Privacy Policy — FAST CAPI

1. Operator and contact

The operator of the FAST CAPI service ("Service", "we") is Saturn Development (sole proprietor / ИП Saturn Development). Website: https://fast-capi.com. For questions about personal data and for deletion requests: support@fast-capi.com.

2. Data we process

2.1 Account data: email address, name (if provided), organization and project names. Passwords are stored only as a hash (argon2id); the password itself is not stored.

2.2 Facebook integration data: when you connect a dataset (pixel) via Facebook Login for Business, we store the business ID, the dataset ID and name, and the access (BISU) token — encrypted only (AES-256-GCM). We read the list of available datasets via the Graph API and do not modify the dataset itself.

2.3 Event data: the Service receives webhooks whose contents you configure. They may contain personal data of your end users (e.g., email or phone). Such identifiers are hashed with SHA-256 before being sent to Meta. We also store records of event receipt and scenario run logs.

2.4 Technical data and cookies: IP address, log data, a session token in the browser's localStorage, and analytics and cookie data to the extent you consent via the banner.

3. Purposes and legal bases

— Providing and operating the Service, including authentication — performance of our contract with you.

— Delivering conversion events to the Meta Conversions API — on your instructions and on your behalf.

— Security, abuse prevention, and diagnostics — our legitimate interests.

— Analytics and optional cookies — based on your consent, which you can withdraw.

4. Our role: controller and processor

For your account data we act as the controller. For personal data of end users contained in webhook payloads and forwarded to Meta, we act as a processor on your behalf: you are the controller and are responsible for having a lawful basis and end-user consent.

5. Sharing with third parties

We share data with: Meta Platforms — to deliver conversion events and retrieve the list of available datasets, and, only with your consent, to measure and optimise our advertising (the Meta pixel and the signup event — see section 12); infrastructure and hosting providers — to operate the Service. We do not sell personal data and do not share it with third parties for their own purposes.

6. International transfers

Data may be transferred to and processed by recipients (in particular, Meta Platforms) located outside your country or the European Economic Area. In such cases we apply reasonable safeguards to protect the data in transit.

7. Retention

Account data is retained while your account is active. The encrypted access token is retained until the corresponding dataset is disconnected. Event-receipt and run logs are retained for a limited period necessary to operate and diagnose the Service. On request we delete data as described in "Data deletion".

8. Security

Access tokens are stored encrypted (AES-256-GCM), passwords as argon2id hashes, and data in transit is protected by TLS. Access to data is restricted and controlled. No method is perfectly secure, but we apply reasonable technical and organizational measures.

9. Cookies and analytics

We use necessary cookies for the site and session to function, and analytics cookies and the Meta pixel's advertising cookies (_fbp, _fbc) only after your consent via the banner (see section 12). You may accept all cookies or keep only the necessary ones, and change your choice later in the banner settings or by clearing cookies in your browser.

10. Your rights

Depending on applicable law (including the GDPR), you have the right to access, rectify, erase, restrict or object to the processing of your data, to receive your data in a portable format, and to withdraw consent previously given. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights, email support@fast-capi.com.

11. Data deletion

You can delete your data in the following ways:

— Disconnect a dataset in the Service UI: Settings → Connections → Delete. This immediately removes the connection and its associated encrypted access token.

— Revoke access on the Facebook side: in your Meta Business settings (Business Settings → Connected apps / business integrations).

— Request full deletion of your account and associated data by emailing support@fast-capi.com. We will process the request within a reasonable time.

12. Visit analytics and signup data

12.1 What we collect. When you visit the site we record: campaign tags (UTM), Meta advertising parameters — fbclid, the campaign, ad set and ad IDs, Meta's _fbp and _fbc cookies, the address of the page you arrived on, the referring page (referrer), your IP address, browser user agent, language and time zone.

12.2 The fc_vid cookie. This is our analytics cookie: a random identifier that links your visits together. It lasts 13 months. It is set, and visits are recorded, only after you click "Accept all" in the cookie banner; if you choose "Only necessary" we do not set it and do not record visits.

12.3 The Meta pixel. If you click "Accept all", the site loads the Meta pixel (Meta Platforms Ireland Ltd.): it sets the _fbp and _fbc advertising cookies and reports the site's page views to Meta. Before you consent, and if you choose "Only necessary", the pixel is not loaded and these cookies are not set. The pixel does not send your email.

12.4 Signup. When you create an account we store the signup page data: the page address (if you came through an ad link — the address with its tags), the referring page, your language and time zone, plus your IP address and user agent. If you previously consented to analytics, your visits identified by the fc_vid cookie are also linked to the account.

12.5 The signup event in Meta. Only if you clicked "Accept all", when you create an account we send a signup event to Meta — from our server via the Meta Conversions API and through the pixel: your email as a hash (SHA-256), IP address, user agent, Meta identifiers (the _fbp and _fbc cookies, the campaign, ad set and ad IDs), campaign tags and the account ID. Without consent no event is sent to Meta.

12.6 Why. To understand how people find FAST CAPI, to measure and optimise our advertising (including conversion measurement via the Meta Conversions API), and to improve our marketing.

12.7 Legal basis. For the fc_vid cookie, the visit log, the Meta pixel and sending the signup event to Meta — your consent, which you can withdraw at any time (choose "Only necessary" or clear your cookies). For the signup page data — our legitimate interest in analysing and improving our marketing.

12.8 Retention. Anonymous visits not linked to an account are kept for 13 months and then deleted. Customer data (signup and the visits linked to the account) is kept while the account exists and is deleted together with it. Data sent to Meta is stored and processed by Meta under its own privacy policy.

13. Changes to this Policy

We may update this Policy. The current date is shown at the top of the page. We will notify you of material changes by available means.

14. Contact

Saturn Development (sole proprietor). Email: support@fast-capi.com.