Privacy Policy

Last updated: September 2026

FastBI ("we", "us") operates the FastBI service and marketing website at fastbi.app. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, join our waitlist, or use our BigQuery analytics platform.

Contact: privacy@fastbi.app

Information we collect

Account and identity data

When you register or use FastBI, we collect information such as your name, email address, password (stored as a secure hash), organization membership, role, and billing or seat metadata associated with your subscription.

Waitlist data

If you join our waitlist, we collect your email address, optional name and company, and the time you provided consent. This data is stored to notify you about product updates and early access.

Usage and service metadata

We collect metadata about how you use FastBI, including AI chat and report analysis activity, analysis capacity usage, feature usage, and technical logs needed to operate and secure the service. Usage amounts are displayed to you in the product in USD.

BigQuery and customer cloud data

FastBI connects to your Google Cloud BigQuery project using credentials you control. We sync and store catalog metadata (such as dataset and table names, schemas, and field descriptions) to power the service. Query results are processed transiently to generate analyses; row-level data remains in your GCP project. We do not sell customer query data, do not share account personal information with LLM providers, and do not use your data to train public foundation models.

Chat, reports, and memories

Messages, reports, dashboards, and organizational memories you create are stored in our application databases and chat infrastructure, scoped to your organization.

Credentials

OAuth tokens or service account references used to connect BigQuery are stored securely and remain under your control. You may revoke access at any time through Google Cloud or by disconnecting in FastBI.

Cookies and local storage

We use essential cookies for authentication sessions and local storage for theme preferences (light/dark mode). We do not use advertising or cross-site tracking cookies on the marketing site.

How we use information

We use personal information to:

  • Provide, maintain, and improve FastBI
  • Authenticate users and enforce access controls
  • Process billing, seats, and analysis capacity usage
  • Communicate about the service, waitlist, and support
  • Monitor security, prevent abuse, and comply with law
  • Analyze aggregated, de-identified usage to improve the product

Legal bases (EEA, UK, Switzerland)

Where GDPR or UK GDPR applies, we rely on: (a) contract — to provide the service you request; (b) legitimate interests — security, product improvement, and B2B communication about similar services, balanced against your rights; (c) consent — waitlist marketing where required; (d) legal obligation — where applicable.

How we share information

We do not sell personal information. We do not share personal information with our partners and cloud providers.

We may disclose personal information to professional advisers and authorities when required by law or to protect rights and safety. We may share information in connection with a merger, acquisition, or asset sale with appropriate notice.

International transfers

We may process data in the United States and other countries where our subprocessors operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK.

Retention

We retain account and service data while your organization maintains an active relationship with us and for a reasonable period thereafter for backup, audit, and legal compliance. Waitlist entries are retained until you unsubscribe or request deletion. You may request deletion subject to legal retention requirements.

Security

We implement technical and organizational measures including encryption in transit, access controls, tenant isolation for dedicated databases, and monitoring. No method of transmission or storage is completely secure.

Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal information, object to certain processing, withdraw consent, and lodge a complaint with a supervisory authority.

California residents (CCPA/CPRA)

In the preceding twelve months we may collect: identifiers (name, email); commercial information (subscription and usage); internet activity (service logs); professional information (company, role). We do not sell or share personal information for cross-context behavioral advertising. California residents may request to know, delete, or correct personal information by contacting privacy@fastbi.app. We will not discriminate against you for exercising these rights. Authorized agents may submit requests with appropriate verification.

Canada (PIPEDA)

Canadian users may access and challenge the accuracy of personal information and withdraw consent subject to legal or contractual restrictions by contacting privacy@fastbi.app.

Brazil (LGPD)

Brazilian users may confirm processing, access, correct, anonymize, block, or delete data, and obtain information about sharing, under LGPD by contacting privacy@fastbi.app.

Japan (APPI)

Japanese users may request disclosure, correction, or cessation of use in accordance with applicable law by contacting privacy@fastbi.app.

To exercise rights, email privacy@fastbi.app. We may verify your identity before responding.

Children

FastBI is not directed to children under 16 (or 13 where applicable). We do not knowingly collect data from children.

Changes

We may update this Privacy Policy. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.

Contact

FastBI · privacy@fastbi.app

For EU/UK inquiries you may also contact our data protection contact at privacy@fastbi.app.