Privacy Policy

1.Who we are

MyFast.ai ("MyFast.ai", "we", "us" or "our") operates myfast.ai and the product services delivered at agent.myfast.ai, aeo.myfast.ai and geo.myfast.ai. This policy covers all of them.

We serve business customers in the United States. Our support team is available 24 hours a day, 7 days a week, 365 days a year.

For any privacy question, or to exercise a right described in this policy, contact [email protected] or call 1-888-321-9863.

2.Information we collect

We collect the following categories of information.

• Account and billing information — name, business name, email address, telephone number, billing address and the plan you purchased. Card details are entered directly with our payment processor and are never stored on our systems.
• Business configuration data — the information you give us so a product can work: your services, hours, pricing, service area, booking rules, escalation contacts, website URL and the questions you want the AI agent to be able to answer.
• Call data (Smart AI Voice Agent) — the caller telephone number, the date, time and duration of the call, the transcript of the conversation, any appointment or message captured, and where enabled, the call audio recording.
• Search and visibility data (AEO Platform and GEO Platform) — the buyer prompts run against AI engines on your behalf, the raw engine responses, whether your business was Cited, Named or Not Found, your Findability Score components and the resulting reports.
• Published content data (GEO) — the articles, briefs and structured data we produce and publish under your domain, plus the performance data associated with them.
• Website and usage data — IP address, browser type and version, device type, operating system, referring URL, pages viewed, time on page and the actions you take inside a product dashboard.
• Communications — the content of emails, contact-form submissions, support tickets and phone calls with our team.

3.How we use your information

We use personal information only for the purposes below.

• To provide the service you purchased — answering your calls, booking appointments, running AI visibility searches, producing reports and publishing content.
• To configure, train and improve the accuracy of your own AI agent, using your own business data.
• To take payment, issue receipts, manage renewals and prevent payment fraud.
• To send service communications — real-time call and message notifications, report-ready alerts, billing notices and material changes to a product.
• To provide customer support and to investigate and resolve issues you report.
• To monitor security, detect abuse and maintain the availability and integrity of our platform.
• To meet legal, tax, accounting and regulatory obligations.
• To send marketing about our own products, where you have opted in or where permitted by law. Every marketing email carries a one-click unsubscribe.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We do not use your call recordings, transcripts, business data or published content to train third-party foundation models.

4.Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, to deliver the service you bought and to bill for it; legitimate interests, to secure our platform, prevent fraud, improve our products and market to existing business customers; consent, for optional cookies and for marketing where consent is required; and legal obligation, where retention or disclosure is required by law.

Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

5.Call recording and caller notice

The Smart AI Voice Agent answers inbound telephone calls placed to a number you control. In doing so it processes the personal information of your callers. For that data you are the controller and MyFast.ai is your processor: we handle caller data on your documented instructions and for no independent purpose of our own.

You are responsible for providing any notice and obtaining any consent that applicable call-recording and wiretap laws require in the jurisdictions you operate in, including all-party consent states in the United States. We provide configurable call-recording settings and an automated disclosure announcement so you can comply; enabling and wording them correctly is your obligation.

Callers who wish to exercise a privacy right in relation to a recorded call should contact the business they called. If a caller contacts us directly, we will refer them to you and assist you in responding.

6.Text messages and phone calls to you

When you give us your telephone number through the contact form on myfast.ai, during onboarding or anywhere else on our site, we use it to reach you about the enquiry, account, order or service you asked us about. Where you tick the relevant consent box, those messages and calls may be sent using automated technology, prerecorded messages or an AI-generated voice.

The two consents are separate and each is optional. Transactional consent covers communications about your account, orders and the services you requested. Marketing consent covers promotional communications such as special offers, discounts and product updates. You can give one, both or neither, and you can withdraw either at any time. We will never make marketing consent a condition of buying anything from us.

• Message frequency varies. Message and data rates may apply.
• Reply HELP to any text message for help, or STOP to opt out of that message stream at any time.
• To opt out of marketing email, use the unsubscribe link in any marketing email or write to [email protected].
• Opting out of marketing does not stop transactional messages about an active account or order. To stop those too, close your account or ask us in writing.

We do not sell, rent or share the mobile telephone numbers or SMS consent of our website visitors, leads or customers with any third party or affiliate for their own marketing or promotional purposes. Mobile numbers and consent records are shared only with the messaging and telephony providers that carry the message on our behalf, and only so the message can be delivered.

