Privacy Policy
FastQ Privacy Policy — how we collect, use, and protect your personal data.
Effective date: March 10, 2026
Last updated: March 10, 2026
1. Data Controller
The data controller for FastQ is:
Timothée GAUCHEZ — Auto-entrepreneur
5 avenue de Paris, 78700 Conflans-Sainte-Honorine, France
SIRET: 10223790600015
Email: support@fastq.oxoghost.dev
2. Data We Collect
When you purchase or use a FastQ license, we collect the following personal data:
| Data | Source | Purpose |
|---|---|---|
| Email address | Stripe checkout | License delivery, activation confirmation, support |
Machine ID (first 16 hex chars of /etc/machine-id) | FastQ CLI at activation | Binding the license key to your machine |
| Payment data (card details, billing country) | Stripe (processed directly — we never see raw card numbers) | Processing your subscription payment |
| Stripe customer ID and subscription ID | Stripe webhook | Subscription management and cancellation |
We do not collect: names, phone numbers, browsing history, IP addresses, or any data beyond what is listed above.
3. Legal Basis for Processing (GDPR Art. 6)
| Processing | Legal basis |
|---|---|
| License delivery and activation | Performance of a contract (Art. 6(1)(b)) |
| Payment processing | Performance of a contract (Art. 6(1)(b)) |
| License key revocation on cancellation | Performance of a contract (Art. 6(1)(b)) |
| Responding to support requests | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Data Processors (Sub-processors)
We use the following third-party processors to operate the service:
Stripe, Inc. — Payment processing
Address: 354 Oyster Point Blvd, South San Francisco, CA 94080, USA
Role: Processes payment card data and manages subscriptions. Stripe is PCI-DSS Level 1 certified.
Data transferred to: USA (under EU Standard Contractual Clauses)
Resend, Inc. — Transactional email
Role: Delivers license key emails to your email address.
Data transferred to: USA (under EU Standard Contractual Clauses)
These processors only receive the data strictly necessary for their function and may not use it for any other purpose.
5. Website Analytics
FastQ uses GoAccess, a self-hosted, server-side log analyser. It processes anonymised web server access logs (no cookies, no JavaScript tracking, no fingerprinting). Raw log entries are not retained beyond 30 days and are not shared with any third party.
We do not use Google Analytics, Facebook Pixel, or any client-side tracking.
6. Data Retention
| Data | Retention period |
|---|---|
| Email + license keys | Duration of the subscription + 3 years (French commercial law) |
| Machine ID | Duration of the subscription; deleted when the license is revoked |
| Payment records | 10 years (French accounting law — Art. L123-22 Code de Commerce) |
| Support emails | 3 years from last interaction |
7. Your Rights (GDPR Chapter III)
As an EU resident, you have the following rights regarding your personal data:
- Right of access (Art. 15) — request a copy of the data we hold about you
- Right to rectification (Art. 16) — request correction of inaccurate data
- Right to erasure (Art. 17) — request deletion of your data (subject to our legal retention obligations)
- Right to data portability (Art. 20) — receive your data in a machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to restriction (Art. 18) — request that we restrict processing while a dispute is resolved
To exercise any of these rights, email support@fastq.oxoghost.dev with the subject line “GDPR Request”. We will respond within 30 days as required by law.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés):
https://www.cnil.fr/fr/plaintes
8. Data Security
License keys are stored in a hashed database on a private server. Access to the server and database is restricted by SSH key authentication. Payment data is handled exclusively by Stripe and never stored on our servers.
9. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. The updated version will be published at this URL with a revised effective date. Continued use of the service after changes constitutes acceptance of the new policy.
10. Contact
For any privacy-related question or request: support@fastq.oxoghost.dev