DoFast ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our commercial management platform (the "Service").
1. Information We Collect
We collect information you provide directly to us when you create an account, use the Service, or communicate with us. This includes:- Account Information: Name, email address, phone number, and business details.- Business Data: Products, orders, client information, financial records, and other data you input into the platform.- Usage Data: Information about how you interact with the Service, including access times, pages viewed, and features used.- Device Information: IP address, browser type, operating system, and device identifiers.- Device contacts (optional): If you use "Import from Contacts" when creating a client in the app, we read the name, phone number and email of the single contact you pick, to pre-fill the form. No other contact in your address book is read, and denying the permission does not affect the rest of the app.
2. How We Use Your Information
We use the information we collect to:• Provide, maintain, and improve the Service.• Process transactions and send related information.• Send you technical notices, updates, and support messages.• Respond to your comments, questions, and customer service requests.• Monitor and analyze trends, usage, and activities in connection with the Service.• Detect, investigate, and prevent fraudulent transactions and other illegal activities.
3. Data Isolation and Multi-Tenancy
DoFast uses a multi-tenant architecture with complete data isolation. Each business account (tenant) has its data completely separated from other tenants. No tenant can access another tenant's data under any circumstances.
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following situations:- With your consent: When you explicitly authorize sharing.- Service providers: With trusted third parties who assist us in operating the Service (hosting, email delivery, payment processing).- Legal obligations: When required by law, regulation, or legal process.- Business transfers: In connection with a merger, acquisition, or sale of assets.
5. Artificial Intelligence Features
DoFast offers optional artificial intelligence features — product description generation, tax classification (NCM) suggestions, nutritional tables and labels. They work as follows:- They are optional and off by default: No data is sent to an AI provider until you configure the feature. Without that configuration, the generation screens refuse the operation and report that AI is not configured.- The provider account is yours: To use the features you enter, in settings, your own credential for the AI provider (today, OpenAI). We store it encrypted and use it solely to run the generations you request. The provider's processing of that data is governed by the contract between you and them, including retention periods and any use for model training, which you should verify in the provider's terms. You may remove the credential at any time, which disables the features immediately.- What is sent: Only what the requested generation needs — the product's name, description and registered category; and, for labels and nutritional tables, the identification details of your company that labelling law requires to appear on the label (name, tax ID, phone, address, city, state, postcode and, when filled in, website and social profile).- What is not sent: The AI features do not send your customers' data, orders, tabs, amounts received, financial information or fiscal documents. The transmission is limited to the product you asked about and, for labels, your company's identification.- The decision stays yours: The output is a suggestion presented for your review. Nothing is published, written to your catalogue or sent to third parties unless you confirm it. Tax classification suggestions do not replace your accountant's advice.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, secure authentication, regular security audits, and automated backups. However, no method of transmission over the Internet is 100% secure.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.
8. Your Rights
You have the right to:• Access, correct, or delete your personal data.• Export your data in a standard format.• Withdraw consent at any time.• Lodge a complaint with a data protection authority.To exercise these rights, contact us at privacy@dofast.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.