Privacy Policy

This Privacy Policy and Collection Notice explains how Possibility Studios Pty Ltd ACN 690 900 497 trading as Fastlane, we, us, or our, collects, uses, discloses, stores, and protects personal information in connection with our websites, applications, software, APIs, integrations, AI tools, content generation tools, synthetic media tools, browser extensions, social media pages, and related services, together, the Services.

By accessing or using the Services, creating an account, connecting an integration, uploading content, generating content, submitting information to us, or otherwise interacting with us, you consent to the collection, use, disclosure, and handling of your personal information in accordance with this Privacy Policy.

This Privacy Policy forms part of our Terms of Service. Capitalised terms not defined in this Privacy Policy have the meaning given in our Terms of Service.

1. Enterprise use only

The Services are designed for business, commercial, and enterprise use. We do not offer the Services for personal, household, or family use.

Where we collect personal information, we generally collect it in the context of a person acting as a representative, employee, contractor, officer, agent, customer, prospective customer, or authorised user of a business or organisation.

2. Who we are

Fastlane is operated by Possibility Studios Pty Ltd ACN 690 900 497, an Australian company incorporated in New South Wales.

We are an APP entity under the Privacy Act 1988 (Cth) and comply with the Australian Privacy Principles.

Contact details:

• Possibility Studios Pty Ltd
• Trading as Fastlane
• 17-19 Bridge Street
• Sydney NSW 2000
• Australia
• Email: hello@usefastlane.ai

3. Scope of this Privacy Policy

This Privacy Policy applies to:

• Our websites, including usefastlane.ai and related domains.
• Our web applications and mobile applications.
• Our AI content generation tools.
• Our AI Studio features.
• Our AI Influencer features.
• Our synthetic media, avatar, persona, image, video, voice, and likeness generation features.
• Our social media scheduling, publishing, analytics, and management tools.
• Our integrations with third party platforms, including Google, YouTube, TikTok, Instagram, Meta, X, LinkedIn, analytics tools, ecommerce platforms, storage providers, and other services.
• Our APIs, browser extensions, plugins, automation tools, and related software.
• Our social media pages, advertising campaigns, waitlists, forms, events, promotions, and customer communications.
• Any other product, service, or digital property that links to this Privacy Policy.

4. What personal information we collect

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not and whether recorded in a material form or not.

We collect personal information directly from you, automatically through your use of the Services, from connected third party platforms, and from other lawful sources.

The types of personal information we may collect include the following.

4.1 Identity and contact information

We may collect your name, email address, phone number, employer, job title, role, business name, ABN, company details, billing address, postal address, and other contact details.

4.2 Account and profile information

We may collect account credentials, account identifiers, profile images, user roles, permissions, organisation settings, workspace information, preferences, saved settings, connected accounts, team members, and authorisation details.

4.3 Billing and transaction information

We may collect billing information, subscription details, invoices, payment status, transaction history, credits purchased or consumed, usage allowances, plan details, and related financial records.

Payments may be processed by third party payment providers. We do not store full payment card details unless expressly stated.

4.4 Content, prompt, and campaign information

We may collect prompts, instructions, scripts, captions, campaign briefs, brand information, customer personas, target audience details, uploaded files, images, videos, audio, logos, text, URLs, documents, creative assets, campaign materials, metadata, drafts, outputs, generated content, and content you publish or schedule through the Services.

4.5 AI Studio, AI Influencer, avatar, and synthetic media information

Where you use AI Studio, AI Influencer, avatar, synthetic media, voice, likeness, image, or video generation features, we may collect and process information including:

Images, videos, audio, voice recordings, face images, likeness data, body images, appearance references, persona details, creator references, character descriptions, brand assets, scripts, prompts, generated avatars, generated videos, generated images, voice outputs, synthetic voices, edited media, animation data, and related metadata.

Information you upload or generate through these features may include personal information about you or other individuals. You must only provide this information where you have the necessary rights, consents, licences, permissions, and lawful authority to do so.

4.6 Connected social account and platform information

When you connect a third party platform to the Services, we may collect the information required to authenticate the connection, display relevant account information, perform requested actions, publish content, schedule content, manage content, retrieve analytics, and provide the integration.

