Privacy Policy
This Privacy Policy describes how Fastments ("we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, APIs, and related services (the "Service"). By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
1. Information we collect
We collect information you provide directly, such as your name, email address, mobile number, business details, billing information, support communications, and preferences (including marketing opt-in). We also collect information automatically when you use the Service, including device type, browser, IP address, log data, cookies, usage patterns, and diagnostic information. When you process payments or configure UPI accounts through the Service, we may receive transaction metadata, reference numbers, amounts, timestamps, and status codes as supplied by you or payment partners.
2. How we use information
We use collected information to: provide and maintain the Service; authenticate users and send verification codes; process transactions and deliver webhooks; personalize your experience; communicate about updates, security alerts, and support; analyze usage to improve performance; detect fraud and abuse; comply with legal obligations; and enforce our Terms of Service. Where permitted by law and your preferences, we may send product updates and marketing emails.
3. Legal bases for processing
Depending on your location, we process personal data based on one or more of the following: performance of a contract with you; legitimate interests in operating and securing the Service; compliance with legal obligations; and your consent where required (for example, certain marketing communications).
4. Sharing of information
We may share information with: service providers who assist with hosting, email delivery, analytics, payment processing, and customer support, subject to confidentiality obligations; payment networks and financial institutions as needed to complete transactions; professional advisers and authorities when required by law or to protect rights and safety; and successors in the event of a merger, acquisition, or asset sale. We do not sell your personal information to third parties for their independent marketing purposes.
5. International transfers
Your information may be processed in countries other than your country of residence. Where required, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms recognized under applicable data protection laws.
6. Data retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including providing the Service, complying with legal and accounting requirements, resolving disputes, and enforcing agreements. Retention periods may vary based on data type and regulatory requirements. When data is no longer needed, we delete or anonymize it in accordance with our retention schedule.
7. Security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
8. Your rights and choices
Depending on applicable law, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may withdraw consent where processing is consent-based. You may opt out of marketing emails using unsubscribe links or account settings. To exercise rights, contact us through support channels. We may verify your identity before responding.
9. Cookies and similar technologies
We use cookies and similar technologies to remember preferences, maintain sessions, measure traffic, and improve the Service. You can control cookies through browser settings; disabling cookies may affect functionality. We may use analytics tools that collect aggregated usage statistics.
10. Children's privacy
The Service is not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can take appropriate action.
11. Third-party links
The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party you visit.
12. Changes to this Policy
We may update this Privacy Policy periodically. The "Last updated" date at the top indicates when revisions were made. Material changes will be communicated through the Service or by email where appropriate. Continued use after changes become effective constitutes acceptance of the updated Policy.
13. Contact us
If you have questions about this Privacy Policy or our data practices, please contact Fastments through the support options provided on our website. We will address requests in accordance with applicable law and our internal procedures.
14. Supplemental notices
Residents of certain regions may be entitled to additional disclosures under local law. Where required, we provide region-specific supplements describing categories of personal information collected, purposes of use, and rights available under statutes such as the GDPR, UK GDPR, or similar frameworks. Such supplements are incorporated by reference when provided to you.
15. Automated decision-making
We may use automated systems to detect fraud, abuse, or security incidents. These systems may flag accounts for review. We do not make solely automated decisions with legal or similarly significant effects without human review where required by law.
16. Data processing agreements
Business customers who process personal data of their end users through the Service may request a data processing addendum where applicable. Standard contractual terms may govern subprocessors engaged to support the Service.