Information we collect
When you create an account, we collect your name, email address, and organisation details. When you use the platform, we process the data you import — including CRM contact records, survey responses, and attribution text.
We also collect standard usage data: pages visited, features used, browser type, and IP address. This helps us improve the product and diagnose issues.
How we use your data
We use your data to provide and improve First Signals. Specifically: to classify attribution responses using AI, to generate analytics and reports, to manage your account, and to communicate with you about the service.
We do not sell your data. We do not use your data to train AI models. Your attribution data and customer records remain yours.
AI processing
First Signals uses third-party AI services (OpenAI, Anthropic) to classify free-text attribution responses into structured channels and entities. Only the raw attribution text is sent for classification — never names, email addresses, or other personally identifiable information.
AI providers process this data under their enterprise terms, which prohibit using customer inputs for model training.
Data storage and security
Your data is stored on Google Cloud Platform infrastructure in the EU (europe-west3, Frankfurt). All data is encrypted at rest and in transit. Sensitive fields — including contact names and email addresses — are encrypted at the application level using AES-256.
We maintain access controls, audit logging, and regular security reviews. Database backups are encrypted and retained for disaster recovery.
Data retention
We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.
You can request deletion of specific records at any time through the platform or by contacting us.
Your rights
Under GDPR and applicable data protection law, you have the right to: access your personal data, correct inaccurate data, request deletion, restrict processing, data portability, and object to processing.
To exercise any of these rights, contact us at privacy@firstsignals.ai. We will respond within 30 days.
Cookies
First Signals uses essential cookies for authentication and session management. We use a minimal analytics cookie to understand product usage. We do not use advertising or tracking cookies.
Third-party services
We use the following third-party services to operate First Signals: Google Cloud Platform (hosting and database), OpenAI and Anthropic (AI classification), SendGrid (transactional email), and HubSpot (CRM integration when enabled by you).
Each provider processes data under their respective enterprise agreements and privacy policies.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email or through the platform. Continued use of First Signals after changes constitutes acceptance of the updated policy.
Contact
For privacy-related enquiries, contact privacy@firstsignals.ai.
First Signals is a product of FirstSpark Technologies Ltd. Dubai, UAE.