This may include account names, usernames, account IDs, channel IDs, page IDs, profile images, access tokens, refresh tokens, permissions, content libraries, post metadata, performance data, engagement data, comments, messages where enabled, analytics, and other information made available by the platform and authorised by you.

4.7 Google and YouTube user data

Where you authenticate using Google or connect YouTube API Services, we may collect limited Google user data, including your Google account name, email address, profile image, OAuth access tokens, refresh tokens, YouTube channel identifiers, and other data strictly required to perform actions you explicitly request.

We only request the minimum scopes and minimum Google user data reasonably necessary to provide user facing functionality.

Google user data is used only to provide or improve user facing functionality. We do not use Google user data for advertising, targeted advertising, profiling, resale, AI training, model fine tuning, benchmarking, or any purpose unrelated to the Services.

You may revoke access at any time through your Google security settings. Upon revocation, we will delete stored tokens and associated Google user data within a reasonable period unless retention is required by law, security, audit, or dispute resolution obligations.

4.8 Technical and usage information

We may collect IP address, device identifiers, browser type, operating system, device type, pages viewed, clicks, events, session duration, referrers, access times, feature usage, telemetry, diagnostics, error reports, logs, crash reports, generation history, credit usage, processing status, queue data, API calls, and security events.

4.9 Marketing and communications information

We may collect your communication preferences, email engagement, waitlist submissions, event registrations, survey responses, feedback, support requests, chat messages, call notes, social media interactions, and other communications with us.

4.10 Professional, applicant, supplier, and contractor information

If you apply for a role, work with us, provide services to us, invest in us, or otherwise engage with us professionally, we may collect resumes, employment history, qualifications, references, licences, authorisations, background checks where permitted by law, payment details, tax information, and related business information.

4.11 Sensitive information

We do not actively seek to collect sensitive information. However, certain uploaded content, images, videos, audio, likeness data, campaign materials, or connected platform data may contain sensitive information.

You must not provide sensitive information unless it is necessary, lawful, and you have obtained all required consents. Where we collect sensitive information, we will only use it where you have consented or where otherwise permitted by law.

5. How we collect information

We may collect information when you:

• Create an account.
• Sign in to the Services.
• Use the Services.
• Upload files, images, videos, audio, or other materials.
• Submit prompts or instructions.
• Generate, edit, train, customise, animate, or publish content.
• Create or use AI personas, avatars, synthetic voices, AI influencers, or synthetic media.
• Connect third party accounts or integrations.
• Authorise us to access, post to, or manage content on a third party platform.
• Purchase a subscription, credits, or usage allowance.
• Communicate with us by email, chat, phone, video call, form, or social media.
• Participate in surveys, promotions, events, research, or waitlists.
• Apply for a role, become a contractor, or engage with us as a supplier.
• Visit our websites or use our applications, where cookies, pixels, SDKs, tags, and similar technologies may be used.

We may also collect information from:

• Single sign on providers.
• Connected third party platforms.
• Analytics providers.
• Payment processors.
• Hosting and infrastructure providers.
• Public sources, including websites, business directories, professional networks, social platforms, and publicly available online content.
• Integration partners.
• Service providers and business partners.

6. How we use personal information

We use personal information to:

• Provide, operate, maintain, improve, and secure the Services.
• Create and manage accounts.
• Authenticate users and integrations.
• Provide AI content generation, AI Studio, AI Influencer, avatar, voice, synthetic media, image, video, editing, animation, and related features.
• Process prompts, inputs, uploaded content, campaign materials, and other instructions.
• Generate outputs requested by users.
• Enable users to create, schedule, publish, manage, or delete content on connected third party platforms.
• Retrieve analytics, engagement data, and performance information from connected platforms.
• Operate credits, tokens, usage allowances, rate limits, billing cycles, subscriptions, plan limits, and fair use controls.
• Personalise features, recommendations, workflows, and user experience.
• Provide customer support.
• Send administrative, transactional, billing, security, product, and service communications.
• Send marketing and promotional communications where permitted by law.
• Process payments, subscriptions, invoices, refunds, disputes, and account records.
• Monitor, investigate, and prevent fraud, misuse, security risks, unlawful activity, and breaches of our Terms of Service.
• Enforce our Terms of Service and other policies.
• Debug, test, analyse, and improve the Services.
• Conduct analytics, usage measurement, product research, and product development.
• Train, improve, evaluate, and optimise our systems and features, subject to the restrictions in this Privacy Policy.
• Generate aggregated or de identified statistics and insights.
• Comply with legal, regulatory, tax, accounting, security, audit, and record keeping obligations.
• Respond to lawful requests from regulators, courts, law enforcement, and government authorities.
• Support any actual or proposed merger, acquisition, financing, investment, restructuring, sale, or transfer of all or part of our business.

