Datenschutzerklärung

itfast.eu ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Data We Collect

We collect the following categories of personal data:

• Account information — name, email address, and password (or Google account ID for OAuth users)
• Payment information — billing details processed securely through our payment provider Mollie; we do not store credit card numbers
• Usage data — tool execution logs, credit usage, and feature interactions
• Technical data — IP address, browser type, device information, and access timestamps
• Business information — company name, KvK number, and VAT number (for business accounts)
• Cookies — authentication session tokens and user preferences (see our Cookie Policy)

2. Why We Collect Your Data

• Service delivery — to provide access to AI microservices, manage your account, and track credit usage
• Billing — to process payments, generate invoices, and manage subscriptions
• Security — to prevent fraud, detect abuse, and maintain platform integrity
• Legal obligations — to comply with Dutch and EU tax, accounting, and data protection laws
• Service improvement — to understand usage patterns and improve tool quality

3. Third-Party Services

We share data with the following third parties, only to the extent necessary to provide our services:

• Mollie — payment processing (name, email, payment details)
• Google — OAuth authentication (Google account ID, email, name)
• OpenAI — AI processing of tool inputs (input data is sent for processing and not stored by us beyond the session)

We do not sell your personal data to any third party.

4. Data Retention

• Account data — retained while your account is active, deleted upon account deletion request
• Payment and invoice data — retained for 7 years as required by Dutch tax law (Algemene wet inzake rijksbelastingen)
• Usage logs — retained for 90 days, then automatically deleted
• Tool input/output data — not permanently stored; processed in-session only

5. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to restrict processing — request that we limit the use of your data

We will respond to all data requests within 30 days.

6. Legal Basis for Processing

• Contract — processing necessary to deliver the services you signed up for
• Legal obligation — processing required by Dutch and EU law (e.g., tax records)
• Legitimate interest — security monitoring and service improvement

7. Contact

For any privacy-related questions or data requests, contact us at:

3 + 4 = Show email

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.