Privacy Policy

Definitions

• "Company" (also "we", "us", or "our") refers to FastProducts LLC, a Wyoming limited liability company.
• "Service" refers to Bibley, accessible at https://bibley.io, including all related websites, applications, features, and content.
• "User" (also "you" or "your") refers to any individual or entity that accesses or uses the Service.

1. Information We Collect

a. Information the User Provides Directly

• Account data such as name, email address, and password (passwords are stored hashed)
• Profile information the User chooses to provide
• Study-related content such as bookmarks, notes, prayer journal entries, chat prompts and messages, generated documents, and similar User Content
• Support messages and contact-form submissions
• Marketing preferences (for example, optional marketing opt-in at registration)
• Payment-related information needed to manage subscriptions (payment card data is processed by payment processors; the Company may store identifiers such as customer or subscription IDs, plan status, and billing metadata)

b. Information Collected Automatically

• IP address, browser type and version, operating system, and device information
• Pages visited, features used, approximate usage patterns, referring URLs, and timestamps
• Server logs, error logs, and security-related telemetry
• Cookies and similar technologies as described in Section 3

c. Information from Third Parties

• Social login providers (such as Google, GitHub, or Facebook) when the User chooses to sign in with them
• Payment processors (such as Stripe and, where used, PayPal) regarding subscription status, invoices, and payments
• Analytics providers when analytics cookies are accepted
• Affiliate partners when the User arrives via a referral link and marketing/affiliate tracking is permitted
• Email and marketing platforms when the User has opted in to marketing communications

2. How We Use Information

The Company uses personal information to:

• Provide, operate, maintain, and secure the Service
• Process transactions and manage subscriptions
• Send administrative communications (account, security, billing, and service notices)
• Respond to inquiries and provide support
• Process AI feature requests and store related history so the User can access it
• Monitor and analyze usage trends (with analytics consent where required)
• Detect, investigate, and prevent fraud, abuse, and unauthorized activity
• Comply with legal obligations and enforce the Terms of Service
• Improve and personalize the Service and develop new features
• Send marketing communications only where the User has opted in (or as otherwise permitted by law)
• For any other purpose disclosed at collection or with the User's consent

3. Cookies and Tracking Technologies

The Company uses the following categories:

• Strictly necessary: Session authentication, CSRF protection, security, and storing the User's cookie-preference choice. These are required for the Service to operate and do not require consent.
• Analytics: Google Analytics 4 (GA4), used only after the User opts in via the cookie consent banner.
• Marketing / affiliate: Affiliate tracking (Anderro) may run only when a visit is associated with an affiliate referral and the User has opted in to marketing cookies via the cookie consent banner. Marketing email enrollment is separate and requires an explicit opt-in (for example, at registration).

Strictly necessary cookies do not require consent. Analytics and marketing cookies are used only with prior opt-in consent requested through the cookie consent banner. The User can withdraw or change consent at any time via Cookie settings in the footer. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

The User may also configure the browser to refuse or delete cookies; some essential features may not function without strictly necessary cookies.

4. Third-Party Services

The Service uses third-party processors that may receive personal information as needed to provide their services, including:

• Infrastructure / hosting: DigitalOcean (including object storage / Spaces) and related hosting providers
• Payments: Stripe; PayPal where offered
• AI processing: OpenAI; Replicate (for certain image/generation features); Anthropic may be used for internal content operations
• Email / marketing: Transactional email via the Company's configured mail provider; Flodesk and/or Brevo for marketing lists when the User has opted in
• Analytics: Google Analytics 4 (with consent)
• Affiliates: Anderro (referral/affiliate attribution when applicable and consented)
• Authentication: Google, GitHub, and/or Facebook OAuth when used by the User
• Fonts / delivery: Google Fonts may be loaded to render typography on the Service

These third parties have their own privacy policies. The Company is not responsible for their privacy practices. The User should review the policies of third parties the User interacts with through the Service.

5. Data Sharing and Disclosure

The Company may share personal information:

• Service providers that process data on the Company's behalf
• Legal compliance when required by law, regulation, legal process, or governmental request
• Protection of rights to enforce Terms, protect rights, privacy, safety, or property
• Business transfers in connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy
• With consent when the User has given explicit consent
• Aggregated / de-identified data that cannot reasonably identify the User

The Company does not sell personal information as "sale" is defined under the CCPA/CPRA.

