Privacy Policy

FastLab ("we", "us") runs the chat app at fastlab.app, the API at api.fastlab.app and the services behind them. This policy explains what information we handle when you use them and what you can do about it.

Questions or requests about your information: [email protected].

• Account details. Your name and email address. If you set a password we store only a one-way hash of it, never the password itself.
• Sign in with Google. If you use it, Google tells us your name, email address and Google account ID. We don't receive your Google password and we don't ask for access to anything else in your Google account.
• What you send to the models. Your messages, the text we extract from files you attach, images you add and prompts for image generation. We process them to produce a reply. The chat service doesn't keep them after answering, except as described under Memory and Shared links below.
• Memory. With Memory on (the default for accounts), FastLab saves short notes about you that it learns from your chats, such as your preferences, on our servers and uses them to personalise later replies. It is built to leave out passwords and card numbers. You can see, edit and delete these notes, stop learning, or turn Memory off in Settings → Memory.
• Shared links. When you share a chat, a copy of it (messages, images and the display name you enter) is stored on our server, and anyone with the link can read it until you delete the link in Settings → Shared links.
• Documents sent to the API. Files and text sent to the API's document and summary endpoints are stored so they can be processed. Originals and their extracted text are deleted after 30 days by default; summaries are kept until they are deleted.
• Security and technical data. Your IP address, the times you sign in and register, session records, and request logs (time, address, result and which account or key made the request). We use them to keep accounts safe, limit abuse and fix problems.

This section applies when you choose Sign in with Google, or connect Google to your account in Settings.

• What we access. We ask Google only for the openid, email and profile permissions. With them, Google gives us your Google account ID, your email address (and whether Google has verified it) and your name. We don't keep your profile photo, we never receive your Google password, and we have no access to your Gmail, Drive, Calendar, contacts or any other Google data.
• How we use it. Only to create your FastLab account, sign you in and show who is signed in. Your name and email become the name and email of your FastLab account, and your Google account ID connects the two accounts. We don't use Google user data for advertising, profiling or training AI models, or for any purpose unrelated to signing you in.
• How we store it. In your account record on servers we operate, protected as described under Security. Only the systems that sign you in use it.
• Sharing. We don't sell, rent or share Google user data with anyone, except where the law requires it.
• Keeping and deleting it. We keep it while your account exists. Disconnecting Google in Settings → Account deletes the link to your Google account; deleting your FastLab account (write to [email protected]) deletes all of it. You can also remove FastLab's access at any time at myaccount.google.com/connections.

FastLab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your chat history, attached files and generated images are kept in your browser's storage, not on our servers. Each account gets its own storage, so people who share a browser don't see each other's chats. Your preferences (theme, model, custom instructions) are kept in your browser too.

Because they live on your device, we can't recover them for you. Clearing your browser's data, or Settings → Delete all chats, removes them. Settings → Export all chats saves a copy.

We use only what the service needs to work:

• Session cookie. Keeps you signed in. It is encrypted, can't be read by scripts on the page, and lasts 30 days, or until you close the browser if you don't ask to stay signed in.
• Google sign-in cookie. A temporary cookie that protects a Google sign-in while it is in progress. It is deleted when you return, and expires after 10 minutes in any case.
• Browser storage. For your chats and preferences, as described above.

We don't use advertising or analytics cookies, and we don't load trackers or third-party scripts. Cloudflare, which delivers our site, may set strictly necessary security cookies.

• To run the service: sign you in, answer your messages, generate images, search the web when you ask.
• To personalise replies with Memory, when it is on.
• To protect accounts and the service: rate limits, detecting abuse, investigating problems.
• To reply when you contact us, and to meet legal obligations.

• We don't send your chats to outside AI companies: the models run on computers we operate.
• We don't use your chats, files or memories to train AI models.
• We don't sell your information, and we don't show ads.

• Cloudflare. Delivers our site and API over encrypted connections, so it handles the traffic between you and us, including your IP address.
• Google. Only if you use Sign in with Google, which lets Google know you signed in to FastLab.
• Web search. When you turn on Search, a search query based on your message is sent from our server to a third-party search service, and our server fetches the pages it finds. These requests come from our server, not your device.
• People you choose. Anyone who has a link to a chat you shared.
• Your organisation. If your organisation's FastLab administrator created your account, they can manage it (for example suspend it or reset its password) and see documents and summaries in your organisation's workspace.
• When the law requires it. Or to protect the rights, property or safety of our users, the public or us.

If FastLab is ever transferred to a new operator, this policy will continue to apply to your information.

• Your account. Until you or an administrator deletes it.
• Sessions. They end after 30 days (12 hours if you don't stay signed in), or when you sign out.
• Memories. Until you delete them, turn them off and clear them, or your account is deleted.
• Shared links. Until you delete them. Deleting your account doesn't remove them, so delete them first, or ask us.
• API documents. 30 days for originals and extracted text by default; summaries until deleted.
• Security records. For as long as we need them to protect accounts and the service.

• Manage Memory, shared links, your password and Sign in with Google in Settings.
• Export or delete the chats kept in your browser, in Settings.
• Ask us for a copy of the information we hold about you, to correct it, or to delete your account: write to [email protected] from the email address on your account.

Depending on where you live, you may have further rights, such as to object to or restrict how we use your information, or to complain to your data protection authority. We will answer requests within the time the law requires.

Connections are encrypted, passwords are stored only as strong one-way hashes, session cookies are encrypted and out of reach of page scripts, and sign-in attempts are rate-limited. No system is perfectly secure, so use a password you don't use anywhere else, and tell us at [email protected] if you think your account has been misused.

FastLab is not meant for children under 13, or under the minimum age for online services where they live. If you believe a child has given us their information, contact us and we will delete it.

We process information on servers we operate, and Cloudflare carries traffic through its worldwide network. Your information may therefore be handled in countries other than yours.

We will update this page when our practices change, and change the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Write to [email protected] about anything in this policy. The Terms & Conditions cover the rules for using FastLab.