Privacy Policy

FastPay Global (“we”, “us”, or “our”) operates the FastPay Global payment platform. This Privacy Policy explains what information we collect when you use our website, merchant dashboard, APIs, hosted checkout pages and companion mobile app, how we use that information, how long we keep it, and how you can ask us to delete it.

FastPay Global provides payment infrastructure and software tools. We are not a bank and we do not present ourselves as a licensed financial institution.

• Account information: full name, email address, and authentication credentials you create, or the basic profile details returned by Google if you sign in with Google.
• Payment and transaction information: transaction amounts, currency, payment method or gateway used, payer/payee references supplied to us, transaction status, and related receipts or invoices.
• Merchant and business information: business or brand name, logo, contact details, payout or settlement details, API keys, webhook endpoints and platform configuration.
• Device information: if you pair an Android SMS parser device, we receive a device identifier, pairing metadata, and the content of payment-related SMS messages needed to verify transactions.
• Logs and security information: API request logs, IP addresses, browser and device type, timestamps, audit events and error reports used for security, fraud prevention and troubleshooting.

You can create or access a FastPay Global account using Google Sign-In. This is optional; email and password sign-in is also available.

What Google shares with us. FastPay Global requests only these Google OAuth scopes: openid, userinfo.email, and userinfo.profile — used solely to sign you in and identify your account. From these we may receive:

• your name;
• your email address;
• basic profile information returned with the sign-in response;
• a Google account identifier, which is used to link your Google login to your FastPay Global account.

If you choose to connect YouTube Super Chat, FastPay Global additionally requests youtube.readonly to read live chat messages for payment display. FastPay Global does not request any other Google scopes, and Google account data is never used for advertising or sold to third parties. We do not request Google Drive, Gmail, Calendar or Contacts access.

How we use Google user data. Only for:

• creating and authenticating your FastPay Global account;
• maintaining your account and signed-in session;
• providing account-related services you request;
• account security and fraud prevention;
• customer support, when necessary to help you.

What we never do. We do not sell Google user data. We do not use Google user data for advertising or ad personalisation. We do not use Google user data for purposes unrelated to providing and securing your account. Google user data is shared only where necessary to operate the service (for example our authentication and hosting providers), to comply with applicable law, to protect the security of our users and platform, or where otherwise permitted by applicable law and with your consent.

Merchants who use the Super Chat feature may separately connect a YouTube channel. This is a distinct, opt-in connection and is not part of signing in. It requests the read-only scope youtube.readonly and is used solely to read live Super Chat events for the connected channel so they can be shown in the merchant dashboard and stream overlay.

Access tokens for this connection are stored encrypted and are never shared with other merchants. You can disconnect the channel from the dashboard at any time, or revoke access from your Google Account permissions settings.

• Process payments, verify transactions and reconcile settlements.
• Provide, maintain, secure and improve the FastPay Global platform and APIs.
• Detect and prevent fraud, abuse and security incidents.
• Send service notifications, receipts, invoices and support responses.
• Comply with legal, regulatory and record-keeping obligations.

We share information only with service providers needed to operate the platform — cloud hosting and database providers, payment gateways and processors you choose to enable, email delivery, and analytics or error-monitoring tools. We may also disclose information where required by law, legal process, or to protect the rights, property or safety of FastPay Global, our merchants or the public. We do not sell your personal information.

Account and profile data is retained while your account is active. Transaction, invoice and audit records are retained for as long as needed to provide the service and to meet legal, tax, accounting and dispute-resolution requirements. Operational logs are retained for a limited period for security and troubleshooting, then removed or anonymised.

We use encryption in transit and at rest, encrypted storage of third-party access tokens, hashed credentials, role-based and row-level access controls, audit logging, and signed webhooks. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.

You may request access to the personal information we hold about you, ask us to correct inaccurate information, request a copy of your data, object to certain processing, or request deletion. Some information may be retained where required by law or for legitimate business purposes such as fraud prevention and financial record-keeping.

FastPay Global does not currently offer a self-service delete button in the dashboard. To delete your account and associated personal information, email privacy@fastpayglobal.com from the email address registered to your account with the subject “Account deletion request”. We will verify the request and action it within a reasonable period.

• Deleted: your account profile, Google Sign-In linkage and any Google user data received, brands and stores you created, API keys, webhook endpoints, paired devices and stored third-party access tokens.
• Retained where required: transaction, invoice and settlement records needed for legal, tax, accounting or fraud-prevention purposes, kept only for as long as those obligations apply.

You can also revoke FastPay Global’s access to your Google account at any time from your Google Account permissions settings; this stops future Google Sign-In but does not by itself delete your FastPay Global account.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the platform is used. You can manage or block cookies through your browser settings; some features may not work correctly if you do.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the platform or by email where appropriate.

For privacy questions, data requests or deletion requests, email privacy@fastpayglobal.com. For general support, email support@fastpayglobal.com. See also our Terms of Service.