Roles
Extract.FAST is operated by Tools Fast Group (ABN 95 273 980 219). For the content of the files you upload, you are the controller and Tools Fast Group acts as a processor or service provider, handling them only to run the extraction you requested. For account, billing, fraud, security, and operational records, Tools Fast Group acts as a controller where applicable.
What we process
We process only what is needed to run the service.
| Category | Examples |
|---|---|
| Uploaded files and outputs | The files you upload and the extracted results we produce |
| Transcript and meeting artifacts | Transcripts, speaker separation, and analysis when you request those features |
| GPS coordinate values | Coordinates used to render GPS map reports from image metadata |
| Job metadata | Job type, file size and count, timing, credits used, and status |
| Account data | Email, sign-in identifiers, name, profile picture URL if provided by Google sign-in, organization, plan, entitlement, and billing state |
| Payment data | Handled by Stripe; we do not store full card details |
| Logs and telemetry | Error diagnostics, abuse-prevention data, and irreversible IP hashes |
Why we process it
We process your data to run the extraction you requested, deliver your downloads, enforce limits and prevent abuse, handle billing, credits, refunds, and support, and to keep the service secure, diagnose problems, and meet legal obligations. We do not use your files for advertising, profiling, or AI training.
Where processing happens
Most standard extraction, storage, and downloads run on EU servers operated by Tools Fast Group in Germany. Some optional features use additional providers for a narrow part of the job — for example transcription, speaker separation, GPS maps, payments, or sign-in. The Subprocessors page lists who may receive data and when.
Retention
Your uploaded files and the outputs we produce are automatically deleted about an hour after your extraction finishes, with no backups. Job, account, billing, usage, security, support, and accounting records may be retained longer where we need them. We do not claim that all data is deleted after an hour — only your files and outputs are.
Subprocessors
When you use optional features, specific external providers may process data on our behalf. The Subprocessors page lists each provider, what it is used for, what data it processes, and when it applies.
Security controls
Files are transferred over encrypted connections and stored encrypted while we process them. Access is restricted, secrets are held in a managed key vault, error diagnostics run with sensitive data scrubbed, and IP addresses are stored only as irreversible hashes. See the Security page for more detail.
DPA availability
A Data Processing Addendum is available on request for paid and business customers — email [email protected]. A DPA is a separate signed contract; this page does not create one, and we do not imply an executed DPA exists for every anonymous or guest job.
Privacy rights and contact
You can request access to, deletion of, or export of your personal data, and object to certain processing, by emailing [email protected]. Where it applies, you also have the right to lodge a complaint with a supervisory authority. We respond within 30 days.
Frequently Asked Questions
Is this a signed Data Processing Addendum?
No. This page describes how we process data. A Data Processing Addendum (DPA) is a separate contract — see the DPA availability section below.
Can I request a DPA?
Yes. Paid and business customers can request a Data Processing Addendum by emailing [email protected]. We do not imply that a signed DPA already exists for every anonymous or guest job.
Do files and account records have the same retention period?
No. Your uploaded files and outputs auto-delete about an hour after your extraction finishes. Account, billing, usage, security, and support records are kept longer where we need them — for billing, accounting, and abuse prevention.