Privacy Policy
Last updated: February 16, 2026
1. Background
At FirstIgnite (“FirstIgnite”, “Company”, “we”, “us”, or “our”), we are committed to protecting the privacy, security, and confidentiality of your personal information. We do this in accordance with applicable laws, including the General Data Protection Regulation (EU GDPR) and the AICPA SOC 2 Privacy and Confidentiality Principles.
FirstIgnite is responsible for the operation of this website and is the data controller of personal data collected through the website, www.FirstIgnite.com (the “Site”).
By using the Site, you acknowledge that you:
- have read and understood this Privacy Policy; and
- agree and consent to the collection, use, and disclosure of your data in accordance with this Privacy Policy.
If you do not agree with this Privacy Policy, please do not use the Site or provide us with personal information.
2. Purpose
This Privacy Policy explains:
- what personal data we collect;
- how we collect, use, and disclose personal data;
- how we safeguard, store, and retain personal information;
- how to request access, correction, or deletion of your data; and
- how to contact us with questions regarding this policy or our privacy practices.
3. Data We Collect
The type of information we collect depends on how you use the Site. Personal information is information that can reasonably be used to identify you.
We may collect the following categories of data:
- Identity Data: full name, email address, phone number, company name.
- Technical Data: IP address, browser type, operating system, internet service provider, referring and exit pages, date and time of access, and information collected through cookies and similar technologies.
- Transactional Data: billing details and payment information processed through third-party payment providers.
4. How We Collect Your Data
We collect personal data through:
- information you provide directly when contacting us;
- billing and payment services;
- automatic collection of technical data through cookies, logs, and similar technologies.
5. Legal Basis for Processing
We collect and process personal data under one or more of the following legal bases:
- Consent – where you have provided permission;
- Contractual necessity – to provide services or fulfill agreements;
- Legitimate interests – including security, fraud prevention, and service improvement;
- Legal obligation – to comply with applicable laws.
Failure to provide certain data may limit access to parts of the Site or services.
6. How We Use Your Data
We use personal data only for the following purposes:
- to provide information about our services;
- to respond to inquiries, messages, and support requests;
- to process payments and fulfill contractual obligations;
- to operate, secure, and improve the Site and services;
- to comply with legal obligations.
Use of Artificial Intelligence and Machine Learning
FirstIgnite does not use customer data, user inputs, uploaded content, or personal information processed through the Site or services to train artificial intelligence or machine learning models. Such data is used solely to provide the requested services and is not disclosed or sold for model training or unrelated purposes.
7. Disclosure of Your Personal Data
Access to personal data is limited to employees and third-party service providers on a need-to-know basis and only for the purposes described in this Privacy Policy. All third parties are required to maintain appropriate safeguards and comply with applicable privacy laws.
We do not sell, trade, or transfer personal data for commercial or marketing purposes.
We may disclose personal data in the following circumstances:
- Business Transactions: In the event of a merger, acquisition, asset sale, bankruptcy, or similar transaction, personal data may be transferred as part of the transaction. Any successor entity will be bound by obligations consistent with this Privacy Policy.
- Legal and Safety Requirements: To comply with court orders, subpoenas, or other lawful requests, or to protect the rights, property, or safety of FirstIgnite, our users, or others.
Sub-processors
We engage certain third parties as data sub-processors, including:
| Entity | Purpose | Location |
|---|---|---|
| Stripe | Agreements and payments | USA |
| HubSpot | Customer relationship and support | USA |
| User-authorized communication and scheduling features | USA | |
| Intercom | Customer support and messaging | USA |
| Mixpanel | User analytics and performance tracking | USA |
| Segment | User analytics and event routing | USA |
| PostHog | Product analytics | USA |
| Vitally | Customer success management | USA |
| PandaDoc | Contract automation and e-signature | USA |
| Canny | Feedback management | USA |
| Atlas | Support request management | USA |
8. Data Storage and International Transfers
We store personal data on our own servers or those of our cloud service providers. Third-party providers may not use personal data except as permitted under this Privacy Policy.
Personal data may be transferred to and stored in countries outside your country of residence, including the United States and Canada. When transferring data outside the EEA, we implement appropriate safeguards in accordance with applicable law.
9. Data Retention
We retain personal data only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, regulation, or contract. Personal data is securely deleted or de-identified once retention requirements are met.
Retention of Google User Data
Google user data accessed via connected accounts is retained only for as long as necessary to provide enabled features or comply with legal obligations. Users may revoke access at any time, after which FirstIgnite will cease access and delete or de-identify retained Google user data in accordance with our retention policies.
10. Data Security and Protection
We use appropriate organizational, administrative, and technical measures to protect personal data against loss, unauthorized access, alteration, or disclosure.
Data obtained through Google API Services is encrypted in transit and at rest and protected using access controls, logging, and monitoring consistent with industry standards.
No method of transmission or storage is completely secure, and users should exercise discretion when sharing information online.
11. Marketing
We may send information about our products and services where permitted by law. You may opt out of marketing communications at any time.
12. Your Data Protection Rights
You have the right to:
- be informed about data processing;
- access your personal data;
- request correction or deletion;
- restrict or object to processing;
- request data portability; and
- withdraw consent at any time.
Requests may be submitted to [email protected].
13. Cookies and Tracking Technologies
We use cookies and tracking pixels to recognize users, understand usage patterns, and improve the Site.
You may disable cookies through browser settings, though some features may not function correctly. Browser-level controls may limit tracking but may not prevent all data collection. The Site does not respond to “Do Not Track” signals.
14. Google Services and Google User Data
14.1 Google Analytics
We use Google Analytics to collect anonymous information about Site usage, such as pages visited and time spent on the Site. This data is shared with Google and used in accordance with Google’s privacy policies.
14.2 Google Account Connections
If you choose to connect your Google account, including Gmail and Google Calendar, we will access specific Google user data only with your authorization.
Data accessed may include email metadata and content, calendar events, and related account information, solely to enable user-facing features such as communication workflows, scheduling, reminders, and summaries that you explicitly activate.
FirstIgnite’s use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Google user data is:
- used only for visible, user-facing features;
- not sold, shared, or used for advertising;
- not used for profiling, surveillance, or credit-worthiness decisions.
14.3 Access, Retention, and Revocation
Human access to Google user data is permitted only:
- with explicit user consent;
- for security or abuse prevention;
- to comply with legal obligations; or
- where data is aggregated or anonymized for internal operations.
Users may revoke Google account access at any time. Upon revocation, access will cease and data will be deleted or de-identified.
15. Privacy Policies of Other Websites
The Site may link to third-party websites or services. This Privacy Policy applies only to our Site. We are not responsible for third-party privacy practices.
16. Children’s Privacy
Our services are not directed to children under 18. We do not knowingly collect personal data from children.
17. Contact Details
For questions, requests, or privacy concerns, contact:
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on the Site and become effective upon publication.
