Privacy Policy

This policy explains what FirstClient collects, why we collect it, and what control you have over it. FirstClient ("we", "us") operates FirstClient.

1. Information you give us

• Account details. Your email address, and a password if you sign up with one. Passwords are hashed and stored by our authentication provider — we never see or store your password in readable form.
• Google sign-in. If you use "Continue with Google", we receive your email address and basic profile identifier from Google. We do not receive your Google password and we do not get access to your Gmail, Drive, or contacts.
• Anything you send us. If you email support, we keep that correspondence so we can help you and refer back to it.

2. Information we generate as you use the service

• Search history. For each search we store the city, the business type, and the time it ran. We use this to show your recent activity, count usage against your plan limit, and understand which features get used.
• Saved leads. When you save a lead, we store that business listing's details and its computed scores against your account so the list is there when you return.
• Plan status. Whether your account is on the free or paid tier.

3. Business listing data

Search results come from the Google Places API — the same public business listings that appear on Google Maps. That information (business name, address, phone number, rating, review count, website) is published by the businesses themselves for the purpose of being contacted by customers. It is business contact information, not your personal data, and we retrieve it live at search time rather than maintaining our own harvested database of it.

We do not enrich these listings with personal data about individuals, and we do not attempt to identify specific people behind a business listing.

4. How we use your information

• To create and secure your account and keep you signed in.
• To run searches, score results, and save the leads you choose to keep.
• To enforce plan limits and, for paid plans, to bill you correctly.
• To respond to support requests.
• To diagnose errors and improve how the product works.

5. Service providers we share data with

We keep this list short on purpose. Each provider only receives what it needs to do its job.

• Supabase — hosts our database and handles authentication. Your account, search history, and saved leads are stored there.
• Google (Places API) — receives the search terms needed to return business listings. Requests are made from our server, so your Google account identity is not attached to them.
• Payment processor — when paid plans are available, a third-party processor will handle checkout and billing. Card details go directly to them; we never receive or store full card numbers.

6. We do not sell your personal data

We do not sell, rent, or trade your personal information, and we do not share it with advertisers or data brokers. We may disclose information if we are legally required to, or where necessary to protect our rights or the safety of others.

7. Cookies and local storage

We use browser storage for signing you in and for caching recent search results so repeating a search doesn't cost you an extra API call. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for the full breakdown.

8. Data retention and deletion

We keep your account data for as long as your account exists. You can delete individual saved leads at any time from the Saved Leads page. To delete your account and everything attached to it, email us at privacy@firstclient.app and we will action it. Some records may be retained where we are legally required to keep them, such as billing records for tax purposes.

9. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it if it's wrong, request a copy of it, ask us to delete it, or object to certain processing. To exercise any of these, contact privacy@firstclient.app. We will not charge you for making a request or treat you differently for exercising these rights.

10. Security

Data is transmitted over encrypted connections and stored with access controls that restrict each account to its own records. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you if a breach affects your data.

11. Children

FirstClient is a business tool and is not directed at anyone under 18. We do not knowingly collect personal information from children.

12. Changes to this policy

If we make a material change, we will update the date at the top of this page and, where appropriate, notify you by email. Continuing to use the service after a change means you accept the updated policy.

13. Contact us

Questions about privacy? Email privacy@firstclient.app, or write to us at FirstClient, [COMPANY ADDRESS].