Privacy Policy

We collect information you provide directly: name, email address, company name, billing information (processed securely by Stripe), and applicant data submitted through onboarding forms including business details, bank account information, and trade reference contacts. We also collect usage data such as page views, feature interactions, and error logs to improve our service.

We use your information to: provide and maintain the FirmVerify service, process credit application verifications, send email notifications related to verifications (bank references, trade references, status updates), process billing and payments, communicate with you about your account, improve and troubleshoot the platform, and comply with legal obligations.

We share data only as necessary to provide the service: verification emails sent to bank and trade references include the applicant's company name and consent PDF (only the specific reference can access their verification via a unique token); payment information is processed by Stripe and we do not store full credit card numbers; we may disclose information if required by law or to protect our rights. We do not sell personal data to third parties.

We retain your account information for as long as your account is active. Application and reference data are retained for the duration of your subscription plus a reasonable period thereafter for record-keeping purposes. You may request deletion of your data by contacting us, subject to legal retention requirements.

We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest, database access controls, and regular security reviews. Consent PDFs are generated with tamper-evident metadata. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to: access the personal data we hold about you, request correction or deletion of your data, object to or restrict processing, and data portability. To exercise these rights, contact us at [email protected].

FirmVerify uses Stripe for payment processing (their privacy policy applies to payment data), Resend for email delivery, and better-sqlite3 for local database storage. We are not responsible for the privacy practices of third-party services.

We use essential cookies for session management and authentication. We do not use tracking cookies or third-party analytics cookies. Session cookies are HTTP-only and expire after 7 days.

We may update this Privacy Policy from time to time. Material changes will be notified via email or through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, contact us at [email protected] or at 548 Market St, Suite 123, San Francisco, CA 94104.