DataProtection

1. Overview

Fastoprox is designed for businesses that may process sensitive operational and customer information. We aim to provide customers with transparency and practical controls over how data is processed.

2. Our Data Protection Principles

We follow a privacy-by-design approach focused on:

Purpose limitation

We process information for defined and legitimate business purposes.

Data minimization

We aim to collect and process only information reasonably required to provide our Services.

Security

We use technical and organizational safeguards appropriate to the nature of the data and the risks involved.

Transparency

We explain our data practices through our Terms, Privacy Policy, and other customer documentation.

Customer control

Where applicable, customers can manage access, integrations, retention settings, and deletion requests.

3. Customer Data and Business Accounts

For business customers, Fastoprox generally processes customer-provided information to provide the Services on the customer's behalf.

The customer remains responsible for determining:

What personal information is submitted to the Services.

The lawful basis for processing that information.

Appropriate notices and consents to individuals where required.

Configuration and use of Fastoprox in compliance with applicable law.

Fastoprox processes such information according to the applicable customer agreement and service configuration.

4. Subprocessors

Fastoprox may rely on carefully selected third-party providers for infrastructure, hosting, AI processing, communications, storage, analytics, security, and other services required to operate the platform.

Where appropriate, these providers are subject to contractual confidentiality and data-protection obligations.

We may maintain a current list of material subprocessors and provide additional information to enterprise customers upon request.

5. Security Controls

Depending on the environment and service, Fastoprox may use controls such as:

Encryption in transit.

Encryption at rest where supported.

Role-based access controls.

Authentication and credential controls.

System monitoring and logging.

Backup and recovery procedures.

Security reviews and vulnerability management.

Incident response procedures.

Access restriction based on operational need.

No security program can eliminate all risk, but we continuously work to reduce the likelihood and impact of security incidents.

6. Data Deletion

Customers may request deletion of personal information or customer content, subject to applicable law, contractual requirements, security requirements, and legitimate retention obligations.

Requests can be submitted through the account deletion process or by contacting:

support@fastoprox.ai

7. Security Incidents

If Fastoprox becomes aware of a security incident involving personal information, we will assess the incident and take appropriate steps required by applicable law and our contractual obligations.

Where notification is legally required, we will provide relevant information within the applicable timeframe.

Fastoprox also maintains operational logging and security controls designed to support investigation and incident response.

8. Compliance

Our data protection program is designed to support compliance with applicable privacy and cybersecurity requirements, which may include India's DPDP framework and other laws applicable to our customers or processing activities.

India's DPDP Act was enacted in 2023, and the Government notified the DPDP Rules in 2025 with an eighteen-month phased implementation timeline.

9. Data Protection Requests

For data-protection questions, data-subject requests, or customer compliance requests:

Email: support@fastoprox.ai

For enterprise customers requiring a Data Processing Agreement or additional privacy documentation, please contact our support team.