Privacy Policy

1. Information we collect

Information you provide

When you use our contact form, we may collect your name, work email, company, company website, company size and revenue range, job title, phone number, areas of interest, budget range, referral source, and the message you choose to send. We also receive information you provide by email, phone, calendar booking, video meeting, or another direct communication.

Signed-client intake information

When an authorized client uses our private intake page, we may collect contact and company details, project and workflow descriptions, systems involved, frequency, staffing and time estimates, recurring problems, desired outcomes and success measures, target timing, general information classifications, the approval owner, time zone, kickoff availability, and security or compliance considerations. We use this information to prepare kickoff and establish the client's project workspace. The intake asks for classifications and high-level descriptions—not passwords, access credentials, or raw regulated records.

Active-client request information

Active clients may submit contact, company, project, request, urgency, timing, workflow, and business-impact details through our private request page. They may also attach a limited number of approved image, PDF, text, or CSV files. These details create a task in FirmPoint's private project workspace for review and follow-up. The form instructs clients not to submit credentials, financial account details, health information, legal files, or other regulated or highly sensitive records.

Website and conversion information

We use Cloudflare Web Analytics for aggregate traffic and performance measurement. Cloudflare states that this service does not collect or use visitors' personal data or track individual users across customer properties. We also record limited first-party events—such as a page view, form start, successful form submission, booking click, phone click, or email click—to understand whether the website works as intended.

Our conversion dataset may include the event name, page path, link or form placement, referring hostname, campaign parameters, and a broad device category. It is designed not to store form contents, names, email addresses, phone numbers, cookie identifiers, or advertising profiles.

For visits that Cloudflare identifies as originating in the United States, we use Google Analytics 4 by default to understand page visits and a limited set of actions, such as a successful inquiry, booking click, phone click, or email click. Google Analytics stays off by default for visits identified outside the United States unless the visitor enables it through the analytics preferences control. This measurement may include a pseudonymous browser identifier, page path, sanitized campaign parameters, referring page without query parameters, browser or device information, and approximate location derived from technical request data. FirmPoint does not send names, email addresses, phone numbers, form contents, User IDs, or other information you enter in the contact form to Google Analytics.

Infrastructure and security information

Like most websites, our hosting, security, form, and communications providers may process technical information needed to deliver and protect their services. This can include an IP address, browser and device type, request date and time, referring or requested page, diagnostic data, and signals used to detect spam or abuse. FirmPoint does not use that information to build advertising profiles.

Cookies

When enabled, Google Analytics uses first-party _ga cookies to distinguish browser sessions. FirmPoint configures those cookies to expire no later than 13 months after they are first set and not to renew their expiration on each page load. We keep advertising storage, advertising user data, ad personalization, and Google Signals disabled. An explicit analytics preference is saved in this browser for up to six months so the site can remember it. Infrastructure providers may still use strictly necessary technologies to deliver, secure, or protect their services.

2. How we use information

We use information to:

• review and respond to inquiries;
• schedule and conduct calls or meetings;
• evaluate whether a potential engagement may be a fit;
• prepare requested information, proposals, or service discussions;
• prepare signed-client kickoff, baselines, and project work;
• triage, track, and respond to active-client requests;
• operate, secure, troubleshoot, and improve the website;
• measure aggregate traffic and conversion performance;
• prevent spam, fraud, abuse, and security incidents; and
• comply with legal obligations and protect legitimate rights.

We do not sell personal information. We do not use information submitted through this site for cross-context behavioral advertising, and we do not share it for that purpose.

3. Service providers and disclosures

We use a small number of providers to operate this website and respond to inquiries. They may process information only as needed to provide their services or meet legal obligations:

• Cloudflare provides website hosting, delivery, security, Web Analytics, the first-party conversion dataset, and transactional delivery of website-inquiry acknowledgments.
• Google Workspace supports email, calendar appointment scheduling, and Google Meet. Information entered into a Google booking flow is also handled under Google's own terms and privacy policy.
• ClickUp provides FirmPoint's private project and task workspace. A general website inquiry creates or updates a private lead task, a signed-client intake creates an onboarding task, and an active-client request creates a request task with any approved optional attachments, so the FirmPoint team can review and respond.
• Google Analytics provides website measurement for United States visits by default and for other visits only when the visitor enables it. Google processes the resulting technical, device, traffic-source, and interaction data under its own terms and data protection practices.

We may also disclose information when reasonably necessary to comply with law, respond to lawful process, protect rights or safety, investigate misuse, or support a business reorganization or transfer. We do not give service providers permission to use inquiry information for their own advertising on our behalf.

Provider policies are available from Cloudflare and Google.

4. Retention

We retain inquiry, signed-client intake, active-client request, project, and communication information only for as long as reasonably necessary to respond, evaluate or manage a business relationship, maintain appropriate records, resolve disputes, secure our services, and meet legal obligations. Retention periods can vary based on the nature of the communication and whether an engagement follows.

Our providers may maintain their own operational, security, backup, and legal retention schedules.

Google Analytics user-level and event-level data is configured for a 14-month retention period. Standard aggregated reports may be retained separately under Google Analytics' reporting rules.

5. Your choices and privacy rights

You may ask us to provide access to, correct, or delete personal information associated with you. You may also ask how we use or disclose that information. We may need to verify your identity and may retain information when permitted or required by law.

Residents of California and other jurisdictions may have additional rights under applicable law, including rights to know, delete, correct, opt out of certain sales or sharing, limit certain uses of sensitive information, and receive equal treatment when exercising privacy rights. FirmPoint does not sell personal information or share it for cross-context behavioral advertising.

To make a request, email team@firmpoint.aiwith the subject line “Privacy Request.”

You can review or change Google Analytics at any time through “Manage analytics preferences” in the site footer. Turning analytics off blocks future Google Analytics events and removes available Google Analytics cookies from this browser; it does not retroactively remove data already included in prior or aggregated reports. The choice applies only to the browser and device where you make it.

6. Security and third-party links

We use reasonable administrative, technical, and organizational measures intended to protect information. No online transmission or storage method is completely secure, so we cannot guarantee absolute security.

This site may link to third-party websites or services. Their privacy practices are governed by their own policies, not this one.

7. Children and international visitors

This website is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this site.

If you access the site outside the United States, your information may be processed in the United States and other locations where our service providers operate, subject to applicable law and provider safeguards.

8. Changes to this policy

We may update this Privacy Policy as our services, providers, or legal obligations change. We will post the revised policy here and update the date at the top of the page. Material changes may be communicated by additional means when appropriate.

9. Contact us

Questions or privacy requests can be sent to team@firmpoint.ai or directed to FirmPoint LLC in Glendale, California.