We keep a record of the consent you gave, the wording you agreed to and the date and time you agreed to it, so we can evidence it if asked. Consent records are retained for 4 years after the consent is withdrawn or the account is closed.

7.AI and automated processing

Our products use large language models and speech systems to transcribe calls, generate replies, run buyer-intent searches across AI engines and draft content. Some of this processing is carried out by third-party AI infrastructure providers acting as our subprocessors under written terms that prohibit them from using your data to train their models.

No decision producing a legal or similarly significant effect about an individual is made by these systems on a solely automated basis. The AI agent books appointments and captures messages; it escalates and transfers to a human on the rules you configure.

8.When we share information

We share personal information only with the following categories of recipient.

• Service providers and subprocessors — cloud hosting, telephony and voice carriage, AI model providers, email delivery, error monitoring, analytics and customer support tooling. Each is bound by contract to confidentiality and to process data only on our instructions.
• Payment processing — Stripe, which handles card data directly under its own privacy policy. We receive only the transaction result and a truncated card reference.
• Your own designated recipients — the staff email addresses and phone numbers you configure to receive call notifications, transcripts and reports.
• Professional advisers — lawyers, auditors and accountants, under duties of confidentiality.
• Legal and safety — where required by law, subpoena or court order, or where necessary to protect our rights, your safety or the safety of others.
• Corporate transactions — in connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply to the transferred data.

9.How long we keep it

We keep personal information only as long as we need it.

• Call transcripts and recordings — retained for the life of your account and deleted within 30 days of a written deletion request or of account closure, unless you have configured a shorter retention period.
• AEO and GEO reports and search data — retained for the life of your account so historical comparison remains possible, then deleted within 30 days of account closure.
• Account and business configuration data — retained for the life of your account, then deleted within 30 days of closure.
• Billing and tax records — retained for 7 years, as required by tax and accounting law.
• Support correspondence — retained for 24 months.
• Website analytics — retained in aggregate; identifiers are removed after 14 months.

Content published under your own domain through GEO remains yours and remains on your site after you cancel. We stop producing new content; we do not remove what has already been published unless you ask us to.

10.How we protect it

We maintain administrative, technical and physical safeguards appropriate to the sensitivity of the data we hold, including 256-bit SSL/TLS in transit, encryption at rest, role-based access control, least-privilege internal access, audit logging, and continuous monitoring on infrastructure operated to a 99.9% uptime standard.

Our platform is aligned to PCI DSS, SOC 2 Type II, ISO 27001 and HIPAA-ready controls. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and any regulator without undue delay and, where required, within 72 hours of becoming aware of it.

11.Your privacy rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to restrict or object to certain processing, to withdraw consent, and to opt out of marketing.

Residents of California have the additional rights under the CCPA and CPRA to know the categories of personal information collected, disclosed and sold or shared, to delete, to correct, to limit the use of sensitive personal information, and not to be discriminated against for exercising a right. As stated above, we do not sell or share personal information for cross-context behavioural advertising.

Residents of the EEA and the UK have the rights described in the GDPR and UK GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any right, email [email protected]. We will verify your identity and respond within 30 days, or within 45 days where the law permits an extension and we tell you why.

12.Cookies and tracking

We use strictly necessary cookies to operate the site and keep you signed in, and preference cookies to remember settings such as your theme. We use privacy-respecting analytics to understand which pages are useful. We do not run third-party advertising or retargeting pixels on myfast.ai.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will break parts of the product dashboards. We honour Global Privacy Control signals where your browser sends them.

13.International transfers

We are based in the United States and our infrastructure is hosted there. If you access our services from outside the United States, your information will be transferred to and processed in the United States.

Where we transfer personal information out of the EEA or the UK, we rely on the European Commission Standard Contractual Clauses together with the UK International Data Transfer Addendum, and we apply supplementary technical measures including encryption in transit and at rest.

14.Children

Our services are sold to businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

15.Changes to this policy

We may update this policy as our products and the law evolve. The "last updated" date at the top of this page always reflects the current version. If a change materially affects how we handle your personal information, we will notify you by email or through the product dashboard before it takes effect.

16.Contact us

Privacy questions, data-subject requests and complaints all go to the same place. We answer 24 hours a day, every day of the year.

• Email: [email protected]
• Phone: 1-888-321-9863
• Web: myfast.ai/contact