Legal & Compliance

This NDA is entered into between FastPrototype.ai and the Client upon project submission and payment. Both parties agree to maintain strict confidentiality over all shared information.

1. Confidential Information

Each party shall keep strictly confidential all non-public information disclosed by the other party, including business plans, product ideas, technical specifications, pricing strategies, customer data, financial information, and proprietary methodologies. This obligation applies to all team members, sub-contractors, and AI systems used in project execution.

2. Non-Disclosure Obligations

The receiving party shall: (a) use Confidential Information solely to perform services under this Agreement; (b) not disclose to third parties without prior written consent; (c) protect with at least the same level of care as its own confidential information (minimum: reasonable care); (d) immediately notify the disclosing party of any suspected breach.

3. AI Processing Notice

Client acknowledges that FastPrototype.ai uses AI models (including third-party GPAI systems) to generate project scopes and code. Client project details are submitted to these AI systems subject to their respective privacy policies. FastPrototype.ai does not use client project data to train AI models. FastPrototype.ai selects AI providers who contractually prohibit using customer data for training.

4. Term

This NDA remains in force for 3 years from the date of the last project submission or payment. For trade secrets, obligations survive indefinitely until the information enters the public domain through no fault of the receiving party.

5. Exceptions

Obligations do not apply to information that: (a) is or becomes publicly known without breach; (b) was known prior to disclosure; (c) is independently developed; (d) is required to be disclosed by applicable law or court order, provided the disclosing party is notified in advance where legally permissible.

6. Governing Law & Jurisdiction

This NDA is governed by the laws of the EU member state in which FastPrototype.ai is incorporated, with disputes submitted to the courts of that jurisdiction. For clients in other jurisdictions, GDPR and EU consumer protection rights remain unaffected.

Upon receipt of full and final payment, the Client acquires 100% ownership of all intellectual property in the delivered MVP.

1. Work for Hire & Assignment

All code, designs, databases, documentation, and associated materials created specifically for the Client's project are "work for hire" or equivalent under applicable law. FastPrototype.ai hereby assigns to the Client all copyrights, patent rights, trade secret rights, database rights, and any other intellectual property rights in the deliverables, effective upon receipt of final payment. This assignment is irrevocable and worldwide.

2. Background IP

FastPrototype.ai retains ownership of pre-existing tools, frameworks, methodologies, and know-how ("Background IP"). Where Background IP is incorporated into deliverables, FastPrototype.ai grants the Client a perpetual, royalty-free, worldwide, irrevocable licence to use, modify, and sublicence such Background IP as embedded in the deliverables.

3. Open-Source Components

Deliverables may include open-source software components governed by their respective licences (e.g., MIT, Apache 2.0, GPL). FastPrototype.ai will provide a complete Software Bill of Materials (SBOM) documenting all third-party components, their licences, and any obligations. The Client is responsible for compliance with open-source licences in their own product.

4. AI-Generated Content

Code and documentation generated by AI tools is assigned to the Client in the same manner as human-authored code. FastPrototype.ai represents that AI-generated outputs are not knowingly derived from third-party proprietary code. The Client is advised to seek independent legal advice on AI-generated code ownership in their jurisdiction, as applicable law continues to evolve (particularly under the EU AI Act and national copyright laws).

5. IP Escrow During Development

During development (between 50% upfront payment and final delivery), FastPrototype.ai holds source code in escrow. If FastPrototype.ai materially fails to deliver within the agreed timeline without cause, the Client receives full source code access immediately and a proportional refund. The Client may not use partial deliverables commercially until final payment is made.

6. EU Technology Transfer Block Exemption Regulation (TTBER)

Any technology licensing arrangements between FastPrototype.ai and the Client are conducted in compliance with the revised EU TTBER (effective May 1, 2026). Where EU competition law creates obligations regarding technology licensing, these supersede conflicting contract terms.

