Legal

Privacy Policy

We collect minimal data, process it in the EU, and delete files automatically.

Last updated: February 2026

We collect only the minimum data necessary to process your files. We use your data solely to provide our service. We do not read, look into, or mine any data from your files.

Who We Are

Tools.FAST is a network of specialized file processing tools operated by Tools Fast Group (ABN 95 273 980 219), an Australian business. The network currently includes Convert.FAST, Compress.FAST, and PDF.FAST (coming soon).

What We Collect

Files You Upload

Files are uploaded to our EU servers solely for processing. All file processing is fully automated — there is no human interaction with your files at any stage. We do not read, analyze, or mine your file contents. Filenames are retained only during processing and redacted to extension-only when files are deleted. All files are automatically deleted 1 hour after processing, or immediately when you click delete.

Job Metadata

For billing and fraud prevention, we retain: job identifiers, operation type, file sizes, processing time, and credits consumed. We do not retain filenames, file contents, or extracted metadata (like EXIF).

Account Data

If you create an account: email address, name, and authentication provider (e.g., Google). We use this to identify your account and send transactional emails.

Usage Data

Anonymous usage patterns: pages visited, operation types used, and aggregate statistics. We use self-hosted Plausible Analytics—a privacy-first platform with no tracking cookies, no personal data collection, and no cross-site tracking.

IP Addresses

We hash IP addresses using HMAC-SHA256 before storing them. The irreversible hash is used for rate limiting and abuse prevention. We do not store raw IP addresses in job records or application logs.

Cookies

We use only essential cookies:

  • Session cookie — Maintains your login state (if signed in)
  • Anonymous session — Tracks usage limits for guests (hashed identifier, no personal data)

We do not use advertising cookies, tracking pixels, or third-party analytics that track individuals.

How We Use Your Data

The purpose of processing your uploaded files is solely to provide the service you requested. We do not use your files for AI training, analytics, profiling, or any purpose beyond the operation you requested. Specifically, we use your data to:

  • Process file operations you request
  • Calculate and debit credits from your account
  • Enforce rate limits and prevent abuse
  • Send transactional emails (account verification, password resets) and occasional product updates
  • Improve the service through aggregate analytics

Third Parties

We do not sell your data. We share minimal data with:

  • Stripe — Payment processing
  • Google OAuth — Authentication (if you choose to sign in with Google)

For the vast majority of operations — image compression, document conversion, PDF processing — all processing happens entirely on infrastructure we own. Your files never leave our servers. For AI-powered features (such as audio transcription on Convert.FAST), files are sent to vetted GDPR-compliant providers under strict Data Processing Agreements. These providers process files solely for your requested operation and delete them immediately after. See each tool's Security page for details.

Data Location

All file processing and storage occurs on servers physically located in the European Union. Your files never leave EU borders during upload, processing, storage, or download.

Data Retention

  • Uploaded files: Deleted 1 hour after processing (all tiers)
  • Job metadata: Retained for billing records and fraud prevention
  • Account data: Retained until you delete your account

Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access — Request a copy of your data
  • Rectification — Correct inaccurate data
  • Erasure — Delete your account and associated data
  • Portability — Export your job history
  • Object — Object to processing for direct marketing (you can unsubscribe from product updates anytime)
  • Restriction — Request we limit processing

To exercise any of these rights, email privacy@tools.fast. We respond within 30 days.

Security

See our Security page for details on encryption, data handling, and infrastructure security.

Children's Privacy

Tools.FAST is not intended for children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy occasionally. Significant changes will be announced via email to registered users.

Contact