US Privacy Notice

1. Who is responsible

The data controller is Kacper Rękawek, operating under the FastLanding.io brand, ul. Janusza Kusocińskiego 8 lok. 21, 44-122 Gliwice, Poland, Polish tax identification number (NIP) 6312736932, EU VAT ID PL6312736932. Contact: kontakt@fastlanding.io.

2. Information collected

• Inquiry data: name, email, budget range, project goal, and any optional company, website, industry, timing, or message details you provide.
• AI chat data: your messages, the assistant's replies, conversation identifiers, consent record, and basic technical records needed to operate and secure the service.
• Attribution and device data: UTM campaign parameters, intent identifier, IP address, browser, device, request time, and server logs.
• Optional analytics data: usage and advertising measurement data collected by Google and Microsoft only after you consent to optional cookies.
• Contract and billing data: business identity, contact, scope, correspondence, invoices, and payment records when an inquiry becomes a project.

Do not put passwords, payment card data, government identifiers, health information, or other sensitive personal data into an inquiry or AI chat.

3. Why the data is used

• To record and answer an inquiry, assess fit, prepare a proposal, and take steps you request before a contract.
• To provide the AI assistant after affirmative consent and preserve the conversation long enough to review quality and continue the business inquiry.
• To operate, secure, troubleshoot, prevent abuse, and document consent for the website and its forms.
• To perform a contract, communicate about delivery, issue invoices, keep accounting records, and establish or defend legal claims.
• To measure site and advertising performance through Google and Microsoft only after optional-cookie consent.

Where the GDPR applies, the corresponding bases are steps requested before a contract, contract performance, legal obligations, legitimate interests in operating and protecting the service, and consent for optional analytics or the AI chat where consent is requested. Consent can be withdrawn for future processing, but withdrawal does not make earlier lawful processing unlawful.

4. Service providers and disclosures

FastLanding uses providers only for the functions described below. They process data under their own terms and applicable data-processing arrangements:

• Vercel: website hosting, serverless execution, network delivery, and technical logs.
• Supabase: database storage for inquiries, consent records, and AI chat transcripts.
• OpenAI: generation of AI assistant replies. API requests are sent with store: false, so OpenAI API storage is disabled for that request. This does not stop FastLanding from storing its own transcript in Supabase.
• Calendly: optional scheduling, shown only after a brief is recorded and only when scheduling is configured.
• Resend and configured webhooks: inquiry notifications, routing, and operational email delivery.
• Google and Microsoft: Google Analytics, Google Ads, and Microsoft Clarity only after optional-cookie consent.
• Professional advisers and authorities: accounting, legal, security, or public authorities where needed for a contract or required by law.

Data may be processed outside the European Economic Area, including in the United States. Where required, FastLanding relies on an adequacy decision, the EU-US Data Privacy Framework for a participating recipient, Standard Contractual Clauses, or another lawful transfer mechanism.

5. Retention

• Inquiries that do not become contracts: up to 12 months after the last contact.
• AI chat transcripts and related chat consent records: up to 180 days.
• Browser chat history and UTM attribution: session storage, normally removed when the browser session ends or when you clear site data.
• Cookie preference: stored locally until you change it or clear site data.
• Contracts, invoices, accounting records, and related correspondence: for the periods required by tax, accounting, contract, and limitation laws.
• Security logs and legal-claim records: only as long as reasonably needed for security, compliance, or the relevant claim period.

Google, Microsoft, Calendly, email, and hosting providers may apply their own documented retention periods to data they control or process.

6. Cookies and browser storage

Necessary storage remembers your cookie choice, campaign attribution, inquiry intent identifier, and session chat state. Optional Google Analytics, Google Ads, and Microsoft Clarity scripts load only after you select “Accept” in the cookie banner. Selecting “Reject” does not block the inquiry form or US service content.

You can withdraw optional-cookie consent by clearing FastLanding site data in your browser. The consent banner will then appear again.

7. Your choices and rights

Depending on where you live and which law applies, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; and complain to a data-protection authority. FastLanding will verify a request before acting and may retain information that law requires or that is needed to establish or defend claims.

Send requests to kontakt@fastlanding.io. You may use an authorized agent where local law permits, subject to identity and authority verification. FastLanding does not sell personal information or use it for cross-context behavioral advertising without consent.

8. Security, children, and changes

FastLanding uses reasonable technical and organizational safeguards, but no internet service can promise absolute security. The US service is intended for business inquiries and is not directed to children under 16.

Material changes will be posted on this page with a new version and review date. A new consent may be requested when a change affects consented processing.