Privacy Policy

FASY Solutions, operated by GMS Agency ("FASY", "we", "us"), is a software consultancy based in Trinidad and Tobago. We build custom business software, operate a client portal at fasy.app, and run a payments platform that lets our business clients accept card payments from their customers.

For anything in this policy, contact us at support@fasy.app.

• Contact and booking details. When you fill a form or book a call: your name, email, company, and what you tell us about your project.
• Account data. When we create your client account: email, name, and login credentials. Passwords are stored hashed by our authentication provider; we never see them in plain text.
• Project data. Onboarding answers, files and brand assets you upload, feedback, support messages, and progress records for your project.
• Billing data. Invoices, payment status, and payout details for platform payments. Card numbers go directly to Stripe and never touch our servers.
• Buyer data on platform payments. If you buy from a business that uses our payments platform, we process your name, email, and the transaction amount as merchant of record for that payment.
• Technical data. Server logs and IP addresses, kept for security and troubleshooting.

• To deliver the services you hired us for and operate your workspace.
• To process payments, send invoices, and meet accounting obligations.
• To send transactional email: invites, receipts, project updates, support replies.
• To keep the platform secure and investigate abuse.

AI processing. Parts of our service use AI models to draft proposals, project plans, and similar work products from the information you give us (for example, call transcripts and onboarding answers). Our AI providers process that content to provide the service to us; we do not use your data to train models.

We do not sell your personal data. We do not send marketing email without your consent.

We use essential cookies only: they keep you signed in to your account. We use Vercel Analytics and Speed Insights to measure traffic and performance; both are aggregate and cookie-free, and we do not run cross-site tracking or advertising pixels.

We share data only with the providers we need to run the service, under their own security and privacy commitments:

• Supabase (database, authentication, file storage)
• Vercel (hosting and analytics)
• Stripe (payment processing and payouts)
• Resend (transactional email)
• AI model providers (processing of project content, as described above)

We may also disclose data when the law requires it or to protect our rights, users, or the public.

We keep your data while your account or project is active. Billing records are kept as long as tax and accounting rules require. You can ask us to delete your account data at any time; we will remove what we are not legally required to keep.

You can ask us to access, correct, export, or delete your personal data, and you can object to or restrict certain processing. Email support@fasy.app and we will respond within 30 days. If you are in a jurisdiction with specific data protection rights (such as the GDPR), we honor those rights for you.

Data is encrypted in transit, access is scoped per workspace with row-level security, and secrets are stored separately from application data. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you without undue delay.

We operate from Trinidad and Tobago, and our infrastructure providers store data primarily in the United States. By using the service you understand your data is processed in those locations.

Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect data from minors.

If we make material changes, we will update the date at the top of this page and notify active clients by email. Continued use of the service after changes take effect means you accept the updated policy.