Privacy policy
How Shipfast collects, uses and protects personal data.
Last updated 8 October 2026
Who we are
Shipfast is a product of XQi ("XQi", "we", "us"). This policy explains what personal data we collect through the Shipfast website and the Shipfast service, why we collect it and what you can do about it. Questions go to hello@shipfast.app.
What this policy covers
- The website at shipfast.app.
- The Shipfast cloud service, where XQi runs the Shipfast control plane for you.
If you run Shipfast self-hosted or on-prem, the data stays in your environment and XQi does not receive it unless you send it to us, for example in a support request.
What we collect
When you visit the website
- The website sets no cookies and uses no analytics or advertising trackers.
- If you book a demo, we receive what you type into the form: name, work email, company, role, number of clusters, the clouds you use and your message.
- Our web host keeps standard server logs, such as IP address, browser type and the pages requested, for security and troubleshooting.
When you use Shipfast
- Account data: your name, email address, organisation, role and sign-in details. Passwords are stored as hashes; if you sign in with GitHub or Keycloak we receive your identity from that provider.
- Cloud credentials: the access keys or credentials you add for your cloud accounts. These are stored encrypted and used only to carry out the actions you ask for.
- Operational data: data from the clusters, VMs and databases you connect, including metrics such as pod CPU and memory, events, the logs you view, uptime results, security scan results, cost data and the activity log of changes made in Shipfast.
- AI requests: when you use Ask AI, the event or question and related context, such as log excerpts, metrics and settings, are sent to our AI provider to produce an answer.
- Billing data: payments are processed by Stripe. We receive billing contact details and payment status, not full card numbers.
How we use it
- To provide, secure and support the Shipfast service.
- To bill for paid plans.
- To send service messages, such as alerts, invitations and password resets.
- To reply to demo requests and questions.
- To find and fix errors and to improve the product.
We do not sell personal data, and we do not use it for advertising.
Who we share it with
We use a small number of service providers to run Shipfast. They process data only on our instructions.
| Provider | What for |
|---|---|
| Our hosting provider | Running the Shipfast cloud service and website |
| DeepSeek | Generating Ask AI answers |
| Stripe | Payments and invoices |
| Cloudflare | Receiving demo requests sent from the website form |
| Our email delivery provider | Service emails, alerts and demo-request notifications |
| Google Fonts | Website fonts; your browser requests the font files from Google |
We may also disclose data where the law requires it. Ask hello@shipfast.app for the current list of providers and where they process data.
Where data is processed
Data in the Shipfast cloud service is stored with our hosting provider. Some providers, including our AI provider, may process data in other countries. Where that happens we take steps to keep it protected.
How long we keep it
We keep account and operational data for as long as your account is active. Cost history is kept for up to 12 months. When you close your account we delete or anonymise your data within a reasonable period, unless the law requires us to keep it longer. Demo requests are kept while we are in contact with you.
How we protect it
- Cloud credentials and secrets are stored encrypted.
- Access inside Shipfast follows the roles you set, with single sign-on available.
- Changes are recorded in an activity log.
Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or delete your personal data, withdraw consent, and raise a grievance. Email hello@shipfast.app and we will respond as the law requires. If your organisation manages your Shipfast account, we may refer your request to them.
Children
Shipfast is a business service and is not meant for anyone under 18.
Changes
We will update this page when our practices change and revise the date at the top. For significant changes to the service, we will also tell account owners by email.