Privacy Policy

1. Who we are

Nuvexa Media FZ LLC is the controller for account data processed through FastFetchz. We are a Free Zone LLC registered in the Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates, trade licence number [TRADE LICENCE NUMBER — to be confirmed], registered office [REGISTERED ADDRESS — to be confirmed].

We are established in the United Arab Emirates and process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Where we offer services to customers in the United Kingdom or the European Economic Area, the UK GDPR and EU GDPR also apply to that processing, and the sections below describe your rights under all three.

Privacy enquiries: privacy@fastfetchz.com.

2. Data we collect

Full API keys are never stored. Keys are shown once at creation and retained only as a hash.

3. Request logs

For each API call we store:

• the timestamp of the request
• the key prefix used
• the service called and the target parameter you supplied
• the HTTP status, latency and credits charged

These logs exist so that billing is auditable, so you can debug integrations from the dashboard, and so we can detect abuse. Response payloads are not retained beyond short-lived caching.

4. Legal bases

We rely on the following bases under Article 6 of the UK and EU GDPR, and the corresponding grounds under the UAE Personal Data Protection Law:

5. Cookies and similar technologies

We set a session and authentication cookie that is required for signed-in access to the dashboard. Without it you cannot stay logged in.

Strictly necessary cookies of this kind do not require consent. We do not use advertising cookies and we do not share cookie data with ad networks. Any product analytics we use is limited to aggregate usage measurement.

6. Retention

7. Processors and sub-processors

The following categories of provider process data on our behalf under contract, on documented instructions only:

We do not sell personal data and we do not share it for advertising. We may disclose data where legally required, or to protect the security and integrity of the service.

8. International transfers

Transfers of personal data out of the United Arab Emirates are made under the transfer provisions of Federal Decree-Law No. 45 of 2021. The UAE Data Office has not yet published an adequacy list, so we rely on contractual clauses that apply standards equivalent to those required by that law.

Transfers of UK or EEA personal data continue to rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as applicable, together with any additional safeguards required.

9. Data you retrieve

Where data you retrieve through the API contains personal data, you act as controller for it and we act as processor. You are responsible for having a lawful basis for that processing and for honouring the rights of the people concerned. See the Acceptable Use Policy for the duties that attach to personal data, and the Terms of Service for the contractual allocation.

A data processing addendum is available on request to business customers at legal@fastfetchz.com.

10. Security

Data is encrypted in transit. Passwords and API keys are stored only as hashes, and access to production data is limited to staff who need it for support and abuse investigation.

In the event of a personal data breach we will notify affected account holders and the UAE Data Office and, where UK or EEA personal data is affected, the Information Commissioner's Office or the relevant supervisory authority, where required to do so, without undue delay.

11. Your rights

Depending on your jurisdiction you may be able to:

• request access to the account data we hold
• request correction of inaccurate data
• request export of your data in a portable format
• request restriction or deletion of your account data
• object to certain processing

To exercise a right, email privacy@fastfetchz.com from your account address. We aim to respond within thirty days.

You also have the right to complain to a supervisory authority. If you are in the United Arab Emirates, that is the UAE Data Office. If you are in the United Kingdom, it is the Information Commissioner's Office at ico.org.uk. If you are in the European Economic Area, it is the supervisory authority of your country of residence.

12. Children

The Service is not directed at anyone under 18, and we do not knowingly collect personal data about children.

13. California residents

We do not sell or share personal information as those terms are defined under the CCPA and CPRA. California residents may exercise access and deletion rights through the same contact route set out above.

14. Changes and contact

We may update this policy as the service develops. Material changes will be announced by email to the account address.

Privacy enquiries: privacy@fastfetchz.com. Nuvexa Media FZ LLC, trade licence number [TRADE LICENCE NUMBER — to be confirmed], registered office [REGISTERED ADDRESS — to be confirmed].