Privacy Policy — FixFast

1. Introduction

FixFast ("we", "us", "our") operates fixfastapp.com, a cloud-based repair shop management platform. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our services.

By using FixFast, you agree to the collection and use of information in accordance with this policy and Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

We collect data in the following categories:

Account data — Name, email address, and password of shop owners and staff accounts registered on FixFast.
Shop data — Business name, logo, and shop settings configured within your workspace.
Customer & job data — Customer names, phone numbers, device information, repair job details, and payment records entered by your shop's staff. This data belongs to you as the account holder (see Section 4).
Usage data — Pages visited, features used, browser type, device type, and IP address — collected automatically via Google Analytics.
Communication data — WhatsApp messages sent to your customers via the FixFast notification feature.

3. How We Use Your Data

To provide, operate, and maintain the FixFast platform
To process subscription payments and manage your account
To send transactional emails (account confirmations, renewal notices)
To provide customer support
To analyse usage patterns and improve the product
To comply with legal obligations under Malaysian law

We do not sell your personal data to third parties.

4. Data Ownership

You own your data. All customer records, job tickets, inventory, and financial data you enter into FixFast remain your property at all times.

As the account holder (repair shop owner), you are the data controller for the personal data of your customers. FixFast acts solely as a data processor — we store and process that data only on your behalf and under your instructions.

You are responsible for ensuring your customers are informed about how their data is used within your shop management system, in accordance with Malaysia's PDPA.

5. Third-Party Services

FixFast uses the following third-party services. Each has their own privacy policy governing their handling of data.

Cloudflare — All traffic to fixfastapp.com passes through Cloudflare for security, DDoS protection, and content delivery. Cloudflare processes connection metadata including IP addresses.
Google Analytics 4 — We use Google Analytics to understand how visitors use our public website (fixfastapp.com). Analytics data is anonymised and does not include your customer records.
Google Gemini AI — When you use the AI Data Import feature, your uploaded CSV or Excel file is sent to Google's Gemini API for column mapping. This may include customer names or inventory data from your file. By using this feature, you consent to this data transfer. We recommend removing sensitive columns before uploading.
Meta (WhatsApp) — When you enable WhatsApp notifications, messages are sent through WhatsApp's network to your customers' phone numbers. Message content and recipient phone numbers are transmitted to Meta's infrastructure.
Email delivery provider — Transactional emails (account confirmations, renewal notices) are sent via a third-party email delivery service.

6. Data Retention

Active accounts — Data is retained for the duration of your subscription.
Cancelled or expired accounts — Your data is retained for 30 days after cancellation or expiry. You may request an export of your data during this period. After 30 days, all data is permanently deleted.
Analytics data — Google Analytics data is retained per Google's standard retention settings.

7. Data Security

We take the security of your data seriously and implement the following measures:

HTTPS/TLS encryption on all pages
Cloudflare security layer protecting against common attacks
Complete database isolation — each shop's data is stored in a separate, independent database
Encrypted session management
Daily automated backups stored securely on Google Drive
Role-based access control — staff only access data their role permits

No system is 100% secure. If you discover a security vulnerability, please contact us immediately at the email below.

8. Your Rights (PDPA)

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

Right to access — Request a copy of the personal data we hold about you.
Right to correction — Request correction of inaccurate or incomplete data.
Right to withdraw consent — Withdraw consent for data processing where consent is the legal basis.
Right to request deletion — Request deletion of your personal data, subject to our legal obligations.

To exercise any of these rights, contact us at the email address in Section 12.

9. Cookies

FixFast uses the following types of cookies:

Session cookies — Required for you to stay logged in to your workspace. These are deleted when you close your browser.
Analytics cookies — Set by Google Analytics to understand how visitors use our public website. You can opt out via your browser settings or the Google Analytics Opt-out Browser Add-on.

We do not use advertising or tracking cookies.

10. Children's Privacy

FixFast is a business software platform intended for adults operating repair shops. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify active account holders via email at least 30 days before the changes take effect. The "Last updated" date at the top of this page will reflect the most recent revision.

Continued use of FixFast after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, data access requests, or to report a concern, please contact us:

Email: [email protected]
Website: fixfastapp.com

We will respond to all privacy requests within 14 business days.