Privacy Policy

FastCAC is a registration platform built and run by DigitalAbode (RC 8561321), a registered Nigerian technology company. DigitalAbode is the data controller for the personal data described here.

This policy covers fastcac.com, your FastCAC account at platform.fastcac.com, our tools and AI assistant, and conversations with us by email, phone or WhatsApp. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

• Account details: your name, email address and phone number. You sign in with a one-time code sent to your email, or with your Google account if you choose to.
• Registration details: what CAC requires to register your business. This includes the full name, date of birth, address, phone number and email of each proprietor, a valid ID (NIN, driver's licence or international passport), a passport photograph and a signature, plus your business name, what the business does and where it operates.
• Payment details: payments are handled by our payment providers. We receive a payment reference and status, not your full card details.
• Chats with the assistant: the messages you send FastCAC's AI assistant and its replies. Before you log in, they're linked to your browser by a cookie; when you log in, they move into your account.
• WhatsApp, email and calls: when you contact us, we receive your number or address, your profile name and what you send. If you message us from one of our tools, we also receive what you were doing there, such as the business name you checked.
• Free tools: the name checker sends the name and line of business you enter to CAC's name check. The name generator sends your description to an AI provider. The invoice generator runs in your browser: what you type is never uploaded.
• NIN tools (get your NIN number, get your NIN slip): you type your phone number or NIN and do a short face check in our identity verification provider's window. The provider looks up your NIMC record and compares your face with your NIMC photo. From that check we keep your NIN, names, date of birth, gender, NIMC photo and how closely your face matched, plus the email you want the result sent to. We don't keep the face scan or the phone number you typed. To limit how many checks can be started in a day, we keep a scrambled form of your IP address, not the address itself.
• Usage data: your device and browser type, the pages you visit and how you use them (see Cookies and analytics).

The NDPA requires a lawful basis for each use. Ours are:

• To provide the service you asked for (contract): checking your details, filing your registration with CAC, tracking it, delivering your certificate and TIN, finding your NIN or NIN slip when you use a NIN tool, running your account and answering your questions.
• To meet legal obligations: keeping financial and transaction records, and responding to lawful requests from authorities.
• For our legitimate interests: keeping FastCAC secure, preventing fraud, fixing problems and improving the product, in ways that don't override your rights.
• With your consent: sending tips and offers. We only do this if you ask, and you can stop at any time (reply STOP on WhatsApp, or email us).

We don't sell your personal data. We share it only where needed to run FastCAC:

• The Corporate Affairs Commission (CAC), and the filing service we use to submit your application to CAC.
• Identity verification providers, to confirm the ID details you give us, and for the NIN tools, to look up your NIMC record and check your face against your NIMC photo.
• A NIN slip provider, which we send your NIN to when you buy your NIN slip, so it can return NIMC's slip.
• Payment providers, to take payments and confirm them.
• Service providers that host our servers, database and files, send our emails and WhatsApp messages, power our AI assistant and name generator, and keep error logs. They act on our instructions and may not use your data for their own purposes.
• Analytics: Microsoft Clarity and PostHog on fastcac.com (see Cookies and analytics). We don't run ads, and we don't share your data with advertisers.
• Authorities, when the law requires it or to protect FastCAC, our users or the public.

You can connect an AI app, such as Claude or ChatGPT, to your FastCAC account. It only gets access after you sign in on platform.fastcac.com and approve it, and only to what you approve: your businesses and registrations, filling in and saving registration details, starting payments, and your account settings.

• What a connected app reads or changes goes to that app's provider, which handles it under its own privacy policy. We send it only what each request needs. NINs and other ID numbers are masked, and payments, uploads and NIN checks are finished by you on FastCAC, never inside the app.
• We keep a record of each app you connect and what it did on your account, the same way we record your own actions.
• You can disconnect an app at any time under Settings, Connected apps. Its access ends at once: its tokens stop working. Access also ends by itself after 90 days, and the app has to ask you again.
• The free tools on fastcac.com (name checks, fees, register search and others) also work with AI apps and AI browsers without a FastCAC account. What you ask through them is handled as described above for the tools.

Some of our service providers store or process data outside Nigeria, for example in the European Union or the United States. When that happens, we rely on the conditions the NDPA allows, such as the destination having adequate data protection, the transfer being needed to provide the service you asked for, or contractual safeguards with the provider.

We keep your account and registration records for as long as your account is open and then as long as we need them for legal, tax and accounting purposes, or to resolve disputes. When we no longer need data, we delete it or make it anonymous.

NIN tools: we delete the NIN record from your check (your NIN, names, date of birth, gender, photo and face-match result) 7 days after you pay, or 7 days after the check if you don't pay. Your result link stops working then too. We keep the order itself (your email, what you bought, the amount and the dates) as a transaction record. A NIN slip you buy is kept privately, filed under a scrambled form of your NIN rather than the NIN itself, so the same slip isn't paid for twice. That includes a FastCAC business registration that uses the same NIN. You can ask us to delete it (see Your rights).

Data travels over encrypted connections (HTTPS). Access inside FastCAC is limited to the staff who need it for your registration or support, and their access is logged. The NIN record from a NIN tool check is stored encrypted, and the private link to your result is stored only in a scrambled form. No system is perfectly secure, but if a breach puts your data at risk, we'll tell the Nigeria Data Protection Commission (NDPC) and you where the law requires it.

• Essential cookies keep you signed in and link your assistant chats to your browser before you log in. FastCAC doesn't work without them.
• Microsoft Clarity records how visitors use fastcac.com (pages, clicks, scrolling and session replays) so we can fix problems. It's processed by Microsoft under the Microsoft Privacy Statement.
• PostHog (on its EU servers) counts page views and where visitors came from, such as the link or ad that brought them. Its cookie is shared with platform.fastcac.com, so if you sign up there, your earlier visits are linked to your account.
• On the NIN tools, your NIN record is hidden from Clarity and PostHog, so it never appears in their recordings.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of FastCAC working.

Under the NDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that's wrong or incomplete;
• delete your data, where we don't have to keep it;
• restrict or object to how we use it, including for marketing;
• send your data to you or another provider in a common format;
• withdraw consent you gave earlier.

Email hello@fastcac.comto make a request. We may need to confirm who you are first. Some data, such as what's already filed with CAC, sits on CAC's register and can only be changed through CAC.

If you're unhappy with how we handle your data, tell us first and we'll try to put it right. You can also complain to the Nigeria Data Protection Commission.

FastCAC is for adults. We don't knowingly collect personal data from anyone under 18 except where it's part of a registration that CAC allows and that a parent or guardian makes for them.

We may update this policy as FastCAC changes. The date at the top shows the latest version, and if a change is significant we'll tell you by email or in your account.

For privacy questions or requests, email hello@fastcac.com.