Privacy Policy

SeeFirst seefirst.io Effective Date: 19 June 2026

1. Introduction

This Privacy Policy explains how SeeFirst ("we," "us," "our") collects, uses, stores, and protects information when you use our platform at seefirst.io ("Service"). By using the Service you agree to the practices described in this policy.

2. Information We Collect

Account Information When you sign up we collect: your name, email address, business name, and payment information (processed securely by Stripe — we never store full card details).

Client and Competitor Data If you are an agency you may input information about your clients including: business name, business type, location, contact email, and website URL. You may also input competitor information including business names, website URLs, and Google Place IDs.

Automatically Collected Data We automatically collect: Google Places data (ratings, reviews, business information) for monitoring purposes, website content snapshots for change detection, and basic usage data such as login times and feature usage.

Cookies We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

3. How We Use Your Information

We use the information we collect to:

Provide and operate the Service
Generate competitor intelligence briefings and weakness reports using AI
Send alert notifications about competitor activity
Process payments and manage subscriptions
Communicate with you about your account, billing, and service updates
Improve and maintain the reliability of the Service
Comply with legal obligations

4. Data Controller and Data Processor Roles

Where you are an agency inputting your clients' business information, you act as the Data Controller for that information and SeeFirst acts as the Data Processor, processing it solely on your behalf and instructions to provide the Service.

Where you are a direct business user, SeeFirst acts as the Data Controller for your account information.

5. Third Party Services

We rely on the following third party services to operate SeeFirst. Each has its own privacy practices:

Supabase — database, authentication, and backend infrastructure
Vercel — application hosting
Stripe — payment processing
Resend — transactional email delivery
Google Places API — competitor ratings and business data
Anthropic (Claude AI) — generating intelligence briefings and weakness reports

We do not sell your personal data to any third party. Data is shared with these providers solely to operate the Service.

6. Data Storage and Security

Your data is stored on Supabase infrastructure with industry-standard security measures including encryption in transit and at rest, and row-level security policies restricting data access to authorised users only.

While we implement reasonable security measures, no system can be guaranteed completely secure. See our Terms of Service for further details on this point.

7. Data Retention

We retain your data for as long as your account remains active. Upon cancellation of your subscription:

Your data remains accessible for a 30-day grace period
You may export your data at any time during this period via your Settings page
After 30 days all data is permanently and irreversibly deleted from our systems

You may also request immediate deletion of your data at any time by emailing hello@seefirst.io. We will action such requests within 7 days.

8. Your Rights Under GDPR

If you are located in the European Union or European Economic Area you have the following rights regarding your personal data:

Right to access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data (see Section 7)
Right to data portability — request your data in a portable format (available via the Export function in Settings)
Right to object — object to certain processing of your data
Right to withdraw consent — where processing is based on consent

To exercise any of these rights please contact us at hello@seefirst.io.

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data please contact us at hello@seefirst.io and we will delete it.

10. International Data Transfers

Our service providers may process data in countries outside of Ireland or the EEA, including the United States. Where this occurs we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected in accordance with GDPR requirements.

11. AI-Generated Content and Data Processing

Briefings and weakness reports are generated using Anthropic's Claude AI models. Data submitted for this purpose (competitor information, business details, review content) is processed by Anthropic solely to generate your reports and is subject to Anthropic's own data processing terms.

We do not use your data to train AI models.

12. Data Breach Notification

In the event of a data breach affecting your personal data we will notify you and the relevant supervisory authority without undue delay, in accordance with GDPR requirements, where the breach is likely to result in a risk to your rights and freedoms.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

We will update the Effective Date at the top of this page
We will notify you by email of material changes at least 14 days before they take effect
Continued use of the Service after changes take effect constitutes acceptance of the updated policy

14. Data Processing Agreement

Agencies requiring a formal Data Processing Agreement (DPA) for compliance purposes may request one by emailing hello@seefirst.io.

15. Contact Us

For any questions about this Privacy Policy or to exercise your data rights please contact us at:

Email: hello@seefirst.io Website: seefirst.io