6. AI Processing

Certain features transmit User prompts, scripture references, audio, images, or related content to third-party AI providers (including OpenAI and, where used, Replicate) to generate responses. Interaction history may be stored in the User's account so features continue to work.

The Company does not claim that AI requests are anonymous. The Company does not control how third-party AI providers use data beyond the Company's agreements with them; their privacy policies apply to their processing. The User should not submit government identifiers, payment card numbers, or other highly sensitive personal data into AI features. AI-generated output and related inputs may be retained to provide, secure, and improve the Service.

7. Spiritual and Sensitive Content

Prayer journal entries, study notes, and similar content may reveal religious or philosophical beliefs. The Company treats this content as private User Content associated with the User's account and applies the same access controls and commercially reasonable security measures used for other account data. The Company does not provide end-to-end encryption of this content. Authorized personnel and subprocessors may access content as needed to operate, secure, support, and improve the Service, or as required by law.

8. Data Retention

The Company retains personal information for as long as necessary to provide the Service and fulfill the purposes in this Privacy Policy. After account deletion, the Company may retain certain information as required by law, to resolve disputes, enforce agreements, prevent abuse, or for legitimate business purposes (for example, billing records). Aggregated or anonymized data may be retained indefinitely. Backup systems may retain residual copies for a limited period before automatic deletion.

9. Data Security

The Company implements commercially reasonable technical and organizational measures designed to protect personal information (including encrypted transit via HTTPS, hashed passwords, and access controls). No method of transmission or storage is 100% secure. The Company cannot guarantee absolute security and is not responsible for unauthorized access that occurs despite reasonable measures. The User is responsible for maintaining the security of account credentials.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. The Company does not knowingly collect personal information from children under 18. If the Company becomes aware that it has collected personal information from a child under 18, it will take steps to delete such information promptly. Contact info@fastproducts.io if you believe a child has provided personal information.

11. International Data Transfers

Information may be transferred to and processed in countries other than the User's country of residence, including the United States. Those countries may have different data protection laws. Where the Company transfers personal information out of the EEA/UK, it relies on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs), where applicable. The Company takes reasonable steps to ensure information is treated securely and in accordance with this Privacy Policy.

12. Your Privacy Rights

Depending on the User's location, the User may have rights to:

• Access a copy of personal information
• Correction of inaccurate information
• Deletion of personal information
• Portability of information in a machine-readable format where applicable
• Objection to certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact info@fastproducts.io. The Company may need to verify identity before processing a request and may charge a reasonable fee for manifestly unfounded or excessive requests.

In-product controls currently include account deletion via profile settings, marketing email preferences in account settings, and export of prayer journal data where that feature is available. Additional requests (including broader data export) can be made by email.

13. California Privacy Rights (CCPA/CPRA)

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale/sharing of personal information, and the right to non-discrimination for exercising privacy rights. The Company does not sell personal information as defined by the CCPA. To exercise California privacy rights, contact info@fastproducts.io.

14. European Privacy Rights (GDPR)

EEA and UK residents may have rights under the GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent. Processing typically rests on: contract performance (providing the Service); legitimate interests (security, fraud prevention, Service improvement); consent (analytics/marketing cookies and marketing communications); and legal obligation. Analytics and marketing cookies are used only after prior opt-in consent and may be withdrawn via Cookie settings. Users may lodge a complaint with a supervisory authority. To exercise GDPR rights, contact info@fastproducts.io.

15. Do Not Track

Some browsers transmit "Do Not Track" (DNT) signals. The Service does not currently respond to DNT signals. Third parties that collect data through the Service may also not respond to DNT signals. Cookie preferences are managed through the Service's cookie consent controls.

16. Changes to This Privacy Policy

The Company may update this Privacy Policy at any time. For material changes, the Company will provide notice by email to registered Users or by prominent notice on the Service before the changes take effect. Other changes are effective when posted on this page. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy. The Company encourages periodic review of this page.

17. Contact

If you have any questions about this Privacy Policy, please contact us at info@fastproducts.io.