Skip to content

Privacy Policy

SeeFirst seefirst.io Effective Date: 18 October 2026

1. Introduction

This Privacy Policy explains how SeeFirst ("we," "us," "our") collects, uses, stores, and protects personal data when you use our platform at seefirst.io ("Service"), and when we contact businesses about the Service. SeeFirst is a business-to-business service for marketing agencies and businesses.

2. Information We Collect

Account Information When you sign up we collect: your name, email address, business name, and payment information (processed securely by Stripe; we never store full card details).

Client and Competitor Data If you are an agency you may input information about your clients including: business name, business type, location, contact email, and website URL. You may also input competitor information including business names, website URLs, and Google Place IDs.

Publicly Available Business Data To monitor competitors we collect publicly available business information: Google listing data (rating, review count, business details and a small sample of public reviews) through the Google Places API, and the public text of competitor websites. Public reviews can include the reviewer's public display name. We keep review text and reviewer names for no more than 30 days; ratings and review counts are kept as part of your monitoring history.

Connected Google Business Profile If you choose to connect your own Google Business Profile, we access the listing data you authorise so we can show it in your dashboard. You can disconnect at any time.

Sales Prospect Data We research businesses that may benefit from SeeFirst using publicly available business information (such as business name, website, published business email address and public listing details) and may send a small number of business emails about the Service.

Usage and Technical Data Login times, feature usage and error diagnostics needed to run and secure the Service.

Cookies We use essential cookies required for authentication and session management. Optional product analytics and browser performance monitoring stay off until you choose them on the cookie banner. We do not use advertising or tracking cookies.

3. How We Use Information and Our Lawful Bases

  • Providing the Service (accounts, monitoring, alerts, briefings, reports, support): performance of our contract with you.
  • Billing and subscriptions: performance of our contract, and legal obligations for tax and accounting records.
  • Monitoring public competitor information (including public reviews and websites): our and our customers' legitimate interests in understanding their local market. We limit this to business information, keep review text briefly, and never use it to profile individual reviewers.
  • Security, fraud prevention and reliability: legitimate interests.
  • Contacting businesses about SeeFirst: legitimate interests in business-to-business marketing, only where the law allows it without prior consent. Every email explains how to opt out, and opt-outs are honoured permanently.
  • Optional analytics and performance monitoring: your consent, which you can withdraw at any time from the cookie banner.

4. Data Controller and Data Processor Roles

Where you are an agency inputting your clients' business information, you act as the Data Controller for that information and SeeFirst acts as the Data Processor, processing it solely on your instructions to provide the Service under the Data Processing Agreement in our Terms of Service. Where you are a direct business user, and for account, billing, prospect and public monitoring data, SeeFirst acts as the Data Controller.

5. Service Providers (Sub-processors)

We use the following providers to operate SeeFirst. Each processes data only to provide its service to us:

  • Supabase: database, authentication, file storage and scheduled jobs (EU region)
  • Vercel: application hosting
  • Stripe: payment processing
  • Resend: transactional email delivery
  • Zoho Mail: business email correspondence
  • Google (Places API and Business Profile API): business listing data
  • Cloudflare (Browser Rendering): loading public competitor web pages
  • Brave Search API: finding online competitors from search terms
  • OpenAI: AI-written summaries, briefings and reports
  • DeepSeek: back-up AI provider, used only while our primary AI provider is not configured
  • TypeSafe: experimental quality checks on detected website changes (public website text only)
  • Sentry: error monitoring

We do not sell personal data.

6. Data Storage and Security

Your data is stored on Supabase infrastructure with encryption in transit and at rest, and row-level security policies restricting data access to authorised users only. Backups are encrypted. No system can be guaranteed completely secure; see our Terms of Service.

7. Data Retention

  • Account data: kept while your account is active. After cancellation it stays accessible for a 30-day grace period so you can export it, then it is permanently deleted from our live systems. Encrypted backups containing it expire within a further 30 days.
  • Public review text and reviewer names: deleted after 30 days.
  • Sales prospect data: kept while there is a realistic prospect of a business relationship, normally no longer than 24 months. Opt-out records are kept so we never contact that address again.
  • Billing records: kept as long as tax and accounting law requires.

You may request deletion of your data at any time by emailing hello@seefirst.io. We action such requests within 7 days, subject to records we must keep by law.

8. Your Rights

Under the GDPR and UK GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests (including all direct marketing), and to withdraw consent where processing is based on consent. To exercise any right please contact hello@seefirst.io. You can also complain to your local data protection authority (for example the Irish Data Protection Commission or the UK Information Commissioner's Office).

If you received a business email from us, you can reply "unsubscribe" at any time and we will not contact you again.

9. Children's Privacy

The Service is for businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data please contact us at hello@seefirst.io and we will delete it.

10. International Data Transfers

Some providers process data outside the UK and EEA, including in the United States. Where this happens we rely on an adequacy decision (including the EU-US Data Privacy Framework where the provider is certified) or the European Commission's Standard Contractual Clauses and the UK Addendum. If our back-up AI provider DeepSeek is used, data sent to it may be processed in the People's Republic of China, which has no adequacy decision; we keep that use to a minimum and send it only the business information needed for the task.

11. AI-Generated Content

Summaries, briefings and weakness reports are generated by AI models from the evidence we have collected (competitor information, public website text, business details and short public review excerpts). AI output is labelled as analysis, is never presented as an observed fact, and is not used to make decisions with legal or similarly significant effects on individuals. We do not use your data to train AI models, and OpenAI does not use API data for training by default.

12. Data Breach Notification

If a personal data breach is likely to result in a risk to your rights and freedoms we will notify the relevant supervisory authority within 72 hours where required, and notify you without undue delay where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

  • We will update the Effective Date at the top of this page
  • We will notify account holders by email of material changes at least 14 days before they take effect

14. Data Processing Agreement

Agencies' processing of client data is governed by the Data Processing Agreement in Section 13 of our Terms of Service, which applies automatically. A signed copy is available on request at hello@seefirst.io.

15. Contact Us

For any questions about this Privacy Policy or to exercise your data rights please contact us at:

Email: hello@seefirst.io Website: seefirst.io

Privacy Policy | SeeFirst