Privacy Policy

HBOS Technologies Pvt Ltd (“F/AS/T”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through our website https://fast.one and through our apps, including the web and mobile apps we provide to our business customers and apps branded for a customer; how we use it; and the choices you have.

1. Our website

What we collect

• Forms you choose to fill in, such as booking a walkthrough: your name, role, company, company size, company website and contact details (email or phone). We also record when the form was sent and your browser type.
• Website analytics: we use Cloudflare Web Analytics, which doesn’t use cookies, to count page views and see which pages and referring sites are popular.

How we use it: to respond to you, discuss our services and, if you agree, keep you updated. You can opt out of our emails at any time.

2. Our apps

Our apps are business tools. Only people whose organisation (our customer) has given them an account can use them; you can’t sign up in the app. Your organisation decides who has access and which modules and data are available to you. We process that business data on your organisation’s behalf, under our contract with them.

What the apps collect

• Account details your organisation provides, such as your name, work email, phone number or employee ID. We use them to sign you in, including sending a one-time code by SMS.
• A sign-in token stored securely on your device. It expires, and it’s removed when you sign out.
• Notification details: a notification token, your device platform and the app version, so we can send the notifications your organisation has set up.
• Product usage data: which screens and features you use and when, linked to your account and organisation. We collect it with our own systems to improve the product and to report usage to your organisation.
• Crash and diagnostic data: collected through Firebase Crashlytics (Google). It covers the app version, device and operating system, and technical details of errors, but not the business data you see in the app.
• Server logs: IP address, time and request details, used for security, troubleshooting and audit.

We don’t collect your location, contacts, photos or files, and we don’t use advertising identifiers. Your organisation may block screenshots and screen recording in the app; that’s a security setting, not data collection.

2a. Data from your Google account

If you sign in with Google, we receive your name, email address and profile picture, only to sign you in.

If your organisation uses a feature that imports data from Google Sheets or Google Drive, and you choose to connect your Google account, we get read-only access to view the spreadsheets and files you select. We use it only to bring that data into your organisation’s workspace. We never change or delete your files.

We don’t sell data from Google, use it for advertising, or use it to train general-purpose AI or machine-learning models. People at F/AS/T don’t read it unless you ask us to (for example, for support), it’s needed for security, or the law requires it. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time in your Google Account’s security settings.

3. Why we can use your data

We process personal data where it’s needed to provide our services under a contract, where you’ve given consent (for example, when you send a form), to meet legal obligations, and for legitimate purposes such as security and fraud prevention.

4. Who we share it with

We don’t sell personal data or use it for advertising. We share it only:

• with service providers who run our services for us, under contracts that require them to protect it:
  • Amazon Web Services: app hosting in India
  • Google: notifications, crash reporting, sign-in and business email
  • our SMS provider: one-time codes
  • Cloudflare: website hosting, forms and analytics
• with your organisation, for data in the apps it provides to you
• when the law requires it, or to protect our users, systems or rights
• with a buyer or successor if our business is merged or sold, under this policy’s protections

Some of these providers may store or process data outside India, with appropriate safeguards.

5. How long we keep it

We keep personal data only as long as it’s needed for the purposes above, or as the law requires. App data is kept and deleted in line with our contract with your organisation. Website enquiries are kept until you ask us to delete them or they’re no longer needed.

6. Your rights

You can ask to access, correct or delete your personal data, to withdraw consent, or to object to marketing. App users can also contact their organisation’s administrator, who manages their account. Write to us at corp@fast.one. If you’re in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to raise a grievance with our grievance officer (below).

7. Security

We protect data with encryption, access controls and regular testing, under an information security programme aligned with ISO 27001 and SOC 2. To report a security issue, write to security@fast.one.

8. Children

Our website and apps are for adults in a business context. We don’t knowingly collect data from anyone under 18; if we learn we have, we delete it.

9. Other websites

Our website may link to other sites. Their privacy practices are their own.

10. Changes

We’ll post changes here and update the date above.

11. Contact and grievance officer

HBOS Technologies Pvt Ltd
Registered office: No. 571/630/6/4, Sy No. 6/4, Ambalipura (V), Bangalore 560102, Karnataka, India
Privacy and legal: corp@fast.one
Grievance officer: Nasiruddin Ahmad, nasir@fast.one