Privacy Policy

firstreach (“firstreach”, “we”, “us”) provides an intent-based B2B lead service. This policy explains what personal data we process, why, and the rights you have. Questions: hello@firstreach.io.

Who we are

We are the data controller for our website and customer accounts, and act as a processor on behalf of our customers for outreach they run through us. We operate in the UK and US.

What we collect

• Account data from customers: name, work email, company, and login credentials.
• Business contact data we gather from public sources (e.g. job postings and company pages) to build hot leads: a decision-maker’s name, role, work email, and the public signal that triggered the match.
• Usage data: basic logs and essential cookies needed to keep you signed in.

Why we process it (lawful basis)

For customer accounts and billing, we rely on contract. For B2B prospect data and outreach, we rely on legitimate interests (identifying relevant businesses that are in-market), balanced against the rights of the individuals concerned. We process only business-context data and honour objections.

Sharing & subprocessors

We use trusted providers to run the service, including Supabase (database), Vercel (hosting), Resend and Google Workspace (email), and email-verification/enrichment providers. We do not sell personal data.

Retention

We keep account data for the life of the account and a reasonable period afterwards. Prospect data is refreshed and removed when it is no longer relevant or on request.

Your rights

You may request access, correction, deletion, or restriction of your data, and you may object to processing at any time. To opt out of outreach, use our unsubscribe page. To exercise any right, email hello@firstreach.io. You may also complain to your local supervisory authority (in the UK, the ICO).

International transfers & security

Data may be processed in the UK, EU, or US under appropriate safeguards. We protect data with encryption in transit, access controls, and tenant isolation.

Changes

We may update this policy and will revise the date above when we do.