Privacy policy

Who we are

Githon LLC, a Wyoming company, runs the fastcade.com website and the Fastcade service at admin.fastcade.com. Questions about your data go to privacy@fastcade.com.

The fastcade.com website

For the website, we decide how your data is used.

• The request access form collects your work email, store name, what you sell, your order volume and the language of the page.
• The form reaches hi@fastcade.com as an email, sent through Cloudflare Email Service. We use it only to reply to you and to review your request. We keep it while we talk with you and delete it when you ask.
• The website sets no cookies and uses no analytics tools.
• Cloudflare, our host, processes visitors’ IP addresses for security and to limit abuse.

Your Fastcade account

For your account, we decide how your data is used.

• We collect your name, email, password and role. We store only a hash of your password, not the password itself.
• For each session we record the IP address and browser details. We count failed sign-in attempts.
• The admin console uses Cloudflare Web Analytics. It also has Google Analytics, which is off until you agree to it. When it is on, it receives your internal user id, your role and your interface language.
• We use account data to run your account, keep it secure and support you.

Store data

When a merchant connects its Shopify store, we process the store’s data for that merchant. Here we act for the merchant, as its processor (service provider). The data includes:

• Orders, including notes, addresses and the raw data Shopify sends us.
• Products.
• Customers: name, email, phone, address, notes and marketing consent status.
• Delivery data: drivers’ names, phone numbers, emails and vehicles; delivery tasks; address coordinates; and route habits we learn from delivery history.
• If the merchant connects Onfleet: we send each recipient’s name, phone, address and notes to Onfleet to create delivery tasks. Onfleet handles this data under its own terms, including its rights to operational data such as routes and GPS. Delivery photos are stored at Onfleet. We keep the delivery updates Onfleet sends us, which can include links to those photos.

How we use store data

We use store data only:

• To provide, support and protect the service for that merchant.
• To improve Fastcade itself, using de-identified, aggregated statistics.
• To meet our legal duties.

What we never do

With store data, we never:

• Sell it or share it, including for cross-context behavioral advertising.
• Use one merchant’s data for another merchant, or compare merchants with each other.
• Contact a merchant’s customers directly.
• Give any of it, including anonymized, aggregated or derived data, to any third party other than the processors listed below, unless the law requires us to (for example, a valid court order). If that happens, we tell the merchant first unless the law forbids it.
• Use it, or statistics made from it, to train AI models.
• Try to re-identify people in de-identified data.

Who owns store data

Between the merchant and Fastcade, store data belongs to the merchant. We process it on the merchant’s instructions. A data processing agreement is available on request.

Who processes data for us

Our database is in the United States. Some of these companies may process data in other countries. These companies process data for us:

• Cloudflare: hosting, database, storage, email and Web Analytics.
• Shopify: the source of store data.
• Onfleet: only when the merchant connects it.
• Sentry: error monitoring. We replace email addresses and long numbers in error reports, but a report can still contain a name or an address.
• Resend: account emails, such as invitations and password resets.
• Google Analytics: in the admin console only, and only after you agree.

How long we keep data, and deletion

How long we keep data, and how to have it deleted:

• We keep account data while the account is active, and store data while the merchant uses Fastcade.
• When a merchant stops using Fastcade and tells us, or asks us at any time, we delete its store data within 30 days.
• When a merchant passes on a deletion request from one of its customers, we act on it within 30 days.
• To ask, email privacy@fastcade.com.

Merchants, their customers and their drivers

Merchants must tell their customers and drivers how their data is used, including location tracking and delivery photos, and must have a legal basis to use it. We help merchants answer access and deletion requests.

Security

We protect data with these measures:

• Data is encrypted in transit with HTTPS.
• Only the people who need access to run and support the service have it.
• If we find a security incident that affects a merchant’s data, we tell that merchant promptly.

Your rights

You can ask to see, correct or delete your personal data. Email privacy@fastcade.com. If your data came to us from a store that uses Fastcade, that store decides how it is used: ask the store, and we help it answer. If you write to us instead, we pass your request on to the store.

Do Not Track and Global Privacy Control

Your browser can send a Do Not Track (DNT) or Global Privacy Control (GPC) signal. It asks websites not to track you.

• The fastcade.com website sets no cookies, does not track you across other websites and does not let third parties track you on it. There is no tracking to turn off, so these signals change nothing on the website.
• In the admin console, Google Analytics is off until you agree to it. Once you agree, it records page views and events whether or not your browser sends these signals: your choice in the privacy notice turns it on or off, not the signals. The notice appears on your first visit; to choose again, clear this site’s data in your browser. Its Google advertising features are turned off. Cloudflare Web Analytics counts page views without cookies and does not follow you to other websites. No other third party collects data about you in the admin console.

California residents

If you live in California, the California Consumer Privacy Act gives you rights over your personal information. This section says how they apply here.

• The personal information we collect falls into these categories: identifiers and contact details (name, email, phone, address); account and sign-in records (role, password hash, IP address and browser details); information about your store from the request access form (what you sell, order volume) and commercial information from connected stores (orders, products, customers); delivery data (drivers, vehicles, delivery tasks, address coordinates); and usage data from the admin console. The sections “The fastcade.com website”, “Your Fastcade account” and “Store data” above give the details.
• We do not sell or share personal information, including for cross-context behavioral advertising.
• Fastcade is a service for businesses, not for people under 16. We do not knowingly collect personal information about anyone under 16.
• You have the right to know what personal information we hold about you and how we use it, and to have it deleted or corrected. We do not treat you differently because you use these rights.
• To use these rights, email privacy@fastcade.com. We answer within 45 days after we receive your request. We may first need to confirm who you are.
• If your data came to us from a store that uses Fastcade, we pass your request on to that store, as “Your rights” above describes.

Changes to this policy

When we change this policy, we update this page and the date at the top. If a change affects how we handle store data, we tell merchants by email before it takes effect.

Contact

Githon LLC, privacy@fastcade.com.