Privacy Policy

1. Who We Are

MyFastFoward (“we,” “us,” “our”) operates the website at myfastfoward.com. For GDPR purposes, we are the data controller. Contact us at: privacy@myfastfoward.com.

2. Data We Collect

• Assessment responses: Your answers to the Big Five, Holland Code, and custom assessment questions.
• Professional documents: Resumes, LinkedIn profiles, or other documents you optionally upload. Raw text is deleted after 90 days; a structured summary derived from these documents may be retained to personalize your reports.
• Account data: Email address, authentication credentials (passwords are hashed; we never store them in plaintext).
• Payment data: Payment is processed by Lemon Squeezy (our merchant of record). We do not store card details.
• Analytics: Anonymized usage data via PostHog, subject to your cookie consent.
• Error logs: Technical error data via Sentry (PII is scrubbed before transmission).

3. How We Use Your Data

• To provide AI-generated income reports personalized to your assessment results
• To manage your account and community subscription
• To send transactional emails (reports ready, payment confirmation)
• To operate our referral program
• To comply with legal obligations

Legal basis (GDPR Article 6): Contract performance (reports, account); legitimate interest (fraud prevention, security); consent (analytics cookies).

4. AI Processing

Assessment responses and (if uploaded) document text are sent to Anthropic, Inc. to generate your reports. By using our service, you consent to this processing. Anthropic does not use your data to train models when accessed via API. See Anthropic's Privacy Policy.

5. Data Processors (Sub-processors)

• Supabase: Database and file storage (AWS us-east-1)
• Anthropic: AI report generation
• Lemon Squeezy: Payment processing (merchant of record)
• Circle.so: Community platform
• Resend: Transactional email
• PostHog: Product analytics (consent-gated)
• Sentry: Error monitoring (PII scrubbed)
• Vercel: Hosting and edge network

6. International Transfers (GDPR)

Some processors are based in the United States. Where required, transfers are governed by Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46(2)(c) GDPR. By using our service, you acknowledge that your data may be transferred to and processed in the United States under these safeguards.

7. Data Retention

• Assessment data and reports: Retained for the life of your account.
• Raw uploaded documents: Automatically deleted after 90 days.
• Derived document summaries: Retained to keep your reports personalized; deleted when your account is deleted.
• Account data: Deleted within 30 days of account deletion.
• Billing records: Retained for 7 years for tax compliance.

8. Your Rights

Under GDPR and CCPA, you have the right to:

• Access a copy of your personal data (via Account → Download My Data)
• Correct inaccurate data
• Delete your account and data (via Account → Request Deletion)
• Withdraw consent for analytics at any time (via cookie preferences)
• Lodge a complaint with your local supervisory authority

To exercise your rights, email privacy@myfastfoward.com.

9. Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) are used only with your consent. You can change your preferences at any time by clearing your cookies or visiting our cookie settings.

10. Contact

Questions about this policy? Email privacy@myfastfoward.com or visit our contact page.