7. AI usage, training, and transparency

Our Services use artificial intelligence and machine learning systems to process inputs and generate outputs requested by users.

This may include processing prompts, campaign materials, uploaded content, images, videos, audio, voice, likeness references, persona details, brand information, social media content, and other materials submitted to or generated through the Services.

7.1 Third party AI providers

We may share information, excluding Google user data, with third party AI model providers, infrastructure providers, and processing providers where necessary to provide the Services.

These providers may process information on our behalf to generate, edit, analyse, classify, transform, or otherwise process content.

7.2 Training and improvement

We may use user provided information, usage data, prompts, inputs, outputs, feedback, and generated content to maintain, improve, test, evaluate, and develop the Services, including AI systems and related functionality.

However, Google user data obtained through OAuth or YouTube API Services is excluded from AI training, model fine tuning, benchmarking, advertising, resale, or unrelated profiling.

Enterprise customers may request restrictions on data usage, subject to technical feasibility, commercial agreement, and applicable law.

7.3 AI outputs

AI outputs may be inaccurate, incomplete, biased, non unique, unpredictable, or similar to content generated for other users or available elsewhere.

You are responsible for reviewing outputs before use, publication, distribution, or commercialisation.

8. AI Studio, AI Influencer, avatars, voice, likeness, and synthetic media

Where you use features involving AI Studio, AI Influencers, avatars, synthetic personas, synthetic voices, likenesses, images, videos, or other synthetic media, we may process personal information contained in the inputs, references, uploads, instructions, and generated outputs.

This may include images of people, voice data, video data, appearance references, persona descriptions, likeness data, facial imagery, identity related information, and personal information contained in scripts, captions, posts, or campaign materials.

You are responsible for ensuring that:

You have all required rights, consents, licences, releases, permissions, and lawful authority to upload, process, generate, use, publish, or commercialise any image, video, voice, likeness, persona, or personal information.

You do not use the Services to impersonate a real person without lawful authority.

You do not use the Services to create deceptive, misleading, defamatory, harmful, unlawful, or non consensual synthetic media.

Your use of AI generated content complies with applicable laws, privacy rights, publicity rights, intellectual property rights, consumer protection laws, advertising standards, platform policies, disclosure rules, and contractual obligations.

We do not verify, approve, monitor, or guarantee the legality, accuracy, rights clearance, publication safety, or compliance of any synthetic media or AI generated content.

9. Public and shared content

Certain features may allow users to upload, create, publish, share, or make available AI generated templates, personas, voice models, avatars, media assets, workflows, campaign assets, examples, or other materials within the Services.

If you choose to make content public, shared, or available to other users, that content may be visible to or usable by others within the Services.

You may be able to revoke access by deleting the content or marking it private, subject to technical limitations, prior use by other users, legal obligations, backup retention, and reasonable operational constraints.

Do not make content public or shared unless you have the rights and consents required to do so.

10. Trending content and public source information

The Services may surface, aggregate, analyse, reference, or display publicly available content, posts, discussions, videos, images, media, comments, links, metadata, trends, or other materials from third party platforms for trend discovery, research, inspiration, content ideation, or marketing analysis.

We do not claim ownership of third party content displayed or referenced through the Services.

Where publicly available content contains personal information, we process it for legitimate business purposes connected with providing trend discovery, research, analysis, inspiration, and marketing workflow features.

If you believe your content or personal information has been included in the Services and should be removed, you may contact us at hello@usefastlane.ai with sufficient details to identify the relevant material.

We will review removal requests in good faith and may remove, disable, restrict, or de index content where appropriate.

11. Third party assets and libraries

The Services may provide access to stock images, library visuals, audio, video, templates, avatars, synthetic actors, voices, personas, or other creative materials.

Some assets may be owned, licensed, generated, or made available by us or third parties.

Where you use third party assets or avatar assets, you are responsible for ensuring that your use is lawful, appropriately licensed, and compliant with third party terms, platform policies, and applicable law.

