Privacy Policy

1. What We Collect

When you create an account, we collect your name and email address. If you sign in with Google, we receive only the name and email associated with your Google account — we do not access any other Google data. If you register with email and password, we store your email and a hashed (never plain-text) version of your password.

When you use the FirmLink API, we log the timestamp and count of requests made under each API key. We do not log the content of search queries beyond what is necessary for rate-limit enforcement and billing.

We collect payment information only through Stripe. FirmLink never sees or stores your full card number — Stripe handles all payment processing.

2. How We Use Your Information

• To create and manage your account
• To process payments and manage your subscription
• To enforce API usage quotas and rate limits
• To send transactional emails (email verification, password resets, billing confirmations)
• To monitor service health and diagnose errors (via Sentry)

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Third-Party Services

FirmLink uses the following third-party services, each of which may process your data under their own privacy policies:

• Google OAuth — used for sign-in; governed by Google's Privacy Policy
• Stripe — payment processing; governed by Stripe's Privacy Policy
• Resend — transactional email delivery
• Sentry — error monitoring; error reports may include your user ID

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal information (name, email, hashed password, and API keys) is deleted immediately. Aggregated usage statistics and billing records may be retained for up to 7 years as required by law.

5. Cookies and Sessions

FirmLink uses a single session cookie (fl_session) to keep you signed in. This cookie contains only an encrypted session identifier — no personal information. It expires after 30 days of inactivity. We do not use tracking cookies or third-party analytics cookies.

6. Your Rights

You may delete your account at any time from the account menu in the top-right corner of any page. Deletion immediately removes your personal information from our systems.

To request a copy of your data or to report a privacy concern, contact us at [email protected].

7. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the effective date at the top of this page. Continued use of FirmLink after changes are posted constitutes acceptance of the revised policy.

8. Contact

FirmLinkAPI · [email protected]