This privacy policy describes how Fastscraping ("we", "us", "our") collects, uses, and protects information when you visit our website, contact us about a project, or use our services. It is written in plain English so you can actually read it.
Who we are.
Fastscraping is a managed web scraping service operated by Md Khalid Mahmud Shawon (the "Founder"), based in Sirajganj, Bangladesh. We help data teams, AI companies, and enterprises extract structured data from public web sources at scale.
This policy applies to fastscraping.com, our pricing pages, our contact form, and any direct communication you have with our team. If you also use our companion product Scrayz, a separate policy applies on scrayz.com.
We are the data controller for personal information you give us directly. When we deliver client engagements, we act as a data processor for the data your contract covers — those terms are governed by your Services Agreement.
Only what we need.
Your name, email, company, and what you're asking us to build. That's it.
The information we collect falls into three categories:
Information you give us
- Identity
- Your name and company, when you contact us or sign a contract.
- Contact
- Your email address (and phone number if you provide one).
- Project brief
- The details you share about what you want us to build — target sites, fields, volume, cadence, and any context you choose to include.
- Billing
- Company name, billing address, VAT/EIN, and the bank or card information you use to pay. Card data is held by our payment processor; we never see the full number.
Information collected automatically
- Visit data — pages viewed, referrer, country (from IP), device class. We use Plausible, which is cookieless and never tracks individuals.
- Email engagement — opens and clicks on transactional emails, used only to know if our quote actually reached you.
- Server logs — request URLs, HTTP status, timestamps. Kept for 30 days for security and debugging.
Information from third parties
If you reach us through LinkedIn, Upwork, or WhatsApp, those platforms pass us the information you've made available on them (name, profile URL, message text). We don't scrape, enrich, or buy contact data about you from anywhere else.
How we use your information.
We use information for the following purposes, and only these:
- Quoting. To respond to your contact-form note, scope the work, and send you a price.
- Service delivery. To build and run the data pipelines you've hired us to operate, including the destinations you've asked us to deliver to.
- Communications. Project updates, invoices, and the occasional once-a-quarter heads-up about new things. We do not run marketing campaigns.
- Billing. To send invoices and collect payment.
- Security & debugging. To investigate suspicious traffic, fix bugs, and keep the infrastructure healthy.
- Legal compliance. To comply with applicable laws (GDPR, CCPA, tax, accounting).
Our legal basis under GDPR is either your consent (when you write to us), performance of a contract (once we're working together), or our legitimate interest in running the business (security, accounting).
How long we keep things.
- Contact-form notes
- 24 months after last activity. Then deleted.
- Active client data
- For the duration of the engagement and 12 months after, for support continuity.
- Invoices & tax records
- 7 years, as required by Bangladeshi and applicable EU tax law.
- Server logs
- 30 days.
- Email analytics
- 12 months.
You can request earlier deletion at any time — see section 07.
Your rights under GDPR & CCPA.
You have the right to:
- Access — get a copy of the personal information we hold about you.
- Rectification — correct any inaccurate information.
- Erasure — ask us to delete your data (the "right to be forgotten"), subject to legal retention obligations.
- Restriction — limit how we process your data.
- Portability — receive your data in a portable, machine-readable format.
- Object — object to processing based on our legitimate interest.
- Withdraw consent — at any time, without affecting prior lawful processing.
- Lodge a complaint — with your local data protection authority.
To exercise any of these rights, email khalid@fastscraping.com. We respond within 30 days, and usually much sooner.
How we protect your data.
We take security seriously because our clients depend on us operating quietly and invisibly. Our security posture includes:
- TLS 1.3 for all data in transit, end-to-end.
- Encryption at rest for backups, briefs, and any client data we hold.
- Principle-of-least-privilege access — only the engineers who need a given dataset have access to it.
- Multi-factor authentication on every operational account.
- Quarterly access reviews and key rotation.
- Incident response within 72 hours, with notification to affected clients.
No system is perfectly secure. If you discover a vulnerability, email khalid@fastscraping.com and we'll respond within 24 hours.
Where your data lives.
Our infrastructure runs primarily in the EU (Frankfurt) and the US (Virginia and Oregon). Bangladesh is where the team is based, so a copy of metadata may transit through there for operational purposes.
For data subject to GDPR, transfers outside the EU are covered by Standard Contractual Clauses (SCCs) and supplementary measures as required by the EDPB. You can request a copy of our SCCs at any time.
Children's privacy.
Our services are intended for businesses and adult professionals. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with personal information, please email us and we will delete it immediately.
Changes to this policy.
We may update this policy occasionally — to reflect new services, new regulations, or new things we've learned. When we make material changes, we'll update the "Last updated" date at the top and, for changes that materially affect your rights, send an email to active clients at least 30 days before the change takes effect.
The current version is the only one that applies. Previous versions are archived; ask us if you'd like a copy.
Talk to us.
For any privacy-related question or request, contact:
- khalid@fastscraping.com — replies within 24 hours
- +880 1788 791 134
- Fastscraping · Sirajganj, Rajshahi · Bangladesh
EU residents may also contact their local data protection authority directly. UK residents can contact the Information Commissioner's Office (ICO).
Privacy isn't a checkbox — it's a conversation.
If anything in this policy isn't clear, or you want a deeper conversation about how we handle a specific dataset, Khalid will answer personally.