Privacy policy
This policy explains what Firmstac collects on firmstac.com and in our service, why, and what control you have. We keep it short and plain. Questions go to hello@firmstac.com.
What we collect on this website
- What you send through the contact form: name, work email, firm, practice area, what you need and your message.
- Booking details when you schedule a call through Cal.com.
- Messages you type into the chat assistant. They are sent to our AI provider to write a reply. We do not store them.
- Basic technical data from our hosting provider, such as IP address, browser type and pages visited, kept in server logs.
Customer data in the product
When a firm connects its tools, we process its data only to provide the service to that firm. Data is encrypted in transit and at rest, only visible to people who can already see it in the source tool, and never used to train AI models. The AI providers we use are bound not to train on it. For this data the firm is the controller and we act as its processor under our agreement.
How we use information, and why we may
- To reply to you, run calls and prepare quotes, because you asked us to (steps before a contract).
- To provide, secure and improve the service, because we have a contract with your firm.
- To keep the website safe and working, because it is in our legitimate interest.
- We never sell or share personal data for advertising.
Who we share it with
Only the service providers we need to run Firmstac, under contracts that protect your data:
- Vercel: hosting and storage of contact form submissions.
- Cal.com: call scheduling.
- Anthropic: the AI model behind the chat assistant and the product.
- FormSubmit: delivering contact form submissions to our inbox.
Some of these providers are in the United States, so your data may be processed there. We also share data if the law requires it.
How long we keep it
Contact form messages are kept while we are in touch with you and deleted when you ask. Customer data is kept for as long as your firm's account is active and deleted when you disconnect a tool or ask us to delete your workspace.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it, at any time by emailing hello@firmstac.com. We reply within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority. If you are in California, you have the same rights and we do not sell or share your personal information.
Children
Firmstac is a service for businesses and is not meant for children under 16.
Changes
We will update this page if anything changes and show the new date at the top.