What we collect, why, who processes it, and the choices you have. In short: we use your data to run the Service for you, we don’t sell it, and your content never trains AI models.
1. Who we are
“Fastautonomi”, “we”, “us” provides Fastautonomi. For data an organization puts into the Service, the organization decides what’s processed and we process it on its behalf. For account and website data, we decide. Contact us at hello@fastautonomi.com.
2. What we collect
- Account: your name, email, profile picture (if you sign in with Google or GitHub or upload one), timezone and preferences.
- Organization content: projects, tasks, stories, sprints, comments, meetings, workflows, the AI team’s outputs and run logs, and the project memory your team builds.
- Code: repository contents are read inside a per-task container while a teammate works on a task; the container is destroyed afterwards. A cache of installed dependencies is kept per repository to speed up later tasks.
- Connections: access tokens for the tools you connect — encrypted at rest and decrypted only when used.
- Calls: who called whom, when, and who joined. The audio and video of calls go directly between participants’ browsers; we don’t receive or record them.
- Usage and security: AI usage per teammate (for credits and budgets), sign-in sessions, and server logs, which never contain secrets.
3. How we use it
- To provide the Service: run the AI team’s work, show your office, deliver notifications and email.
- To keep it secure: authentication, abuse prevention, isolation between organizations, and audit logs.
- To bill: credits, budgets and plans.
- To support you and improve the Service, using account and usage information — not your content.
4. AI processing
AI teammates run on Anthropic’s Claude models. To do a task, the relevant parts of your content (the task, code excerpts, messages) are sent to Anthropic’s API. Under Anthropic’s commercial terms this data isn’t used to train their models, and we don’t use your content to train any model. Content from emails, web pages, tickets and documents is treated as untrusted data in the AI’s instructions.
6. International transfers
Some providers process data outside your country. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
7. How long we keep it
- Organization content stays while the organization exists. When an owner deletes it, its data is deleted from the live database right away.
- Database backups are kept for 14 days, then deleted.
- When an account is deleted, its organizations that no one else owns are deleted with it; elsewhere, records it created are handed to that organization’s owner so the team’s work stays intact.
8. Security
Per-task sandboxes behind an egress firewall, encrypted secrets, strict isolation between organizations, least-privilege permissions for every AI run, and approvals for risky actions. No system is perfectly secure; if we learn of a breach affecting your data, we’ll tell you without undue delay.
9. Your choices and rights
- Update your profile and notification preferences in the app at any time.
- Delete your organization’s data from its settings, or ask us for a copy of it; disconnect any tool you connected.
- Depending on where you live, you may have the right to access, correct, delete or move your personal data, and to object to or restrict processing. Write to us to use them; we’ll answer within 30 days.
- If you’re a member of someone else’s organization, contact its owner first about content they control.
You can also complain to your local data protection authority.
11. Children
The Service is for people aged 18 and over and isn’t directed at children.
12. Changes to this policy
We’ll post updates here with a new date, and tell account owners about material changes before they take effect.