Fastworks
Privacy policy
Fastworks is a marketplace in Singapore where customers post the services they need and businesses pitch for the work. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA).
Fastworks ("Fastworks", "we") is a Singapore service. Our Data Protection Officer can be reached at contact@fastworks.app.
What we collect
| Data | From whom | Why |
|---|---|---|
| Name, email address, password (stored only as a hash) | Everyone | Your account, signing in, service emails |
| Mobile number | Customers and freelancers | Verifying you're a real person (SMS code), one account per number |
| Business name, UEN, ACRA-registered name, categories, skills | Businesses | Verifying the business against ACRA's register, showing your profile to customers |
| Profile photo (optional) | Everyone | Shown on your profile |
| Requests you post: title, description, budget, district, date | Customers | Matching you with businesses |
| Pitches, offers, chat messages, reviews and replies | Everyone | Running the marketplace, resolving disputes, keeping the platform safe |
| Payment records (amount, purpose, status). Card and PayNow details are handled by Stripe; we never see your full card number. | Everyone who pays | Deposits, escrow, token purchases, refunds, accounting |
| Payout details (PayNow number or UEN, or bank name, account name and number) | Businesses | Paying out your earnings |
| Business calendar entries | Businesses | Your own scheduling |
| Activity on Fastworks: leads opened, bids, reply times | Businesses | Ranking, your Insights page, anonymised market benchmarks |
| Reports and blocks | Everyone | Keeping the platform safe |
| Device push subscription, IP address (briefly, for rate limits), basic logs | Everyone | Notifications, security, preventing abuse |
| Email address (if you joined the waitlist) | Waitlist sign-ups | Launch updates and founding perks |
We don't sell personal data, and we don't use it for third-party advertising.
What other users see
- Businesses see your request and your first name and last initial (for example "Wei Ling T."). Your full name and mobile number are shown only to the business you hire.
- Customers see a business's public profile: name, ACRA-registered name, categories, skills, rating, reviews, reply time and photo.
- Rival businesses never see each other's prices, messages or identity, only the anonymous bid board.
- Reviews are public to signed-in users, shown with the reviewer's first name and last initial.
Service providers we share data with
We use these processors to run Fastworks. Each gets only what it needs, under contract.
| Provider | What for | Data |
|---|---|---|
| Stripe | Card and PayNow payments, refunds | Payment details, amount, email |
| Twilio | SMS verification codes | Mobile number |
| Resend | Transactional email | Email address, email content |
| Cloudflare | fastworks.app website and waitlist | Waitlist email, IP address |
| Showing a business's Google rating, if the business links its Google Business Profile | The business's Place ID | |
| Anthropic | Writing the "What to do next" tips on a business's Insights page | That business's own performance numbers and anonymised market averages. No names, contact details or messages. |
| Cloud hosting provider | Hosting the app and database | All data above |
| Apple, Google | Push notifications on phones | Device token, notification text |
We check UENs against ACRA's public register via data.gov.sg. We may disclose data where the law requires it, or to protect users and Fastworks from fraud or harm. Some providers process data outside Singapore; where they do, we require protection comparable to the PDPA.
How long we keep it
- While your account is open, we keep your data to provide the service.
- When you delete your account (Profile → Account → Delete account), we delete your name, phone number, photo, notifications, calendar, skills, payout details, the descriptions in your requests and the messages you sent, and you can't sign in again.
- We keep, without your name: payment, refund, payout and ledger records for at least 5 years, as Singapore tax and accounting law requires; completed jobs and their reviews, so ratings stay accurate; and reports about your account, to prevent abuse.
- We also keep a record that a phone number or UEN has already claimed founding perks, so they can't be claimed twice.
- Verification codes expire within minutes. Rate-limit data is kept in memory for at most an hour.
You can't delete your account while a contract is active, money is in escrow, or earnings are waiting to be withdrawn. The app tells you what to finish first.
Your rights
Under the PDPA you can ask to see the personal data we hold about you, ask how we've used or disclosed it in the past year, correct it, or withdraw consent (which may mean closing your account). Email contact@fastworks.app from your account's email address. We reply within 30 days.
Security
Passwords are hashed with bcrypt. Verification codes are stored only as hashes. All traffic is encrypted (HTTPS). Payments are handled by Stripe, which is PCI DSS certified. If a data breach is likely to harm you, we'll tell you and the PDPC as the PDPA requires.
Children
Fastworks is for people aged 18 and over. We don't knowingly collect data from children.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.