FastQAPrivacy
Last updated 5 September 2026.
This explains what FastQA collects, why, where it is kept, who else touches it and for how long. It describes what the product actually does. If anything here stops being true, this page changes.
Who is responsible
Trustinqa, Lda is the data controller.
Rua das Lamas 26, 1.º Esquerdo
3080-037 Figueira da Foz
Portugal
Privacy and data requests: [email protected]
FastQA is the product; Trustinqa, Lda is the company that operates it. That is why our email
reaches you from trustinqa.com.
What we collect
Your account
Your name, your email address, a hash of your password (never the password itself), and which team you belong to. If somebody invites you, we store the invitation and the address it was sent to.
What you set up
The domains and page addresses you ask us to watch, the checks you write, how often they run, and where alerts should go — an email address, or a webhook address you provide. If you store credentials so a check can sign in to your own site, they are encrypted before they are written down and are only ever used to fetch the address you bound them to. A form you choose to save as a draft is kept as you filled it in, so you can carry on from another browser — minus any password, which is dropped before it is written down; when you come back the form says so, and a new page asks you to type it before you submit. A draft belongs to the team you were working in: anyone on that team can open, change or discard it, and the team's list of drafts shows who last saved each one.
What the checks produce
The result of every check: pass or fail, when it ran, the HTTP status, how long the request took, and — when a check fails — the reason, which can include a short excerpt of the page that was fetched. Incidents are recorded when checks fail repeatedly.
Billing
Payments are handled by Stripe. Card details are given to Stripe and never reach us; we store the customer and subscription references Stripe gives back, so we know which plan you are on.
People who subscribe to a status page
If you publish a status page and somebody subscribes to it, we store their email address and whether they confirmed it. Confirmation is required before anything is sent to them, and every message carries a link to stop.
Server logs
Ordinary web-server records — request paths, timestamps, error messages — kept so we can tell what broke.
Why we are allowed to hold it
- To provide the service you asked for — your account, your checks and their results. Without them there is no product.
- Our legitimate interest in keeping the service working and unabused: server logs, rate limits and security records.
- Consent, for status-page subscriptions. Nobody is added without confirming from their own inbox, and consent can be withdrawn from any message.
- A legal obligation, for invoices and tax records.
Where it is stored
FastQA is operated by Trustinqa, Lda in Portugal. Your account, your checks and their results are stored on servers we run ourselves in Portugal — we do not host them with a third-party cloud provider.
Who else touches it
Three companies process data on our behalf. They are the only ones.
| Who | What for | What reaches them |
|---|---|---|
| Cloudflare | The network in front of the site — DNS and the connection between you and us | Traffic, including your IP address. Processed on Cloudflare's global network, which is outside the EEA. |
| Hostinger | Sending our email | The address a message is sent to and its contents. |
| Stripe | Payments | Your billing details, given directly to Stripe. Stripe is in the United States. |
Where these involve moving data outside the European Economic Area, that transfer rests on the European Commission's Standard Contractual Clauses.
We do not sell your data, and we do not share it with anyone for advertising.
How long it is kept
| What | How long |
|---|---|
| Check results and incident history | On the Free plan, 30 days. On Pro, kept until the monitor or the account is deleted. |
| Your account and what you set up | Until you ask us to delete it. Write to [email protected] and we will action it within one month. |
| Status-page subscribers | Until they unsubscribe or the page is deleted. |
| Forms you save as drafts | 30 days from the last time you saved them, on every plan, or until you discard them or submit the form. |
| Backups | 14 days, encrypted, then destroyed. |
| Invoices and tax records | As long as Portuguese law requires. |
Cookies
FastQA sets no advertising or analytics cookies, and there are no third-party trackers on this site. The only cookies are the ones the product cannot work without:
tiu_session— keeps you signed in.tiu_team— remembers which of your teams you are looking at.sp_…andrp_…— remember that you entered the password for a particular protected status page or run page.
Because all of them are strictly necessary to do what you asked, none of them needs your consent, which is why this site has no cookie banner.
How it is protected
- Traffic is encrypted in transit.
- Passwords are stored as hashes and are never recoverable, by us or anyone else.
- Credentials you store for a check are encrypted before they are written down.
- A form saved as a draft never holds a password: it is dropped before the draft is written, in your browser and again on our side.
- Backups are encrypted, and we restore one on a schedule to prove they can be restored.
No system is perfectly safe, and we would rather say so than imply otherwise. If a breach puts your rights at risk we will tell you and the supervisory authority, as the law requires.
Your rights
Under the GDPR you may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask for it in a portable form, or object to particular processing. Write to [email protected] and we will answer within one month.
If you think we have handled your data badly you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
Data you bring with you
FastQA fetches the addresses you point it at, and records what it finds. If those pages contain other people's personal data, you remain the controller of it and we process it on your behalf under these terms. Please do not point checks at pages holding personal data you have no right to process, and remember that a failing check may record a short excerpt of the page it fetched.
Children
FastQA is a tool for people running websites and is not directed at children.
Changes
If this changes we will update the date at the top, and tell account holders by email when the change is one that matters.