1. Service Description

FastPrototype.ai provides AI-assisted rapid MVP software development services. AI agents generate initial code; Senior Developers review all components for quality, security, and reliability. FastPrototype.ai is not a general software development agency — it specialises exclusively in rapid MVP delivery to enable market validation and proof-of-concept testing.

2. Payment Terms

50% of the agreed project price ("Upfront Payment") is required before development commences. The remaining 50% ("Final Payment") is due upon delivery notification. If the Client fails to make the Final Payment within 14 days of delivery notification, FastPrototype.ai may withhold deployment access and source code transfer until payment is received. All prices are exclusive of applicable VAT.

3. Scope & Change Management

The agreed Scope of Work is fixed at the quoted price. Any additions to scope require a separate written agreement and may incur additional charges. Scope reductions may result in partial refund at FastPrototype.ai's discretion. The AI-generated scope is reviewed and agreed by the Client prior to payment — the Client's acceptance of the proposal constitutes agreement to the defined scope.

4. Delivery & Timelines

Delivery timelines commence from receipt of the Upfront Payment. Quoted timelines are estimates, not guarantees, unless expressly confirmed in writing. Force majeure events (including third-party AI service outages) may extend timelines without penalty.

5. Warranties & Defect Liability

FastPrototype.ai warrants that deliverables will substantially conform to the agreed scope for 30 days post-delivery (Warranty Period). FastPrototype.ai will fix functional defects at no charge during the Warranty Period. The warranty does not cover: issues caused by Client modifications; security vulnerabilities in third-party libraries; issues arising from Client infrastructure or hosting environments. After the Warranty Period, maintenance is available at FastPrototype.ai's standard rates.

5a. MVP Scope & Production Readiness

The Client acknowledges that:

• Included deliverables are governed by the agreed Scope of Work. Deployment readiness depends on the documented use case and acceptance criteria stated at the start of the engagement.
• The MVP is engineered for launch and controlled real-world validation. Additional production hardening, compliance work, scale testing, formal security validation, or ongoing operational support may require a separate scope.
• No suitability is promised for undisclosed, unrestricted, mission-critical, regulated, or enterprise uses that were not identified and agreed in the Scope of Work.
• Customer-specific production requirements (e.g. multi-region deployment, regulated workloads, SLA guarantees) must be identified and agreed upon in writing before they can be relied upon.
• Where the Client elects to place the MVP in front of end users, revenue-bearing traffic, or regulated processes without a separately-agreed hardening engagement, the Client accepts responsibility for that decision.

5b. No Scaling Guarantee

FastPrototype.ai makes no guarantee, representation, or warranty regarding the ability of the deliverables to scale beyond the volumes, request rates, or data sizes typical of an early-stage MVP (indicatively: low double-digit concurrent users, modest dataset sizes). Performance optimisation, horizontal scaling, multi-region deployment, caching strategies, queueing systems, and other scalability work are out of scope unless expressly listed in the agreed Scope of Work. The Client is responsible for monitoring performance, planning capacity, and engaging engineering resources to evolve the MVP as usage grows.

5c. Client Responsibility — Security, Hosting & Operations

FastPrototype.ai delivers source code that follows reasonable secure-coding practices appropriate for the MVP stage, but the Client is solely responsible for the ongoing security and operational integrity of the live system, including without limitation:

• Choosing, configuring, and securing the hosting environment (servers, databases, CDN, DNS, TLS certificates, firewalls, WAF, secret stores, backups).
• Rotating API keys, database credentials, and third-party tokens; never committing secrets to source control; configuring least-privilege IAM.
• Applying security patches to operating systems, runtimes, dependencies, and third-party services after delivery.
• Implementing additional authentication factors (e.g. SSO, MFA, hardware keys) and account-takeover protections that go beyond the MVP defaults.
• Performing penetration testing, vulnerability scanning, dependency-audit reviews, and threat modelling appropriate to the production workload.
• Compliance with data-protection law (GDPR, CCPA, sector-specific rules), including DPAs with sub-processors, lawful-basis tracking, breach notification, and Data Subject Request handling.
• Logging, monitoring, alerting, incident response, and disaster recovery.

