FastFly

Legal

Privacy Policy

Last updated: 12 July 2026 · Governing law: People's Republic of Bangladesh

This Privacy Policy explains how FastFly ("FastFly", "we", "us", or "our") collects, uses, stores, shares, and protects personal information when you use our website, dashboard, page builder, mini-store tools, payment integrations, and related services (collectively, the "Service"). FastFly is operated for sellers and marketers primarily in Bangladesh.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Legal basis and compliance

We process personal data in accordance with applicable laws of Bangladesh, including (as relevant to our operations):

  • The Information and Communication Technology Act, 2006 (as amended);
  • The Cyber Security Act, 2023 (and related cybersecurity / digital offence frameworks);
  • The Consumer Rights Protection Act, 2009;
  • The Contract Act, 1872 (as applicable in Bangladesh);
  • Rules and directives of Bangladesh Bank and payment-service partners (including bKash) where payment data is involved; and
  • Any other applicable statute, rule, or regulatory guidance relating to privacy, electronic commerce, and online services in Bangladesh.

Where a specific data-protection statute is enacted or updated in Bangladesh, we will update this Policy and our practices to remain compliant.

2. Who this Policy covers

This Policy applies to:

  • Account holders — sellers, marketers, and team members who register for FastFly;
  • Visitors to our marketing website (e.g. fastfly.io); and
  • End customers of our users — people who visit published landing pages or stores and place orders (name, phone, address, and order details collected through checkout forms hosted on the Service).

FastFly users who collect customer data on their own sites are independently responsible for informing their customers and complying with Bangladesh consumer and e-commerce rules. We act as a service provider / processor for that customer data, and as a data controller for FastFly account and platform data.

3. Information we collect

3.1 Information you provide

  • Account details: name, email address, phone number, password (stored in hashed form), and business/store information;
  • Billing and subscription details related to FastFly plans (paid in BDT where applicable);
  • Content you upload or create: page HTML/CSS, product catalogues, images, domain settings, and integration credentials you choose to connect;
  • Support communications and feedback you send to us; and
  • Order and checkout fields your customers submit on your published sites (e.g. customer name, mobile number, delivery address, district/area, and order notes).

3.2 Information collected automatically

  • Device and technical data: IP address, browser type, operating system, device identifiers, and approximate location derived from IP;
  • Usage and analytics: pages viewed, clicks, sessions, referrers, and conversion events on FastFly and on sites you publish;
  • Cookies and similar technologies used for authentication, preferences, and performance; and
  • Security logs needed to detect abuse, fraud, and unauthorised access.

3.3 Payment and third-party data

  • When you or your customers pay via bKash or other payment partners, payment is processed by those providers. We receive transaction status, reference IDs, and amounts needed to confirm orders or subscriptions — we do not store full bKash PINs or card PANs.
  • If you connect Facebook Pixel, Meta Conversions API, WhatsApp, or similar tools, those platforms process data under their own policies, subject to your configuration.

4. How we use personal information

We use personal information to:

  • Provide, operate, secure, and improve the Service;
  • Create and manage accounts, sites, products, orders, and subscriptions;
  • Process plan payments and send invoices/receipts where applicable;
  • Enable COD and digital checkout flows, order notifications, and optional WhatsApp routing configured by you;
  • Show analytics (visits, clicks, orders, ad spend you enter) in your dashboard;
  • Communicate service notices, security alerts, and (with appropriate consent or legitimate interest) product updates;
  • Prevent fraud, spam, abuse, and illegal activity, and enforce our Terms & Conditions;
  • Comply with Bangladesh law, court orders, and lawful requests from competent authorities; and
  • Resolve disputes and provide customer support.

We do not sell personal data to third parties for their independent marketing.

5. Legal grounds for processing

Depending on the context, we process data because:

  • It is necessary to perform our contract with you (providing the SaaS Service);
  • You have given clear consent (e.g. optional marketing or certain cookies);
  • It is necessary for legitimate interests such as security, product improvement, and preventing misuse — balanced against your rights; and/or
  • It is required to meet legal or regulatory obligations in Bangladesh.

6. Sharing of information

We may share information with:

  • Infrastructure providers (hosting, database, email delivery, CDN) under confidentiality and security obligations;
  • Payment partners such as bKash for subscription or order payments;
  • Integrations you enable (e.g. Meta Pixel / CAPI, messaging tools);
  • Professional advisers (legal, accounting) under duty of confidence;
  • Authorities when required by Bangladesh law, court order, or to protect rights, safety, and security; and
  • A successor entity in a merger, acquisition, or restructuring, subject to continued protection consistent with this Policy.

Published sites you create may display your business contact details and collect customer orders as you configure. You are responsible for how that information is used in your own business.

7. Cross-border transfers

FastFly primarily serves Bangladesh. Some infrastructure or vendors may store or process data on servers outside Bangladesh. Where that occurs, we take reasonable contractual and technical steps so that personal data remains protected to a standard appropriate under applicable Bangladesh law and industry practice.

8. Data retention

We retain personal data only as long as needed for the purposes described above, including:

  • Account and site data while your account is active;
  • Order, transaction, and billing records for the period required for accounting, dispute resolution, and legal compliance (typically several years);
  • Analytics and logs for a limited operational period, unless longer retention is needed for security investigations; and
  • Data you delete from the dashboard, subject to backup cycles and legal holds.

After retention periods expire, we delete or anonymise data in a secure manner.

9. Security measures

We implement reasonable administrative, technical, and organisational measures appropriate to the nature of the Service, including hashed passwords, access controls, encrypted transport (HTTPS/TLS), and monitoring for unauthorised access. No online system is 100% secure; you must also keep your login credentials confidential and use strong passwords.

If we become aware of a security incident affecting your personal data in a way that creates a significant risk of harm, we will take prompt steps to contain it and notify affected users and, where legally required, competent authorities in Bangladesh.

10. Cookies and tracking

We use essential cookies for login sessions and security. We may use analytics cookies to understand how the marketing site and Service are used. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

Tracking tools you install on your published sites (Pixel, CAPI, etc.) are under your control. You must disclose them to your visitors as required by law and platform policies.

11. Children

The Service is intended for business users aged 18 or above. We do not knowingly collect personal data from children under 18. If you believe a minor has provided data to us, contact us and we will take appropriate steps to delete it.

12. Your rights

Subject to Bangladesh law and verification of your identity, you may request to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Request deletion of account data where we are not required to retain it by law;
  • Withdraw consent where processing is based on consent;
  • Object to certain processing for direct marketing; and
  • Lodge a complaint with a competent Bangladesh authority or consumer body where applicable (including under the Consumer Rights Protection Act, 2009 framework).

To exercise these rights, email support@fastfly.io. We will respond within a reasonable time.

13. Responsibilities of FastFly users (sellers)

If you use FastFly to collect customer orders, you must:

  • Collect only data necessary for fulfilment and lawful marketing;
  • Provide clear notices on your storefront about how customer data is used;
  • Not use customer data for unlawful spam, harassment, or deceptive practices;
  • Comply with COD, delivery, refund, and advertising rules applicable in Bangladesh; and
  • Not upload unlawful, defamatory, or infringing content via the builder.

14. Changes to this Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The "Last updated" date will change when we do. Material changes may be notified via email or an in-product notice. Continued use of the Service after the update constitutes acceptance of the revised Policy.

15. Contact

For privacy questions, data requests, or complaints related to this Policy:

See also our Terms & Conditions.