Last updated: 2026-05-11
What this site collects
This website does not set marketing cookies, run advertising trackers, fingerprint visitors, or share data with ad networks. The only data we receive about you on this site is what your browser sends in a normal HTTP request (IP, user-agent, referrer), which our web server logs for operational purposes (rate-limiting, abuse, debugging) and rotates within 30 days.
Product analytics
We use PostHog (US Cloud) as a sub-processor to record aggregate usage signals: page views, anonymised click events on CTAs, and structural events on the contact form, calculator, and blog (which post you read, never the contents you typed). Form input values are masked client-side; we never send raw email, name, company, or message text as analytics properties — only sanitised buckets (e.g. spend bracket, services count). Session recording is disabled. PostHog respects your Do Not Track setting; appending ?no-track to any URL also opts you out for the session.
When you submit the contact form, we link your subsequent product-analytics events to a SHA-256 hash of your email so we can measure end-to-end conversion (e.g. did the calculator visit lead to a contact?). We do not send your raw email to PostHog as an analytics property — the hash is one-way and is used only to stitch sessions across visits. The hash also drives a company-domain group in PostHog (everything left of the @ is discarded) so we can see, for example, that two engineers from the same company visited, without identifying either of them.
The contact form
When you submit the form on /contact, the contents are sent to our internal inbox and to a private record we keep for the engagement lifecycle. We use this only to reply to you and, if we work together, to scope the engagement. We do not sync this data to a CRM, marketing tool, or any third-party service. To delete your record, send a request via /contact; we will confirm deletion within 14 days.
When you email any @fastpriors.com address, your email is processed by our mail provider for delivery, then stored in our inbox. We do not run automated marketing sequences, drip campaigns, or newsletter blasts.
Data we touch during engagements
During paid engagements we may have access to your traffic samples, model weights, evaluation datasets, traces, and infrastructure credentials. The terms governing that access, including retention, deletion, and confidentiality, are set in the engagement contract you sign with us, not in this policy. By default, we do not copy client data outside of the client's VPC, we do not train models on client data, and we delete temporary local copies on engagement close. See /security for the operational specifics.
Your rights
If you are in the EU, UK, California, or another jurisdiction with a comprehensive data protection law, you have the right to request access to, correction of, or deletion of personal data we hold about you. Submit your request via /contact. We do not sell personal data and do not engage in cross-context behavioural advertising.
Children
This site is not directed at children under 16 and we do not knowingly collect their data.
Changes
If this policy changes, the "last updated" date will reflect it. Material changes will be flagged on the home page for at least 30 days.
Contact
Privacy questions: please use /contact.