We may process metadata, usage data, project data, and generated content associated with your use of these assets to provide and improve the Services.

12. Third party platforms and integrations

The Services may integrate with third party platforms, including social networks, advertising platforms, analytics tools, ecommerce platforms, storage providers, AI model providers, and communication tools.

When you connect an integration, you authorise us to collect, use, store, and disclose the information necessary to provide the relevant functionality.

This may include authentication data, tokens, account identifiers, profile information, content, analytics, permissions, metadata, and other data made available by the connected platform.

You may be able to revoke access through the relevant third party platform or within the Services.

Third party platforms are governed by their own terms, privacy policies, and settings. We are not responsible for their privacy practices, security, availability, decisions, data handling, or content moderation actions.

13. Google Authentication and YouTube API Services

If you use Google Authentication or YouTube API Services through the Services, our use and transfer of Google user data will comply with applicable Google API Services User Data Policy requirements, including the Limited Use requirements where applicable.

We use Google user data only to provide or improve user facing functionality that is prominent in the Services.

We do not:

• Sell Google user data.
• Use Google user data for advertising, retargeting, interest based advertising, or similar profiling.
• Use Google user data for AI training, model fine tuning, benchmarking, or unrelated product development.
• Transfer Google user data to third parties except as necessary to provide or improve user facing functionality, comply with law, address security issues, or as otherwise permitted by applicable Google policies.
• Permit humans to read Google user data unless required for security, legal compliance, support requested by the user, or with the user's consent.

You may revoke our access through your Google account security settings. Upon revocation, we will delete stored OAuth tokens and associated Google user data within a reasonable period unless retention is legally required.

14. Cookies, pixels, SDKs, and tracking technologies

We use cookies, pixels, SDKs, local storage, tags, and similar technologies to:

• Authenticate users.
• Maintain sessions.
• Remember preferences.
• Secure the Services.
• Measure traffic and usage.
• Understand feature performance.
• Analyse marketing effectiveness.
• Improve the Services.
• Support customer support and diagnostics.
• We may use analytics and performance tools in an aggregated or de identified manner.
• Google user data obtained through OAuth or YouTube API Services is not used for advertising, retargeting, or interest based profiling.
• You may be able to manage cookies through your browser settings, device settings, or any cookie tools we make available.

15. Direct marketing

We may send you administrative, transactional, service related, billing, security, product, and operational communications. These communications are necessary to provide the Services and cannot be opted out of while you maintain an active account.

Where permitted by law, we may also send marketing and promotional communications about our products, features, events, updates, offers, content, and related services.

By creating an account, subscribing to the Services, joining a waitlist, downloading a resource, requesting a demo, submitting your contact details, or otherwise engaging with us, you consent to receiving marketing communications in accordance with the Spam Act 2003 (Cth) and applicable privacy laws.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting hello@usefastlane.ai.

Opting out of marketing communications does not affect essential service related communications.

We do not sell or rent your personal information to third parties for their direct marketing purposes.

16. How we disclose personal information

We may disclose personal information to:

• Hosting, cloud, infrastructure, database, storage, and security providers.
• AI model providers, generation providers, processing providers, and infrastructure providers.
• Analytics, telemetry, diagnostics, and product improvement providers.
• Payment processors and billing providers.
• Customer support and communication providers.
• Email, CRM, sales, and marketing service providers.
• Professional advisers, including lawyers, accountants, auditors, insurers, and consultants.
• Contractors, employees, agents, and related bodies corporate.
• Third party platforms you choose to connect.
• Integration partners where necessary to provide requested functionality.
• Regulators, courts, government agencies, law enforcement, or other authorities where required or permitted by law.
• Parties involved in an actual or proposed merger, acquisition, investment, financing, restructuring, sale, or transfer of all or part of our business.
• Other persons where you direct us to disclose information or consent to the disclosure.
• We do not sell personal information or Google user data.

17. International transfers

We are based in Australia, but we may process, store, or disclose information in countries outside Australia, including where our service providers, infrastructure providers, AI providers, or subprocessors operate.

Where we disclose personal information overseas, we take reasonable steps to ensure appropriate safeguards are in place as required by applicable privacy laws.

You acknowledge that third party platforms and integrations may process information in locations determined by their own policies and infrastructure.

