FirstSell.ai

Privacy Policy

Last updated: May 11, 2026

1. Introduction

FirstSell ("we", "our", or "us") operates the FirstSell Chrome Extension and website at firstsell.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using FirstSell, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the service.

2. Data We Collect

We collect the following categories of data:

  • Account data: email address and Firebase UID used for authentication and account management.
  • ICP (Ideal Customer Profile): your target customer criteria and founder identity, stored encrypted in Firestore and used solely for prospect matching.
  • Prospect data: public social media profile information (names, titles, posts) that you choose to analyze via the extension. This data is processed to generate match scores and is cached temporarily.
  • AI-generated messages: personalized outreach messages created based on prospect activity and your founder voice. Stored in your account for review and editing.
  • Subscription and payment history: records of purchases processed through Stripe, including plan type and timestamp. No payment card data is stored by us.
  • Usage analytics: anonymized behavioral events (e.g., "profile analyzed", "message generated") collected via PostHog, hosted on EU servers. Session recordings may capture UI interactions with sensitive inputs masked.

3. How We Use Your Data

  • To provide AI-powered prospect matching against your ICP.
  • To generate personalized outreach messages based on prospect activity and your communication style.
  • To process payments and manage your subscription via Stripe.
  • To improve our product through aggregated, anonymized usage analytics.
  • To send transactional emails and — if you subscribed — product updates via Resend.

4. Third-Party Services

We use the following third-party services to operate FirstSell:

  • Google Gemini API: prospect profile data and social media posts are sent for AI analysis and message generation. Google does not use this data to train models under the API terms.
  • Stripe: payment processing for subscriptions. Subject to Stripe's Privacy Policy.
  • PostHog: product analytics hosted on EU servers (eu.i.posthog.com). Data retained for 90 days. Session recordings are enabled with all form inputs masked. Subject to PostHog's Privacy Policy.
  • Resend: transactional and product update email delivery. Subject to Resend's Privacy Policy.
  • Firebase (Google Cloud): authentication, database storage, and Cloud Functions. Subject to Google Cloud's Privacy Policy.

5. Data Sharing

We do not sell your personal data. We do not share your data with advertisers or marketing partners. Data is shared only with the service providers listed in Section 4, strictly to operate and improve FirstSell.

Important: Prospect data you analyze (public social media profiles) is processed by our AI provider (Google Gemini) solely to generate match scores and message suggestions. This data is not stored or used for any other purpose.

6. Data Retention

  • Account data (ICP, founder identity, subscription): retained until you request account deletion.
  • Prospect analysis cache: automatically deleted after 30 days.
  • AI-generated messages: stored in your account until manually deleted or account closure.
  • Analytics data: retained for 90 days on PostHog EU servers.
  • Backup data: retained for up to 30 days on Firebase.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the right to:

  • Access a copy of your personal data in JSON format.
  • Delete your account and all associated data.
  • Export your ICP, prospect list, and message history as JSON.
  • Opt-out of analytics by contacting us or using your browser's Do Not Track setting.
  • Withdraw consent at any time without affecting prior processing.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email contact@firstsell.ai.

8. Security

  • All data is transmitted over HTTPS / TLS.
  • ICP and founder identity data is encrypted at rest in Firestore.
  • Firebase security rules restrict access to authenticated users' own data only.
  • We conduct regular security reviews of our infrastructure.

9. Cookies & Tracking

  • PostHog analytics cookies: used to track anonymous usage patterns and session recordings. You may opt out via the cookie banner or by contacting us.
  • Firebase authentication tokens: stored in browser local storage to maintain your session.
  • We do not use advertising cookies or cross-site tracking pixels.

10. Children's Privacy

FirstSell is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us at contact@firstsell.ai and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the extension dashboard. The effective date at the top of this page will always reflect the most recent version.

12. Contact

For privacy questions or requests, contact us at: contact@firstsell.ai