Privacy Policy

Who is responsible

AHEADWITHAI is the controller of the personal data described here. Contact us about privacy at support@firstsend.site.

What we collect

• Account details: your name and work email.
• Business details: company name, website, number of clients, how you plan to use cold email, where your leads come from and which sequencer you use. We use these to vet new accounts.
• Service data: the domains and inboxes we set up for you, their health, replacement requests, sequencer connections and sending limits.
• Billing details: your plan, payment history and invoices. Card details are collected and stored by Stripe; we only see the card brand, last four digits and expiry date.
• Technical data: information our providers log when you use the site, such as IP address, browser and timestamps, used for security and to fix problems.
• Messages: anything you send us by email.

We don’t read the content of emails sent from your inboxes, except where needed to investigate abuse or a technical problem. The people you email are your contacts: you are responsible for their data and for having a lawful basis to email them.

Why we use it, and our legal basis

• To create your account, set up and run the service, and bill you: to perform our contract with you.
• To vet accounts, monitor sending and prevent spam, fraud and abuse: our legitimate interest in keeping the service safe for all customers.
• To email you about your account, setup, billing and changes to our terms: to perform our contract.
• To keep records for tax and accounting: our legal obligations.

We don’t sell your data, and we don’t send marketing emails unless you have agreed to them.

Who we share it with

We use these providers to run Firstsend. Each only gets the data it needs:

• Supabase (database and sign-in), with data stored in the EU (Ireland).
• Stripe (payments and invoices).
• GitHub (hosts the website).
• Resend (sends sign-in links and account emails).
• Microsoft and domain registrars (to create your inboxes and domains).
• Your connected sequencers, when you choose to export inboxes to them.

Some providers are based in, or process data in, the United States. Where data leaves the UK or EU, we rely on adequacy regulations (such as the UK-US data bridge) or approved contract terms to protect it. We may also share data when the law requires it or to protect our rights or others’ safety.

How long we keep it

We keep your account data while your account is open and for up to 12 months after it closes, in case of disputes or abuse investigations. Billing records are kept for 6 years to meet UK tax rules. You can ask us to delete your account sooner; see your rights below.

Cookies and local storage

We don’t use advertising or tracking cookies. The site stores a sign-in token in your browser’s local storage so you stay logged in. This is essential for the service to work.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, to restrict or object to how we use it, and to receive a copy in a portable format. Email support@firstsend.site and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Security

Data is encrypted in transit and at rest by our providers. Customers can only access their own account data, and access to our admin tools is limited to staff who need it.

Changes

We will post any changes here and update the date at the top. If a change is significant, we will email you.