Privacy Policy

1. Introduction

FirstOps, Inc. ("FirstOps," "we," "us," or "our") operates the firstops.dev website and the FirstOps platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information you provide

• Account information — name, email address, and organization name when you create an account or request early access.
• Communications — any messages you send us via email or support channels.

Information collected automatically

• Usage data — pages visited, features used, timestamps, and referring URLs.
• Device data — browser type, operating system, and IP address.
• Cookies — we use strictly necessary cookies and optional analytics cookies. See Section 7.

Platform data

When you use the FirstOps platform, we process metadata about your agent connections, tool calls, and policy configurations. We do not inspect the content of messages passing through the FirstOps gateway. We process only the metadata necessary to provide visibility, governance, and audit capabilities.

3. How We Use Your Information

• To provide, operate, and maintain the Service.
• To communicate with you — respond to inquiries, send service updates, and share security advisories.
• To improve the Service — analyze usage patterns to improve performance, reliability, and user experience.
• To enforce policies — detect and prevent unauthorized access or abuse of the Service.
• To comply with legal obligations — respond to lawful requests from authorities.

4. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service providers — infrastructure hosting (AWS), authentication (Clerk), analytics, and email delivery services that process data on our behalf.
• Legal compliance — when required by law, regulation, or legal process.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Platform metadata (agent connection logs, audit trails) is retained according to your organization's configured retention policy. You may request deletion of your data at any time by contacting us.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies

We use strictly necessary cookies for authentication and session management. We may use optional analytics cookies to understand how visitors interact with our website. You can control cookie preferences through your browser settings.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to opt out of certain processing activities. To exercise these rights, contact us at privacy@firstops.dev.

9. International Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for cross-border data transfers.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

privacy@firstops.dev