FastSpec
Features MCP Self-host Pricing
GitHub Sign in

Legal

  • Privacy Policy
  • Cookie Policy
  • Terms & Conditions

Privacy Policy

Last updated October 5, 2026

We are Kaseovo, doing business as FastSpec ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store and share personal information when you use the hosted version of FastSpec at https://fastspec.kaseovo.com/ and this website (the "Services").

FastSpec is also open-source software that anyone can run on their own server. This policy covers only the version we host. A self-hosted instance sends nothing to us; whoever runs it is responsible for the data it stores.

Questions or concerns? Contact us at contact@kaseovo.com.

Summary of key points

  • We collect what you give us (your Google account's name, email address and profile picture, the specifications you create, and messages you send us) and the technical logs needed to run the Services.
  • We use it to provide FastSpec, keep it secure and answer you. We don't sell it, and we don't use it for advertising or analytics tracking.
  • A few providers help us run the Services: Amazon Web Services and Neon host the app and its database in Singapore, Google handles sign-in, Cloudflare runs our DNS and Formspree delivers contact messages.
  • You can download your specifications at any time, and ask us to access, correct or delete your personal information.

Table of contents

  1. 1. What information do we collect?
  2. 2. How do we use your information?
  3. 3. When and with whom do we share your information?
  4. 4. Do we use cookies and other tracking technologies?
  5. 5. How do we handle sign-in with Google?
  6. 6. Is your information transferred internationally?
  7. 7. How long do we keep your information?
  8. 8. How do we keep your information safe?
  9. 9. Do we collect information from minors?
  10. 10. What are your privacy rights?
  11. 11. Controls for Do-Not-Track features
  12. 12. Do we make updates to this policy?
  13. 13. How can you contact us about this policy?
  14. 14. How can you review, update or delete your data?

1. What information do we collect?

Information you give us

  • Account information. When you sign in with Google, we receive your name, email address, profile picture and Google account identifier. We never see your Google password.
  • Your content. The specifications, versions and lint rulesets you create or import, and the names and permissions of the API keys you create. We store API keys only in hashed form.
  • Messages. If you contact us through the contact form or by email, your email address and what you write.

Information collected automatically

Our servers log requests to the Services to keep them running and secure. These logs may include your IP address, browser type, the page or API endpoint requested, the time, and any error, and can include your email address (for example, when you sign in).

FastSpec is free, so we collect no payment information. We do not intentionally process sensitive personal information.

2. How do we use your information?

We process personal information to:

  • sign you in, and keep your account and content;
  • provide FastSpec's features, such as editing, linting, versions and the MCP server;
  • know who uses the hosted version: when someone signs in for the first time, we receive an email with their name, email address and sign-in provider;
  • answer your messages and support requests;
  • keep the Services secure, prevent abuse and fix problems; and
  • comply with legal obligations and enforce our Terms.

Where data-protection laws such as the GDPR apply, we rely on performing our agreement with you (providing the Services you signed up for), our legitimate interests (security, first-sign-in notifications, answering messages) and our legal obligations.

We do not sell personal information, and we do not use it for advertising.

3. When and with whom do we share your information?

These service providers process personal information on our behalf, only to help us run the Services:

ProviderWhat forWhere
Amazon Web ServicesHosting the app and API, server logs, first-sign-in emailsSingapore; pages are delivered from locations worldwide
NeonThe database holding your account and contentAWS Singapore
GoogleSign-inGoogle's locations
CloudflareDomain name (DNS)Worldwide
FormspreeDelivering contact-form messagesUnited States

We may also share information:

  • Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business.
  • Legal obligations. To comply with law, legal process, or enforceable governmental requests.

4. Do we use cookies and other tracking technologies?

Only what the Services need to work: a short-lived cookie while you sign in, and your browser's local storage to keep you signed in. We use no analytics, advertising or tracking cookies. The Cookie Policy has the details.

5. How do we handle sign-in with Google?

When you choose "Continue with Google", Google asks for your permission to share your basic profile with us: your name, email address and profile picture. We use them to create and identify your account. Google's own handling of your information is described in Google's Privacy Policy.

6. Is your information transferred internationally?

Your account and content are stored in Singapore. Some of our providers, such as Google, Cloudflare and Formspree, may process information in other countries, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.

7. How long do we keep your information?

  • Account and content: until you delete them or ask us to delete your account. Deleted data can remain in the database's recovery history for a few hours (currently 6) before it's gone for good.
  • Server logs: 30 days.
  • First-sign-in emails and messages to us: as long as needed to run the Services and answer you, then deleted.

We may keep information longer when the law requires it.

8. How do we keep your information safe?

The Services are served over HTTPS, the database requires credentials that only the app holds, and API keys are stored only as hashes. No system is perfectly secure, though, so we can't guarantee the security of information you send us.

9. Do we collect information from minors?

We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us at contact@kaseovo.com and we will delete it.

10. What are your privacy rights?

Depending on where you live, you may have the right to access, correct, delete or restrict your personal information, object to its processing, receive a copy of it, and withdraw your consent. You can download your specifications from the app at any time, as YAML or JSON. For anything else, see section 14.

11. Controls for Do-Not-Track features

Some browsers offer a Do-Not-Track (DNT) setting. As there is no common standard for it, we do not respond to DNT signals; we don't track you across websites in any case.

12. Do we make updates to this policy?

Yes. We may update this Privacy Policy from time to time. The date at the top of this page shows when it last changed.

13. How can you contact us about this policy?

Kaseovo (FastSpec)
Email: contact@kaseovo.com
Website: https://fastspec.kaseovo.com/

14. How can you review, update or delete your data?

To ask for access to, correction of, or deletion of your personal information, email privacy@kaseovo.com with the subject line "Privacy Request".

FastSpec

The open-source OpenAPI editor for spec-first teams and their coding agents.

Product

  • Features
  • MCP server
  • Self-host
  • Sign in

Open source

  • Source code
  • Self-hosting guide
  • Changelog
  • Report an issue

Kaseovo

  • Contact
  • Privacy policy
  • Cookie policy
  • Terms
© 2026 Kaseovo. All rights reserved. FastSpec is free software under the AGPL-3.0.