18. Security

We take reasonable technical, organisational, and administrative measures designed to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.

These measures may include access controls, encryption, secure infrastructure, authentication controls, monitoring, logging, internal policies, and vendor review processes.

However, no method of transmission, storage, or processing is completely secure. You are responsible for maintaining the security of your account credentials, connected accounts, devices, systems, and authorised users.

You must notify us promptly if you become aware of unauthorised access to your account or any security incident involving the Services.

19. Retention

We retain personal information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, support backups, improve the Services, and meet audit, accounting, tax, and compliance requirements.

We may retain account information, project data, prompts, uploaded content, generated content, usage records, billing records, support records, logs, and analytics data for these purposes.

Google user data and OAuth tokens are deleted within a reasonable period after revocation or account termination unless retention is required by law, security, audit, compliance, or dispute resolution obligations.

Backups may persist for a limited period for disaster recovery and business continuity purposes.

You are responsible for keeping independent copies of any content, outputs, projects, or materials you wish to retain.

20. De identified and aggregated information

We may create, use, disclose, and commercialise de identified, anonymised, or aggregated information derived from personal information, usage data, campaign data, generated content, analytics, and other information.

This information will not reasonably identify an individual.

We may use this information for analytics, benchmarking, product development, research, security, business reporting, marketing, and service improvement.

21. Your privacy choices and rights

Depending on applicable law, you may have rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request information about how we handle your personal information.
• Make a privacy complaint.
• To exercise your rights, contact hello@usefastlane.ai.

We may need to verify your identity before responding. We may refuse or limit a request where permitted by law, including where access would affect the privacy of others, reveal commercially sensitive information, compromise security, or conflict with legal obligations.

22. Australian privacy complaints

If you have a concern about how we handle personal information, contact us first at hello@usefastlane.ai.

We will review your complaint and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

23. European Union and United Kingdom users

Where the GDPR or UK GDPR applies, we process personal data on one or more lawful bases, including:

• Performance of a contract.
• Consent.
• Compliance with legal obligations.
• Legitimate interests, including operating, improving, securing, and promoting the Services.
• You may have additional rights, including rights to access, correction, erasure, restriction, portability, objection, and withdrawal of consent.
• Where we transfer personal data outside the European Economic Area or United Kingdom, we will use appropriate safeguards where required.

24. California and other US users

Where applicable law grants you additional privacy rights, we will comply with those rights.

We do not sell personal information in the ordinary meaning of that term. We do not sell Google user data.

25. Children

The Services are not directed to individuals under 18.

You must not use the Services if you are under 18.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact hello@usefastlane.ai.

26. Your obligations

You must ensure that any personal information you provide to us is accurate, lawful, and provided with all required rights, consents, licences, permissions, and authorisations.

This is especially important where you upload images, videos, voice recordings, likeness references, personal information about third parties, customer data, employee data, social media data, campaign materials, or content involving identifiable individuals.

You must not upload or process personal information through the Services in breach of law, platform policies, third party rights, privacy rights, publicity rights, intellectual property rights, or contractual obligations.

27. Third party links and services

The Services may contain links to third party websites, platforms, applications, services, or content.

We are not responsible for the privacy practices, security, content, policies, or actions of third parties.

You should review the privacy policies and terms of any third party services you use or connect.

28. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you by email, in product notice, or another reasonable method.

The updated version will apply from the Effective Date stated at the top of the Privacy Policy.

Your continued use of the Services after an update means you accept the updated Privacy Policy.

29. Contact us

For privacy questions, requests, or complaints, contact:

• Possibility Studios Pty Ltd
• Trading as Fastlane
• 17-19 Bridge Street
• Sydney NSW 2000
• Australia
• Email: hello@usefastlane.ai

Appendix A, Cookie Policy

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies, required for login, authentication, security, account access, and core functionality.
• Functional cookies, used to remember preferences, settings, and user choices.
• Analytics cookies, used to understand usage, performance, traffic, errors, and feature engagement.
• Marketing cookies, used to measure marketing campaigns and improve communications, where permitted by law.
• Social media and integration technologies, used to support embedded content, connected accounts, and platform integrations.
• You can manage cookies through your browser settings. Disabling some cookies may affect the functionality of the Services.
• Google user data obtained through OAuth or YouTube API Services is excluded from advertising, retargeting, interest based profiling, and AI training.