Privacy policy

Last updated 2026-09-13

This page explains what data CloseFast collects, why, who helps us process it, how long we keep it, and what you can ask us to do with it. It covers the website closefa.st, the CloseFast app, and the free ads checker.

Who is responsible

CloseFast is run by Laszlo Nemeth, a sole trader, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, use the contact page or email hello@closefa.st.

When you visit the website

Server logs

Like every website, our server records technical request data: IP address, the page requested, time, browser and referring page. We use it to keep the site running and secure (legitimate interest, Art. 6(1)(f) GDPR). Logs are rotated and deleted automatically, typically within 14 days.

Analytics (PostHog, EU)

We count visits with PostHog, hosted in the EU. Unless you accept cookies, it runs without cookies or local storage: we see pages viewed, the referring site, campaign tags in the link (such as utm_source), device and browser type, and an approximate location derived from your IP address. This tells us which pages and campaigns work (legitimate interest). If you accept cookies, PostHog also stores an identifier so a return visit counts as the same visitor (consent, Art. 6(1)(a)).

Ad measurement (Meta), only if you accept

If you click Accept on the cookie banner, we load the Meta Pixel and send Meta the actions that tell us whether our ads work: page views, viewing an ads-checker result, unlocking a result with your email, clicking a sign-up button, creating an account, starting checkout and paying for a plan. Account, checkout and payment events are sent from our server (Meta’s Conversions API) and include your IP address, browser, Meta’s browser and click identifiers, and a one-way hash of your email address and account ID. The legal basis is your consent (Art. 6(1)(a)). If you decline or don’t choose, nothing is loaded and nothing is sent to Meta. Meta Platforms Ireland Ltd. is jointly responsible with us for collecting this data; what Meta does with it afterwards is covered by Meta’s privacy policy.

Cookies

Stripe sets its own cookies on its checkout pages to process payments and prevent fraud. You can change your choice here at any time:

When you create an account

We store your email address, your password (only as a secure hash, via Supabase Auth), your agency profile (website, services, case studies, tone and anything you paste or upload), your searches, lead lists and generated pitches, your plan, and your cookie choice at sign-up. We need this to provide the service you signed up for (contract, Art. 6(1)(b)). Your agency profile and the public business details of your leads are sent to our AI provider (Anthropic) to write the pitches. They are not used to train its models.

Payments

Paid plans are handled by Stripe. You enter your card details directly with Stripe; we never see or store them. We keep your Stripe customer ID, plan and subscription status. Invoices and payment records are kept for as long as tax and accounting law requires (legal obligation, Art. 6(1)(c)).

Emails

We send account emails (confirmation, password reset) and, where relevant, billing emails. These are part of the service, not marketing.

The free ads checker

When you check a company, we store the domain or business name you entered and the result, so the next person asking gets it faster. To prevent abuse we record a salted hash of your IP address (not the address itself), which cannot be turned back into your IP. If you unlock the full result with your email, we store your email address, the exact consent wording you saw, and when you agreed, so we can send you the result and occasional CloseFast product updates (consent, Art. 6(1)(a)). You can withdraw at any time by contacting us, and we’ll delete your address from the list.

When you contact us

Messages from the contact form are delivered to our inbox by email (via Resend) and are not stored in our database. We keep them only as long as we need to handle your request.

If your business appears in a lead list

CloseFast helps marketing agencies find local businesses that may need their services. For that we collect publicly available business information: the listing on Google Maps (name, category, address, phone, website, rating and number of reviews), what the business’s own website shows (a published contact email, social media links, whether tracking pixels are installed), public social media profiles, and the business’s entries in Meta’s Ad Library and Google’s Ads Transparency Center. We do this on the basis of legitimate interest (Art. 6(1)(f)): the information is published by the business itself for business contact, and it is used only to suggest a relevant offer.

Agencies using CloseFast decide for themselves whether to contact a business, and do so from their own mailbox. For that outreach, each agency is responsible for its own compliance. If you don’t want your business in CloseFast, tell us the business name and website, and we will delete its data from our systems.

Who processes data for us

We use these service providers to run CloseFast. We share only the data each one needs for its task.

Where data goes outside the EU/EEA, the transfer is covered by an adequacy decision (the EU–US Data Privacy Framework for certified US companies, and the UK adequacy decision) or by the European Commission’s Standard Contractual Clauses.

How long we keep data

• Account data, agency profile, lead lists and pitches: while your account is open, and deleted within 30 days after you ask us to close it.
• Payment records and invoices: as long as tax and accounting law requires.
• Ads-checker email and consent record: until you withdraw consent or ask us to delete it.
• Ads-checker usage records (hashed IP): only as long as needed for abuse prevention and usage statistics.
• Server logs: typically 14 days.
• Contact messages: as long as needed to handle your request.
• Business data in lead lists: while it is in a customer’s list, or until the business asks us to delete it.

Your rights

You can ask us for a copy of your data, to correct it, delete it, restrict or object to its use, or to receive it in a portable format. Where we rely on consent, you can withdraw it at any time, which doesn’t affect anything done before. Contact us through the contact page and we’ll reply within one month. You also have the right to complain to a data protection authority, in particular the one in the EU country where you live or work.

We don’t make decisions about people that have legal or similarly significant effects based solely on automated processing. CloseFast is for businesses and is not intended for anyone under 16.

Changes

If we change how we handle data, we’ll update this page and the date at the top. Significant changes will also be announced to account holders by email.