FastPrototype.ai is happy to recommend partners or quote a separate hardening engagement, but absent such a separate written agreement, all post-delivery security and operations are the Client's responsibility.

6. Limitation of Liability

FastPrototype.ai's total liability shall not exceed the total fees paid for the specific project. FastPrototype.ai is not liable for: indirect, incidental, or consequential damages; loss of profits or revenue; loss of business or goodwill; data loss; damages arising from the Client's use of the MVP in a production environment, including scaling failures, security incidents, or downtime. Nothing in these terms limits liability for death or personal injury caused by negligence, fraudulent misrepresentation, or any other liability that cannot be excluded by law.

7. Regulatory Responsibility

The Client is solely responsible for ensuring their software product complies with all applicable regulations in their industry and jurisdiction (see Industry Regulatory Notices below). FastPrototype.ai delivers functional software and does not provide regulatory compliance certification. MVPs delivered by FastPrototype.ai are not certified for regulated industries (e.g., medical devices, aviation safety systems, licensed financial products) unless explicitly agreed in writing.

8. Governing Law

These Terms are governed by EU law and the laws of FastPrototype.ai's country of incorporation. EU consumers retain all rights under applicable consumer protection law regardless of this clause.

Withdrawal Period

EU consumers have the right to withdraw from this contract without stating any reason within 14 days of contract conclusion (i.e., acceptance of the proposal and payment).

Exception: Service Already Commenced

By proceeding to payment, the Client expressly requests that FastPrototype.ai begins performing the service immediately. The Client acknowledges that they will lose their right of withdrawal once the service has been fully performed. If withdrawal is exercised before full completion, the Client shall pay a proportionate amount for services already rendered up to the point of withdrawal notification.

How to Exercise Withdrawal

To withdraw, contact hello@fastprototype.ai with: your name, project ID, date of payment, and a clear statement of withdrawal. You may use the standard EU withdrawal form. FastPrototype.ai will confirm receipt and process any applicable refund within 14 days.

Cancellation Button (Directive 2023/2673)

In compliance with the amended EU Consumer Rights Directive (effective June 19, 2026), a clear electronic cancellation function is available via the Track Project page. This allows clients to formally initiate a cancellation request during the withdrawal period.

Refund

Where withdrawal is valid and no services have been rendered, a full refund will be processed within 14 days using the original payment method. Where partial services have been rendered, a pro-rata deduction applies based on actual work completed.

1. Roles & Responsibilities

The Client is the Data Controller. FastPrototype.ai is the Data Processor when processing personal data provided by the Client in the course of project delivery (e.g., sample data, user data used for testing or integration). FastPrototype.ai may also be an independent Controller for its own operational data (e.g., contact details, payment records).

2. Processing Instructions

FastPrototype.ai shall only process personal data on documented instructions from the Controller (Client). If FastPrototype.ai is required by EU law to process data beyond these instructions, it shall inform the Client unless prohibited by law.

3. Security Measures (GDPR Article 32)

FastPrototype.ai implements appropriate technical and organisational measures including: encryption of data at rest and in transit; access controls and role-based permissions; regular security reviews; staff confidentiality obligations; pseudonymisation where appropriate; incident response procedures.

4. Sub-Processors

FastPrototype.ai uses the following categories of sub-processors: AI model providers (for code generation — no personal data submitted unless necessary for specific AI features); cloud hosting providers; payment processors (Stripe). FastPrototype.ai will notify the Client of any new sub-processors and obtain authorisation before engaging them. All sub-processors are contractually bound to equivalent data protection standards.

5. Data Subject Rights

FastPrototype.ai shall assist the Client in responding to data subject requests under GDPR Articles 15–22, taking into account the nature of processing and information available to FastPrototype.ai, within the timeframes required by law.

6. Data Breach

FastPrototype.ai shall notify the Client without undue delay (and no later than 48 hours) after becoming aware of a personal data breach affecting Client data, providing information to enable the Client to fulfil its GDPR breach notification obligations.

