Privacy Policy
Last updated: November 1, 2026
1. Who we are
AimFast.Dev ("AimFast", "we", "us") operates https://www.aimfast.dev, an automated trend-discovery and market-intelligence service for independent developers. For any question about this policy or your data, contact us at support@aimfast.dev.
2. What we collect
- Account data: your email address, an optional display name, and your password — stored only as a bcrypt hash, never in plain text.
- Data you create in the product: tracking targets (names, aliases, keywords, notes), dashboard preferences, export requests, and alert settings.
- Subscription data: if you subscribe, payments are processed by Stripe. We receive and store only a Stripe customer and subscription identifier together with plan and status. We never see or store your card number.
- Technical data: our hosting provider records standard server logs — IP address, user agent, requested path, timestamp and response status — for security, abuse prevention and reliability.
- We do not run third-party analytics, tracking pixels or session-replay tools on this site.
3. Cookies and similar technologies
We use a strictly necessary session cookie to keep you signed in. When advertisements are shown, our advertising partner (Google) may set its own cookies and similar identifiers, which we do not control. See section 4 for how to opt out of personalized advertising.
4. Advertising
Advertising on this site is delivered by Google AdSense.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and/or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings at https://www.google.com/settings/ads. You can also opt out of some third-party vendors' use of cookies for personalized advertising at https://www.aboutads.info. If you are in the European Union, you can also use the EDAA opt-out tool at https://www.youronlinechoices.com.
- Where consent for advertising cookies is required by law, that consent governs whether personalized ads are shown to you.
- This site is not directed to children under 13 (under 16 in the EEA and the UK), and we do not knowingly collect their data.
5. Service providers
We share data only with providers that are necessary to run the service, and only to the extent needed:
- Vercel Inc. — hosting and content delivery (server logs)
- Neon Inc. — managed PostgreSQL database
- Stripe, Inc. — payment processing and subscription management
- Google LLC / Google Ireland Limited — advertising (AdSense)
- Buttondown — email newsletter, only if you choose to subscribe there
We do not sell your personal information.
6. Legal bases (EEA and UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing your account and subscription), legitimate interests (security, abuse prevention, keeping the service reliable), and consent (personalized advertising, where required by law).
7. Retention
Account and product data are kept while your account is active. Server logs are retained by our hosting provider for a short period. If you ask us to delete your account, we remove your account and product data within 30 days, except records we are required to keep for tax, accounting or legal reasons.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your data, to object to processing, and to withdraw consent at any time. Write to support@aimfast.dev and we will respond. If you are in the EEA or the UK you may also lodge a complaint with your local data-protection authority. If you are a California resident, we do not sell or share personal information as defined by the CCPA/CPRA, and you may request access to or deletion of your data.
9. International transfers
We and our providers process data in the United States and the European Union. Where personal data leaves the EEA or the UK, our providers rely on appropriate safeguards such as the Standard Contractual Clauses.
10. Security
Passwords are hashed with bcrypt, traffic is encrypted with TLS, and access to production data is restricted. No system is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes will be announced on the site.