for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To process your purchase, provide access to the Fastack boilerplate codebase, and deliver the products and services you have requested.
Customer Support: To respond to your inquiries, provide technical support, and assist with any issues you may encounter.
Communication: To send you transactional emails (purchase confirmations, access information), respond to your requests, and send important updates about your purchase or our services.
Improvement: To analyze usage patterns, improve our website functionality, enhance user experience, and develop new features.
Security: To protect against fraud, unauthorized access, and other security threats, and to maintain the security and integrity of our services.
Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforce our terms of service.
Marketing: With your consent, to send you marketing communications about our products, services, and updates. You can opt-out at any time.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

Contract Performance: To fulfill our contractual obligations to you, including processing your purchase and providing access to the Fastack boilerplate.
Legitimate Interests: To improve our services, prevent fraud, ensure security, and analyze website usage for business purposes.
Consent: When you have given explicit consent, such as for marketing communications or optional features.
Legal Obligation: To comply with legal requirements, such as tax obligations and record-keeping requirements.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business:

Stripe: Payment processing and transaction management. Stripe's use of your information is governed by their Privacy Policy.
GitHub: Repository hosting and access management for the Fastack codebase.
Email Service Providers: For sending transactional and marketing emails.
Analytics Providers: For website analytics and performance monitoring (e.g., Google Analytics).
Hosting Providers: For website hosting and infrastructure services.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to:

Comply with legal obligations and respond to lawful requests
Protect our rights, property, or safety, or that of our users or others
Prevent fraud, abuse, or illegal activities
Enforce our Terms of Service or other agreements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

6. Payment processing

We use Stripe, a third-party payment processor, to handle all payment transactions. When you make a purchase, the following information is shared with Stripe:

Name and billing address
Email address
Payment method information (credit card details, etc.)
Transaction amount and details

Stripe processes your payment information securely and in accordance with their own privacy policy. We do not store your full payment card details on our servers. All payment information is encrypted and handled in compliance with PCI DSS standards.

By making a purchase, you agree to Stripe's processing of your payment information. For more information, please review Stripe's Privacy Policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law:

Account Data: Retained for as long as your account is active or as needed to provide services. You may request deletion of your account at any time.
Purchase Records: Retained for the duration required by law for tax and accounting purposes (typically 7 years).
Payment Data: Processed and stored by Stripe in accordance with their retention policies and legal obligations.
Communication Records: Retained for up to 3 years after the last communication, unless you request earlier deletion.
Website Analytics: Aggregated and anonymized data may be retained indefinitely for statistical purposes.
Legal Requirements: We may retain certain information longer if required by law, legal proceedings, or to protect our legal rights.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Encryption of data in transit using SSL/TLS protocols
Secure server infrastructure with firewalls and access controls
Regular security assessments and updates
Limited access to personal information on a need-to-know basis
Secure password storage and authentication practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of any passwords or access credentials provided to you. We will never ask you for your password via email or unsolicited communication.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

9.1 GDPR Rights (EEA/UK)

If you are located in the EEA or UK, you have the following rights:

Right of Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of your personal information ("right to be forgotten")
Right to Restrict Processing: Request limitation of how we process your information
Right to Data Portability: Request transfer of your data to another service provider
Right to Object: Object to processing based on legitimate interests or for marketing purposes
Right to Withdraw Consent: Withdraw consent for processing based on consent at any time
Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

9.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days (or as required by applicable law).

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and usage of our website. Cookies are small text files placed on your device when you visit our website.

We use cookies for the following purposes:

Essential Cookies: Required for the website to function properly (e.g., authentication, security)
Analytics Cookies: To understand how visitors use our website and improve user experience
Functional Cookies: To remember your preferences and settings (e.g., theme, language)
Marketing Cookies: To deliver relevant advertisements and track campaign effectiveness (with your consent)

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our website. For more detailed information, please see our Cookie Policy.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal data from the EEA or UK to countries outside these regions, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Other legally recognized transfer mechanisms

By using our services, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our service providers may be located.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

13. Third-Party Links

Our website may contain links to third-party websites, services, or resources that are not owned or controlled by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:

Posting the updated policy on this page with a new "Last updated" date
Sending an email notification to the address associated with your account (for significant changes)
Displaying a prominent notice on our website

Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please use our contact form.

For data protection inquiries or to exercise your privacy rights, please include "Privacy Request" in your subject line and provide sufficient information to verify your identity.