7. Deletion & Return

Upon termination of services, FastPrototype.ai shall, at the Client's choice, delete or return all personal data and certify deletion in writing, unless EU law requires retention.

8. GDPR Article 9 — Special Category Data

FastPrototype.ai does not routinely process special category data (health, biometric, religious, etc.) as part of project delivery. Where a project requires processing of special category data, the Client must notify FastPrototype.ai in advance, and additional contractual safeguards and a DPIA may be required before work commences.

AI Systems Used

FastPrototype.ai utilises the following AI systems in service delivery: (a) Scope Analysis: Large Language Models (LLMs) from Anthropic (Claude) to analyse project descriptions, generate scope of work documents, and estimate complexity. (b) Code Generation: AI code generation agents to produce MVP code components. (c) Quality Review: AI-assisted code review tools. Human Senior Developers review and validate all AI-generated outputs before delivery.

Risk Classification

FastPrototype.ai's use of AI is classified as Limited Risk under the EU AI Act for most standard MVP projects. FastPrototype.ai does not deploy AI in high-risk categories (Annex III) as part of its standard service. However, if a Client requests development of high-risk AI systems, FastPrototype.ai will advise of applicable obligations and may require additional contractual provisions.

Human Oversight

In compliance with EU AI Act Article 14, all AI-generated scope documents and code outputs are reviewed by qualified human Senior Developers before delivery. Clients are informed that AI generated the initial scope, enabling them to evaluate and raise concerns before payment.

Transparency Obligations

FastPrototype.ai clearly discloses AI involvement in the service (on this page, in proposals, and in project summaries). Clients interacting with AI-generated content are informed of its AI origin. FastPrototype.ai does not use AI systems for prohibited purposes under EU AI Act Article 5.

GPAI Provider Compliance

FastPrototype.ai's GPAI providers are required to comply with EU AI Act GPAI obligations (effective August 2025), including technical documentation, transparency, and copyright compliance. FastPrototype.ai maintains audit logs of AI system usage and can provide these to supervisory authorities upon lawful request.

FastPrototype.ai is committed to making its services accessible to all users, in compliance with the European Accessibility Act (Directive 2019/882) and WCAG 2.1 Level AA standards.

Scope of Commitment

This website (fastprototype.ai) aims to meet WCAG 2.1 AA criteria. MVPs delivered to Clients are built with accessibility best practices; however, full accessibility audits and remediation are the Client's responsibility prior to commercial launch of consumer-facing software.

Known Limitations

As an MVP platform, some components may not yet be fully accessible. We prioritise and continuously improve accessibility. If you experience accessibility barriers, please contact accessibility@fastprototype.ai.

Feedback & Enforcement

You have the right to lodge a complaint with the national accessibility enforcement body in your EU member state if you believe this site or a delivered product does not comply with accessibility requirements.

This policy explains how FastPrototype.ai ("we", "us") collects, uses, and protects personal data in full compliance with the EU General Data Protection Regulation (GDPR) 2016/679.

Data Controller

FastPrototype.ai (EU-registered entity) is the Data Controller for data processed through this website. Contact: gdpr@fastprototype.ai

What We Collect & Why

Your Rights (GDPR Articles 15–22)

• Access (Art. 15): Request a copy of your data
• Rectification (Art. 16): Correct inaccurate data
• Erasure (Art. 17): Request deletion (see GDPR endpoint below)
• Portability (Art. 20): Receive data in machine-readable format
• Objection (Art. 21): Object to legitimate interest processing
• Restriction (Art. 18): Restrict processing during disputes
• Complaint: Lodge a complaint with your national DPA (e.g., CNIL, BfDI, ICO)

International Transfers

Where data is transferred outside the EEA (e.g., to AI model providers in the US), FastPrototype.ai relies on Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where applicable.

GDPR Data Requests

Or email: gdpr@fastprototype.ai