Privacy Policy

1. Information We Collect and Protect

We do not sell, rent, or share your business ideas with any third parties.

To provide secure access to Fastlanex.ai and enable core platform functionality, we collect a limited set of personal information—specifically, your name and email address. This data is collected during account creation and is used solely for identity verification, user authentication, account management, and ensuring proper service operation.

We do not collect sensitive personal information such as your phone number, profession, or physical address unless you voluntarily provide such details for optional features that explicitly request them.

In addition, we collect IP address and general location data (e.g., country or region) for each visitor. This information is used exclusively for internal analytics, security, and service optimization, and is not used to identify you personally.

We also collect certain technical and environmental information about your device and browser to improve performance, tailor responses, and ensure compatibility. This includes:

- Geo-location (based on IP address)

- IP address

- Device details such as type, name/model, and vendor

- Operating system name and version

- CPU architecture and GPU name

- Browser name, version, and language

- Screen resolution and connection type

- Referrer URL and local device timestamp

- Whether the device is classified as outdated

This data is collected either upon user consent (where required by law) or under legitimate interests allowed by data protection regulations. It is used to:

- Enhance platform stability and performance

- Deliver more relevant and region-specific insights

- Ensure cross-device compatibility and security

All collected data is processed in compliance with applicable privacy laws and retained only as long as necessary for these purposes. IP addresses and related log data are retained for a maximum of 90 days, after which they are automatically deleted or anonymized. We do not sell, rent, or use your data for profiling or behavioral advertising.

User-submitted content (such as business ideas) is processed solely for providing feedback and guidance through our platform. This content is stored and associated only with the minimal account information required for authentication and project history, and is not linked to your identity beyond that.

We use cookies strictly for authentication and session management. These cookies do not track behavior across websites or third-party services and do not contain personal data.

Your email may be used to send essential communications, such as security updates, feature announcements, support responses, or changes to this policy. We do not send promotional messages without your explicit consent, and your information is never shared with third parties.

2. Purpose of Data Use

The information you submit, including business ideas or related content, is processed exclusively for the purpose of providing analytical insights and guidance through the use of third-party artificial intelligence (AI) tools.

These AI systems operate by referencing publicly available information and patterns to generate relevant suggestions, strategic recommendations, or other supportive outputs. We do not use your submitted content for any purpose beyond the scope of delivering feedback, and we do not associate your ideas with your identity outside what is necessary for providing the service.

Your inputs and the resulting analysis are stored securely under your user account to enable access to past projects and maintain continuity of your experience. This data is not used for advertising, profiling, or behavioral tracking, and is retained solely to support core platform functionality, such as project management and revisiting previous analyses.

Data Analytics

Use of Google Analytics (with Consent)

We use Google Analytics to understand how visitors use our website and improve our content and services. However, we only activate Google Analytics after you have given explicit consent to all cookies or analytics tracking via our cookie banner.

Google Analytics collects anonymized information such as:

• Device type and browser

• Pages visited and time spent

• Interactions and navigation patterns

This data does not include any personal identifiers like your name or email address. The data is processed and stored by Google in accordance with their privacy policies.

You can learn more about how Google uses this data at:

https://policies.google.com/technologies/partner-sites

If you change your mind, you can update your consent preferences or install the Google Analytics Opt-Out add-on:

https://tools.google.com/dlpage/gaoptout

Use of Microsoft Clarity (with Consent)

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization and fraud/security purposes.

For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement:

https://www.microsoft.com/de-de/privacy/privacystatement

3. Use of Third-Party AI Tools

We utilize third-party large language models (LLMs) to process and analyze your inputs. These AI tools are integral to providing you with the personalized insights and recommendations that are the core of our platform.

While we do not disclose specific third-party providers, we want to make you aware that these services may use your inputs to improve their systems in accordance with their own privacy policies. We recommend reviewing the privacy policies of any third-party services that may be involved in processing your data as part of our platform's AI functionality.

By using Fastlanex.ai, you consent to the transfer of your idea inputs to these third-party AI systems for analysis purposes.

4. Data Protection & Security

We take the protection of your data seriously and follow industry best practices to maintain its confidentiality, integrity, and availability.

All data exchanged between your device and our platform is encrypted using secure transport protocols (such as HTTPS) to protect against interception or unauthorized access during transmission.

Your submitted business ideas are securely stored on our platform and made accessible within your personal dashboard. You maintain full control over your content and can delete your ideas or associated data at any time through your account settings.

Fastlanex.ai is hosted on secure, third-party cloud infrastructure providers that adhere to recognized security frameworks and compliance standards. These services manage data under strict access controls, encrypted storage systems, and continuous monitoring protocols. We only engage providers that demonstrate strong data protection measures aligned with applicable privacy laws.

Access to user data is restricted to authorized personnel and systems with a legitimate operational need. We regularly audit and review our security controls to ensure ongoing protection and regulatory compliance.

5. Regional Compliance

European Union (GDPR)

Fastlanex.ai is committed to compliance with the General Data Protection Regulation (GDPR). While we do not collect sensitive personally identifiable information (PII) by default, we may collect certain technical data—such as IP address, device type, and browser configuration—for platform analytics, personalization, and security, as outlined in this policy.

When you submit content (such as business ideas) for AI-powered processing, your input may be securely transferred to and processed by third-party AI infrastructure providers. These providers may operate outside the European Economic Area (EEA), and such transfers are essential to deliver our core services.

We implement appropriate safeguards and contractual measures in accordance with GDPR requirements to ensure your data is protected during international transfers and processed lawfully.

United States (CCPA / CPRA)

Fastlanex.ai complies with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). We do not sell personal information, nor do we share it for cross-context behavioral advertising purposes.

