Privacy Policy

Engin Yildirim
Jägerstrasse 20
78054 Villingen-Schwenningen
Email: Show Email Address

BlitzFa.st is an AI-powered lead generation platform that scans publicly available data from multiple online platforms to identify and qualify potential leads for our users. The following overview summarizes the types of data processed and the purposes of their processing.

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies:

• The legal basis for obtaining consent is Art. 6 (1) (a) GDPR.
• The legal basis for processing to fulfill our services and contractual obligations is Art. 6 (1) (b) GDPR.
• The legal basis for processing to fulfill our legal obligations is Art. 6 (1) (c) GDPR.
• The legal basis for processing based on legitimate interest is Art. 6 (1) (f) GDPR.

Our core service involves scanning publicly available information from third-party platforms to identify and score potential leads for our users. The platforms we scan include:

• X (Twitter) — public posts, engagement metrics, bio information
• YouTube — public channel data, video topics, engagement levels
• Google Search — publicly indexed content and ranking data
• Google Maps — public business listings, reviews, and ratings
• LinkedIn — publicly available company and professional profile data

Important: We only process publicly available information from these platforms. We do not access private messages, private accounts, or any data that requires authentication on behalf of third parties.

AI-Based Scoring: Collected public data is processed by our AI systems to generate lead scores (0–100) based on user-defined Ideal Customer Profiles (ICP). Scoring criteria and results are stored within the user's account.

Storage duration: Lead data is stored for the duration of the user's active subscription. Upon account deletion, all associated lead data is permanently removed within 30 days.

Every time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The data is processed to deliver the website to your computer and to ensure that the connection is established smoothly. The processing takes place in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

We use Auth.js for authentication and session management. These are necessary to identify you as a logged-in user and to grant you access to your personalized services.

Processing is carried out on the basis of Art. 6 (1) (b) GDPR, as it is required for the provision of the services you have requested.

Storage duration: Session data is automatically deleted after 30 days of inactivity.

We collect the following data during registration:

• Email address
• Name
• Password (stored in encrypted form)
• Subscription plan and billing information (when applicable)

Processing is carried out to fulfill the user agreement in accordance with Art. 6 (1) (b) GDPR.

BlitzFa.st offers integrations with third-party CRM systems (e.g. HubSpot, Salesforce, Pipedrive, Close) and communication tools (e.g. Slack). When a user enables these integrations:

• Lead data is transmitted to the connected third-party service at the user's explicit request
• Authentication tokens for integrations are stored in encrypted form
• We do not access or store data from your CRM beyond what is needed for the sync

Processing is based on the user's consent in accordance with Art. 6 (1) (a) GDPR. Users can disconnect integrations at any time from their account settings.

Users may configure automated email outreach sequences through our platform. In this context:

• Email addresses of leads are processed to send outreach emails on the user's behalf
• Open rates, click rates, and reply tracking data is collected to measure campaign performance
• All outreach data is associated with the user's account and not shared with third parties

Important: The user is solely responsible for ensuring their outreach campaigns comply with applicable anti-spam laws (e.g. CAN-SPAM, GDPR) and that they have a lawful basis for contacting leads.

If you use our contact form, we collect the data you provide to process your request. Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

Storage duration: Contact requests are stored for 3 years and then automatically deleted.

For our newsletter, we collect your email address. Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

You can unsubscribe from the newsletter at any time. The unsubscribe link can be found in every newsletter email.

During the open beta phase, no payments are processed. The collected usage and analytics data is used for product development and improvement of services.

Processing takes place to improve the service in accordance with Art. 6 (1) (f) GDPR (legitimate interest in product development and service quality).

You have the following rights:

• Right to access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, you can contact us at any time.

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy.