Legal

Privacy policy

How fastform, a product of Leadev Software Inc. of Alberta, Canada, collects, uses, and protects information when you use our websites, applications, and services.

  • Last updated January 30, 2026
  • Applies to websites, apps and services
  • hi@getfastform.com

Summary

At a glance

A summary, not a substitute. The full policy below is the one that governs.

  • We collect account, usage, and content you provide so we can deliver and secure the service.
  • fastform is designed to be HIPAA-compliant by default. Covered entities and business associates must have a signed Business Associate Agreement (BAA) before processing PHI.
  • Automated and AI-powered features can assist your workflows, but outputs must be reviewed by humans.
  • We do not use Customer Content or PHI to train AI models.
  • Our marketing website uses PostHog for analytics. Session recording is off and it never reads what you type.
  • You control your data, can request access or deletion, and can always reach us at hi@getfastform.com.

Who we are

fastform is a product of Leadev Software Inc., incorporated in Alberta, Canada in 2020 and operated from there. When we say "fastform," "we," "us," or "our," we mean Leadev Software Inc. This policy describes how we handle personal information when you use the fastform service.

Information we collect

We collect information in the following categories:

  • Account and profile data: name, email address, organization, role, authentication details, and account preferences.
  • Customer Content: forms, submissions, files, messages, templates, and configuration you upload or generate in fastform.
  • Usage and device data: log files, IP address, browser and device information, pages visited, and diagnostic events.
  • Billing and transaction data: billing contacts, plan details, and payment status. Payment card data is handled by our payment processors.
  • Cookies and similar technologies: used to keep you signed in, remember preferences, and measure performance. Our marketing website also stores an analytics identifier, described under Website analytics below.

Website analytics

Our marketing website uses PostHog to understand how visitors find and move through it. PostHog is a product analytics vendor; the data is processed on their United States cloud. This section describes the marketing website only. PostHog is not part of the fastform application and never receives Customer Content or PHI.

What we send to PostHog when you browse this website:

  • Pages you visit, the page you arrived from, and how far down a page you scroll.
  • Clicks on labelled controls such as pricing buttons, the navigation, and FAQ entries, with the visible text of the control.
  • Browser and device information, and an approximate location derived from your IP address.
  • An identifier stored in a cookie and in your browser's local storage, so repeat visits can be counted as one visitor rather than several.

What we deliberately do not do, and have configured PostHog not to do: session recording is turned off, so we hold no replay of your screen. Analytics never reads what you type. Every input, text area, and dropdown on the site is excluded from collection, and the automatic click tracking is configured so that no field value, placeholder, or label can be sent. When you submit the contact or free-build form we record that a submission happened, never its contents.

We honour the Do Not Track signal: if your browser sends it, PostHog collects nothing. Blocking analytics cookies or using a content blocker also prevents collection, and no part of the website depends on analytics to work. You can ask us what we hold about your visits, or ask us to delete it, using the contact details at the end of this policy.

HIPAA and protected health information

fastform is designed to be HIPAA-compliant by default with administrative, technical, and physical safeguards. If you are a covered entity or business associate, a signed Business Associate Agreement (BAA) is required before you submit or store PHI in fastform. Contact hi@getfastform.com to discuss a BAA.

How we use information

We use information to:

  • Provide, operate, and maintain the fastform service.
  • Authenticate users, secure accounts, and prevent abuse or fraud.
  • Process payments, manage subscriptions, and provide support.
  • Analyze performance, usage patterns, and reliability of the service.
  • Comply with legal obligations and enforce our terms.

AI and automated processing

fastform may use automated systems, including AI-assisted features, to help generate forms, classify submissions, detect spam, summarize content, or accelerate workflows. These systems may process Customer Content you submit. AI outputs can be inaccurate or incomplete and must be reviewed by qualified humans before use in clinical, operational, or legal decisions. You are responsible for how you use AI-generated outputs.

We do not use Customer Content, including PHI, to train or improve AI models.

If you require HIPAA compliance, AI features may be restricted or disabled unless a BAA is in place. Do not submit PHI into AI features unless your HIPAA configuration explicitly permits it.

How we share information

We may share information in the following circumstances:

  • Service providers: vendors who help us host, secure, analyze, and operate fastform, under confidentiality obligations. The analytics vendor for our marketing website is named under Website analytics above.
  • Legal compliance: to respond to lawful requests, enforce our rights, or protect users and the public.
  • Business changes: during mergers, acquisitions, or asset transfers, subject to this policy.
  • With your direction: when you integrate third-party tools or explicitly request data sharing.

International data transfers

fastform is based in Canada, and our service providers may process data in Canada or the United States. By using fastform, you understand that your information may be transferred and processed outside your province, state, or country, subject to applicable safeguards.

Data retention

We retain personal information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When an account is closed, we will delete or de-identify data within a reasonable period, subject to backup retention and legal requirements.

Security

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, or loss. No system is completely secure, so please use fastform responsibly and notify us of any suspected issues.

Your rights and choices

Depending on your location, you may have rights to:

  • Access, correct, or delete your personal information.
  • Export data you provide to fastform.
  • Withdraw consent where processing is based on consent.
  • Opt out of non-essential cookies or marketing communications.

To exercise these rights, contact us at hi@getfastform.com. We may verify your request before responding.

Children's privacy

fastform is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact hi@getfastform.com and we will take appropriate action.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will post the updated policy and revise the "Last updated" date above.

Contact us

Questions about this policy or your data? Email us at hi@getfastform.com.

Leadev Software Inc., Alberta, Canada.