Legal
Privacy Policy
Effective date: September 13, 2026
1. Introduction
FastInspector, Inc. ("FastInspector", "we", "our", or "us") operates a marketplace on which real-estate agents book property inspections from independent inspection companies, and those companies dispatch their inspectors and deliver reports. Because of what the Service does, it handles data about properties, about the people arranging and carrying out inspections, and about the buyers those inspections are for.
This policy explains what we collect, why, who it is shared with, how long we keep it, and the rights you have over it. Using the Service means this policy applies to you. If you do not agree with it, please do not use the Service.
2. Data we collect
Account and identity
Name, email address, the role you sign up as (agent, company owner, or inspector), a profile photo if you add one, and your sign-in method. Authentication is handled by Clerk; we never see your password. Company accounts also carry the company’s name, contact details, service areas and pricing, and the inspectors it employs.
Properties, bookings and appointments
The property addresses you enter and their map coordinates, the inspection types you book, appointment dates, the buyer’s contingency deadline, the buyer’s name and email if you choose to share a booking with them, and the status history of each appointment (accepted, en route, completed, report delivered, and so on).
Payment data
Amount, currency, provider, timestamps, the platform fee applied, and the payout to the company. We never receive or store card numbers. Cards are entered directly into Stripe or Flutterwave. Companies connect a payout account with Stripe or provide a bank account to Flutterwave; those providers hold the account details and we hold an identifier.
Inspection reports and media
Findings, severity, descriptions, photos and PDFs uploaded by the inspector, and the repair requests an agent builds from them. Photos are uploaded to Cloudinary when they are taken, before the report is submitted; see Retention for what happens to photos from a report that is never delivered.
Credentials and verification
Licence and certification details that companies submit for verification (issuer, number, expiry, supporting documents), and the outcome of our review.
Agreements and signatures
When an agent signs a company’s pre-inspection agreement we record the signer’s name, the time, and the version of the agreement signed. On the mobile app the signature step may ask for your device’s biometric confirmation; see section 9 — the biometric itself never leaves your device.
Device and notification data
Push notification tokens for the devices you sign in on, your theme preference, and, on the mobile app, draft report data stored on the device while a report is in progress.
Messages, feedback and ratings
Messages sent between an agent and a company about an appointment, the ratings and reviews agents leave, and product feedback you submit to us (which only you and our staff can see).
Usage and log data
IP address, browser or app version, the requests you make to the API and when, and error reports. We use these to operate and secure the Service. We do not run analytics or advertising trackers.
Location
We do not track your device’s location. The only location data we hold is the property addresses and service-area boundaries you enter. When you type an address we send it to OpenStreetMap’s Nominatim service for suggestions, which reveals your IP address to that service.
3. How we use your data
- To operate the marketplace: matching your booking to companies whose service area covers the property, dispatching inspectors, delivering reports, and keeping every party informed of an appointment’s status.
- To take payment for an inspection, hold it until the report is delivered, pay the company, and refund or reverse a charge when the rules in our Terms say so.
- To send transactional notifications — push, in-app and email — about bookings, reports, deadlines and payments. You can turn push notifications off on your device; in-app messages about your own appointments cannot be switched off while you use the Service.
- To verify company credentials and display a verified badge.
- To detect and prevent fraud, abuse and security incidents, and to enforce our Terms.
- To provide support and respond to your requests.
- To comply with legal obligations, including tax and financial record-keeping.
- To tell you about changes to the Service or these policies. We do not send marketing email today; if we start, you will be able to opt out from every message.
4. Legal bases for processing (GDPR / UK GDPR)
If you are in the European Economic Area or the United Kingdom, we process your personal data on these bases:
- Performance of a contract — everything needed to provide the Service you signed up for, including payments and payouts (Art. 6(1)(b)).
- Legitimate interests — security, fraud prevention, keeping records of disputes, and improving the Service, where these are not overridden by your rights (Art. 6(1)(f)).
