Privacy Policy
We collect minimal data, process it in the EU, and delete files automatically.
Last updated: December 2025
Who We Are
Compress.FAST is operated by Tools Fast Group (ABN 95 273 980 219), an Australian business. Compress.FAST is part of the Tools.FAST network of productivity tools.
What We Collect
Files You Upload
Files are uploaded to our EU servers for compression. We store only the file extension (not filenames) and delete all files automatically after 1 hour—or immediately when you click delete.
Job Metadata
For billing and fraud prevention, we retain: job identifiers, compression type, file sizes, processing time, and credits consumed. We do not retain filenames, file contents, or extracted metadata (like image EXIF data).
Account Data
If you create an account: email address, name, and authentication provider (e.g., Google). We use this to identify your account and send transactional emails.
Usage Data
Anonymous usage patterns: pages visited, compression types used, and aggregate statistics. We use self-hosted Plausible Analytics—a privacy-first platform with no tracking cookies, no personal data collection, and no cross-site tracking.
IP Addresses
We use hashed IP addresses for rate limiting and abuse prevention. We do not store raw IP addresses in logs.
Cookies
We use only essential cookies:
- Session cookie — Maintains your login state (if signed in)
- Anonymous session — Tracks usage limits for guests (hashed identifier, no personal data)
We do not use advertising cookies, tracking pixels, or third-party analytics that track individuals.
How We Use Your Data
- Process file compression you request
- Calculate and debit credits from your account
- Enforce rate limits and prevent abuse
- Send transactional emails (account verification, password resets) and occasional product updates
- Improve the service through aggregate analytics
Third Parties
We do not sell your data. We share minimal data with:
- Stripe — Payment processing
- Google OAuth — Authentication (if you choose to sign in with Google)
File processing happens entirely on our infrastructure. We never send your files to third-party APIs.
Data Location
All file processing and storage occurs on servers physically located in the European Union. Your files stream encrypted (TLS 1.3) straight from your browser to our EU infrastructure.
Data Retention
- Uploaded files: Deleted 1 hour after compression (all tiers)
- Job metadata: Retained for billing records and fraud prevention
- Account data: Retained until you delete your account
Your Rights (GDPR)
Under GDPR, you have the right to:
- Access — Request a copy of your data
- Rectification — Correct inaccurate data
- Erasure — Delete your account and associated data
- Portability — Export your job history
- Object — Object to processing for direct marketing (you can unsubscribe from product updates anytime)
- Restriction — Request we limit processing
To exercise any of these rights, email privacy@compress.fast. We respond within 30 days.
Security
See our Security page for details on encryption, data handling, and infrastructure security.
Children's Privacy
Compress.FAST is not intended for children under 16. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy occasionally. Significant changes will be announced via email to registered users.
Contact
- Privacy questions: privacy@compress.fast
- General support: support@compress.fast