Privacy Policy

Last updated: September 26, 2026

FirstFiling ("we", "us") turns public business filings into sales leads for the people who subscribe to it. This policy explains what information we collect, why, and what we do with it. We have tried to write it so you do not need a lawyer to understand it.

1. Information about our customers

When you sign up we collect what you type into the form: your company name, your name (optional), your email address, and the profile that describes your business and territory (what you sell, who you sell to, states, counties, cities, zip prefixes, filters, delivery preferences). As you use the dashboard we also store what you do with leads: the stage you put them in, notes, follow-up dates, your "useful" and "irrelevant" marks and the reasons you give, your suppression list, and any outreach drafts you generate.

We keep server logs and basic request records (such as IP address and time) for security, rate limiting and troubleshooting. We do not use advertising trackers or third-party analytics scripts on our pages.

2. Information about the businesses in your leads

The leads themselves come from public records: the business registries published as open data by state governments (currently the Colorado Secretary of State and the New York Department of State). Those records include the business name, entity type, filing date, addresses, and, where the state publishes them, the names of officers, organizers or registered agents. We copy those records, normalize them, and add automated classifications (an industry guess, a business kind, a short summary, and a fit score). We do not add phone numbers, email addresses, or any data about the people named in the filings beyond what the state published.

If you are named in a state filing and want to understand how it appears in FirstFiling, contact us at the address below. We cannot change the public record, but we can tell you what we hold and, where appropriate, stop showing it to our customers.

3. How we use information

• To run the service: match filings to your territory, score them, email you digests and reminders, and show them in your dashboard.
• To improve ranking for you: your "useful" and "irrelevant" marks and your profile shape what you see. We do not use your marks to build profiles of other customers.
• To bill you, once you choose a paid plan.
• To answer your support requests and to tell you about important changes to the service.
• To keep the service secure and to enforce our Terms.

We do not sell your information, and we do not sell or rent lists of the businesses in the registry to anyone. Customers only see leads that match their own territory.

4. Service providers we rely on

We use a small number of providers to run FirstFiling. Each receives only what it needs to do its job:

• Anthropic (Claude) classifies filings (industry, kind, summary) and, when you ask for one, writes an outreach draft. The filing details and, for drafts, your company name, your name and your description of what you sell are sent to Anthropic's API for that purpose. We do not send your email address or your notes.
• Resend delivers our email: sign-in links, digests and reminders. It receives your email address and the content of those messages.
• Stripe handles payments. Card details go directly to Stripe; we never see or store them. We keep Stripe's customer and subscription identifiers so we know what you have paid for.
• Cloudflare hosts the application and database.

We may disclose information if the law requires it, to protect the rights or safety of our customers or others, or as part of a sale or merger of the business (in which case this policy continues to apply to the information transferred).

5. Email

Sign-in links, digests, reminders and account notices are part of the service. You can change how often digests arrive or pause them in Settings. We do not send marketing email without asking first, and you can opt out of any marketing email at any time.

6. Cookies and local storage

We do not use tracking cookies. The dashboard stores a session token in your browser's local storage so you stay signed in. Signing out removes it; "Sign out everywhere" in Settings also invalidates it on our servers.

7. Keeping and deleting information

We keep your account information for as long as you have an account. You can download everything we hold about your account from Settings at any time. If you close your account, we delete your profile, leads, notes and suppression list within 30 days, except for records we must keep for tax, accounting or legal reasons. Registry records themselves are public and stay in our database.

8. Security

Sign-in uses one-time emailed links instead of passwords. Session tokens are stored hashed on our side. Traffic is encrypted in transit. No system is perfectly secure; if we learn of a breach affecting your information we will tell you as the law requires.

9. Your choices and rights

You can view and change your profile, delivery settings and suppression list in Settings, export your data, and ask us to delete your account. Depending on where you live you may have additional rights (for example to access, correct or delete personal information, or to object to certain processing). To exercise them, email us at the address below. We will respond within the time the applicable law allows.

10. Children

FirstFiling is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

11. Changes

If we change this policy in a way that matters, we will update the date above and, for significant changes, email account holders. Continuing to use the service after a change means you accept the updated policy.

12. Contact

Questions about privacy go to our support address. We are based in New York, United States.