We only collect data that is essential for service delivery, analytics, and platform improvement. Where applicable, users have the right to access, update, or delete their personal data. These rights may be exercised by contacting us through the support information provided at the end of this policy.

6. Your Rights

You have the right to control your data and how it is processed. If you are uncomfortable with your idea data being processed externally, you may choose not to use our service.

If we provide account or data-saving features in the future, you will have the right to request the deletion of any saved idea data. To exercise this right, please contact us directly through the support options available.

We are committed to respecting your rights under applicable data protection laws and ensuring that you have control over your personal information.

7. Content Restrictions

To ensure the responsible and ethical use of Fastlanex.ai, we reserve the right to block, reject, or filter any submitted content that contains illegal, harmful, abusive, discriminatory, explicit, offensive, or otherwise inappropriate material.

Any submissions found to violate this policy will not be processed, and users responsible for such content may face temporary or permanent restrictions from using the platform. We are committed to maintaining a safe and respectful environment for all users and will take appropriate action as necessary to enforce these standards.

8. Changes to Policy

We reserve the right to update or modify this Privacy and Data Protection Policy at any time, in response to changes in technology, applicable laws, or the nature of our services. Any updates will be posted on this page, and the effective date will be clearly indicated at the top of the policy.

We encourage you to periodically review this policy to stay informed about how we are protecting your information. Continued use of our platform after any such changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or need further clarification, please feel free to contact us at: hello@fastlanex.ai

9. Data Collection for Brand Marketing Agent

When you use the Brand Marketing Agent, we collect the following information:

• LinkedIn profile information (name, profile URL, profile picture) obtained through LinkedIn OAuth authorization

• LinkedIn access tokens required to post content on your behalf

• Content you create, schedule, or publish through our platform

• Usage analytics and scheduling preferences

This data is collected solely to provide the Brand Marketing Agent service. We do not use your data for any other purpose, and your content is never shared with or used for other users.

10. LinkedIn Authorization & Data Handling

We use LinkedIn's official OAuth 2.0 authentication to securely access your account. When you authorize our application:

• We receive only the permissions you explicitly grant

• Your LinkedIn password is never shared with or stored by Fastlanex.ai

• Access tokens are encrypted using industry-standard encryption and stored securely

You can revoke access at any time through your account settings in our application, your LinkedIn account settings, or by contacting us.

11. Data Security & Storage Location

We implement industry-leading security measures to protect your data:

• Server Location: All user authentication data and content is stored on servers located in Frankfurt, Germany, ensuring compliance with GDPR and EU data protection regulations.

• Encryption: All sensitive data, including LinkedIn tokens and credentials, is encrypted at rest using industry-standard encryption with secure, application-level key management.

• Security Standards: Our infrastructure follows industry security best practices and recognized security frameworks for data protection.

• Access Control: Data access is strictly limited to authorized systems and personnel with legitimate operational needs.

12. Third-Party Services for Brand Marketing Agent

The Brand Marketing Agent integrates with the following third-party services:

• LinkedIn API - For posting content and accessing profile information with your authorization

• Anthropic Claude - For AI-powered content generation (your prompts are processed but not stored by Anthropic for training)

• Google Gemini - For AI image generation

All AI processing occurs on secure, private infrastructure. Your content and data are never used to train AI models or benefit other users.

13. Data Usage Restrictions

We are committed to protecting your privacy and data:

• We do NOT use your data, content, or LinkedIn information for any purpose other than providing the Brand Marketing Agent service

• We do NOT sell, rent, or share your data with third parties for marketing or advertising purposes

• We do NOT use your content to train AI models or improve services for other users

• Your LinkedIn posts, drafts, and content remain exclusively yours

14. PhotowalaGPT Data Collection

When you use PhotowalaGPT via WhatsApp, we collect the following information:

• Your WhatsApp phone number for service delivery and account identification.

• Images you submit for AI processing and enhancement.

• Text prompts and captions you provide with your images.

• Registration information (name, email, business name, city) if you choose to register.

This data is collected solely to provide the PhotowalaGPT service and improve your experience.

15. Image Processing & Storage

Images submitted to PhotowalaGPT are processed using Google Gemini AI to generate professional product photographs. Your images are:

• Temporarily processed through Google's Gemini AI API for image generation.

• Stored securely on our cloud infrastructure (Amazon S3) to enable follow-up edits and image history.

• Associated with your WhatsApp account for service continuity.

Generated images are stored to allow you to request modifications and maintain your creative history. We do not share, sell, or use your images for any purpose other than providing the PhotowalaGPT service.

16. Third-Party Services for PhotowalaGPT

PhotowalaGPT integrates with the following third-party services:

• WhatsApp Business API (Meta) - For message delivery and receiving your images and prompts.

• Google Gemini AI - For AI-powered image generation and processing.

• Razorpay - For secure subscription and payment processing.

• Amazon Web Services (S3) - For secure image storage.

Each of these services has their own privacy policies governing how they handle data. By using PhotowalaGPT, you consent to your data being processed by these third-party services as necessary to provide the service.

17. Payment Information

All payment transactions for PhotowalaGPT subscriptions and credit purchases are processed securely through Razorpay. We do not store your complete payment card details on our servers.

We may store transaction identifiers, subscription status, and payment history for account management and support purposes. Razorpay handles all sensitive payment data in compliance with PCI-DSS standards.

18. Data Retention for PhotowalaGPT

Your PhotowalaGPT data is retained as follows:

• Generated images are stored to enable follow-up requests and image history features.

• Account and usage data is retained while your account is active.

• Upon account deletion request, your data will be removed within 30 days.

To request deletion of your PhotowalaGPT data, please contact us at hello@fastlanex.ai with your registered phone number.