← FirstYes

Privacy Policy

Last updated: May 30, 2026

FirstYes ("we", "our", "us") is a B2B sales outreach platform for founders and small sales teams. This Privacy Policy explains how we collect, use, and protect your information when you use our service at firstyes.io.

1. Information We Collect

Account information: Name, email address, and role when you sign up.

Profile data: Company name, industry, booking links, and voice samples you add to personalise your outreach.

Contact data: Prospect names, emails, companies, and pipeline stages you enter into the platform.

Email connection: When you connect Gmail or Outlook, we store OAuth tokens to send emails on your behalf and detect whether sent emails received replies. We do not read, index, or store the content of your emails or your contacts' emails.

Usage data: Pages visited, features used, and error logs for product improvement.

2. How We Use Google User Data

When you connect your Gmail or Google Workspace account, FirstYes:

We request only the minimum scopes necessary: gmail.send and gmail.metadata. We do not access, read, store, or share the content of your Gmail messages or your contacts' messages. Google user data is used solely to operate the features you explicitly request and is never used for advertising or sold to third parties.

Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Microsoft User Data

When you connect your Outlook or Microsoft 365 account, FirstYes:

Microsoft user data is used solely to operate the features you request and is never sold or shared with third parties.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the EU (Ireland, eu-west-1 region). OAuth tokens are stored encrypted and are used only to make API calls on your behalf. We use HTTPS for all data in transit. We do not store email content.

5. Data Sharing

We do not sell your personal data. We share data only with:

6. Data Retention

We retain your data for as long as your account is active. You can delete your account and all associated data by contacting us at the email below. OAuth tokens are revocable at any time from your Google or Microsoft account settings.

7. Your Rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, email us at privacy@firstyes.in.

8. Cookies

We use session cookies strictly necessary to keep you logged in. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or a notice in the app. Continued use of FirstYes after changes constitutes acceptance.

10. Contact

Questions about this policy? Email us at privacy@firstyes.in.