How Tfast Digital Agency handles technician account data, session records, and cloud authentication tokens under global data privacy regulations.
Tfast Unlocker Pro is a product of Tfast Digital Agency, a business registered in Uganda serving customers worldwide. Tfast Digital Agency is the controller of the personal information described here, and is the company to contact about any of it.
This policy covers the website and the desktop software. Both share one account, so information you give in one place is visible in the other.
When you register we collect your name, email address, and WhatsApp number. We ask for a WhatsApp number because it is how we reach you about an operation, a payment, or a support request. If you contact support we keep the conversation and anything you attach to it.
When you use the website or the tool we record your IP address, browser and operating system, the pages or screens you use, and the time of each request. We keep a record of sign-ins, including the address they came from, so you and we can spot access you do not recognise.
The desktop software reports a hardware identifier for the computer it runs on. We use it to bind a licence to a machine, to enforce one active session per account, and to detect credential sharing. It identifies a computer, not a person, and we do not use it for advertising.
For each operation we record the brand, model, operation type, whether it succeeded, the credits charged, and the computer it ran from. These records support your invoices and credit balance, let us investigate a failed operation, and are part of how we meet our obligations if a device is later reported stolen.
We estimate your country from your IP address and, where available, from your device time zone, language, and operating system region. We compare those signals: when the IP points somewhere the device does not, the request is marked as possibly using a VPN or proxy. We do this to price correctly, to meet legal and sanctions restrictions, and to reduce fraud. You can always correct the country on your profile, and we do not collect GPS or precise location.
Payments are handled by our providers: Flutterwave and PesaPal for card and bank payments, MTN Mobile Money and Airtel Money for mobile wallets, and NOWPayments for cryptocurrency. We receive confirmation of a payment, the amount, and a reference. We never see or store your full card number. For a cryptocurrency payment we may see the wallet address and transaction reference, which is public information on the relevant blockchain and which we keep with the invoice.
Where the law requires a lawful basis, ours are these. To perform our contract with you: running your account, taking payment, delivering operations and support. Our legitimate interests: keeping the service secure, preventing fraud and credential sharing, enforcing licences, and improving the product. Legal obligation: keeping tax and accounting records and responding to lawful requests. Consent: marketing messages, and any optional cookie that is not strictly necessary. You can withdraw consent at any time without affecting anything else, and you can object to processing we base on legitimate interests.
We use cookies to keep you signed in, remember your preferences, and understand how the site is used. Our Cookie Policy explains each category and how to control them in your browser.
We share information with the payment providers named above, and with service providers who help us operate: hosting and infrastructure, email and messaging providers, and Google Firebase for sign-in and notifications. They may only use it to provide their service to us. We also disclose information where the law requires it, or to investigate suspected unlawful use of a device. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
We operate globally and so do our providers, so your information may be processed in a country other than your own, including the United States. Where we move personal data out of the European Economic Area or the United Kingdom we rely on an approved safeguard, normally the European Commission standard contractual clauses together with the UK international data transfer addendum, and we assess whether extra protection is needed. Ask us and we will tell you which safeguard applies to a particular transfer.
We keep account information for as long as your account is open. Invoices, payment records, and operation logs are kept for as long as tax, accounting, and legal obligations require, typically several years, even after an account closes. Sign-in records and technical logs are kept for a shorter period for security purposes.
Access to customer data is restricted to staff who need it. Traffic is encrypted in transit, passwords are stored using one-way hashing, and administrative actions are logged. No system is perfectly secure, so please use a strong, unique password and tell us at once if you suspect a problem.
If you are in the European Economic Area or the United Kingdom you have the right to access a copy of your data, to have inaccurate data corrected, to have data erased, to restrict or object to how we use it, to receive it in a portable format, and to object to automated decisions that significantly affect you. We do not make solely automated decisions with legal effects about you. Exercise any of these by contacting us; we answer within one month and will tell you if we need longer. You may also complain to your national supervisory authority, though we would rather you came to us first.
If you are a California resident you may ask what categories and specific pieces of personal information we have collected, where it came from, why we collected it and who we disclosed it to; ask us to delete it; and ask us to correct it. We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of, and we will never treat you differently for exercising a right. Make a request through our contact page and we will verify it against your account before we act.
Many other countries give similar rights, including Brazil, Canada, Australia, South Africa, Kenya, Nigeria and India. Whatever your country, you may ask us for a copy of what we hold, ask us to correct or delete it, or complain about how we have handled it, and we will apply the strongest protection that reasonably applies rather than the weakest we can defend.
You can ask us to close your account and delete the personal information attached to it. Our data deletion page explains exactly what is removed, what we must keep, and how long it takes.
The service is not for anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will remove it.
We update this policy as the service changes. The version published here is always current, and material changes are announced on the website.
For any privacy question, or to exercise a right described above, use our contact page or open a support ticket so your request is recorded against your account.
Release notes, supported-model updates and help from other repairers. Pick whichever you already use.