- Legal obligation — financial and tax records, responding to lawful requests (Art. 6(1)(c)).
- Consent — optional features such as sharing a booking with a buyer, or any marketing email we might introduce. You can withdraw consent at any time.
6. Data retention
- Accounts — for as long as your account exists, and up to 30 days after a deletion request while we complete it.
- Payment and payout records — seven years, as financial records we are required to keep.
- Delivered inspection reports and their media — as long as the appointment they belong to, because they are the record of what was inspected and what a payment was for. A report stays part of that record even if the payment is later refunded or disputed.
- Photos uploaded but never delivered — a report started and abandoned leaves photos in Cloudinary; we remove any that have been unreferenced for 30 days, and immediately when an inspector discards a draft or signs out.
- Buyer share links — until they expire or you revoke them.
- Push tokens — until you sign out on that device or the platform tells us the token is dead.
- Logs — for the short period needed to operate and secure the Service, longer only where needed to investigate an incident.
7. Security
All traffic is encrypted in transit. Authentication and sessions are managed by Clerk; on the mobile app, session tokens live in the device keychain, never in plain storage. Access to data inside the Service is enforced per role at the API — an agent cannot read another agent’s bookings, a company only sees requests in its own queue. Card data goes straight to the payment provider and never reaches our servers. Uploads to Cloudinary are write-only from the app; deletion requires server credentials the app does not hold.
No system is perfectly secure. If we become aware of a breach affecting your data we will notify you and the relevant authorities as the law requires.
8. Your rights
Everyone
Wherever you are, you can ask us for a copy of your personal data, to correct it, or to delete your account, by writing to privacy@fastinspector.com from the email address on the account. Account deletion is described at /account-deletion, including what we must keep (payment records, and reports that other parties relied on).
EU and UK (GDPR / UK GDPR)
- Access — a copy of the personal data we hold about you (Art. 15).
- Rectification — correction of inaccurate data (Art. 16).
- Erasure — deletion where the data is no longer necessary (Art. 17).
- Restriction — limiting processing in certain circumstances (Art. 18).
- Portability — your data in a machine-readable format (Art. 20).
- Objection — to processing based on legitimate interests (Art. 21).
- Complaint — with your supervisory authority (the ICO in the UK, or the authority in your EEA country).
California (CCPA / CPRA)
California residents may ask what personal information we collect, use and disclose; ask us to delete it (subject to the exceptions above); opt out of its sale or sharing — we do neither; and not be discriminated against for exercising these rights. Email privacy@fastinspector.com with “CCPA Request” in the subject; we respond within 45 days.
Nigeria (NDPA 2023 / NDPR)
Nigerian users have the rights to access, rectification, erasure, restriction, portability and objection described above, and to lodge a complaint with the Nigeria Data Protection Commission. Payments in naira are processed by Flutterwave under its own registration with the Commission.
9. Biometric confirmation
On the mobile app, signing a pre-inspection agreement can ask for Face ID, Touch ID or your device’s fingerprint or face unlock. This is your device confirming it is you; the biometric data is handled entirely by iOS or Android and is never sent to, or stored by,FastInspector. We record only that the step succeeded. On the web there is no biometric step — the signature record is the same.
11. International data transfers
FastInspector is operated from the United States and serves users in the US, the UK, the EU and Nigeria. Data may be processed in the countries listed in section 5. For transfers out of the EEA or UK we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) with our providers, or on an adequacy decision where one exists. For transfers out of Nigeria we comply with the NDPA’s cross-border transfer requirements.
12. Children
The Service is for real-estate professionals, inspection businesses and their clients. It is not directed to anyone under 18, and we do not knowingly collect data from them. If you believe a minor has provided us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. For material changes we will notify you in the app or by email before they take effect, and the effective date above will change. Continued use after that date means the updated policy applies.
14. Contact
Privacy questions and requests: privacy@fastinspector.com.
FastInspector, Inc., [registered address — set before launch]