Privacy Policy

Effective July 1, 2026 · Firmtree Inc., a Delaware corporation. Firmtree serves users in the United States only.

This policy describes how Firmtree collects, uses, discloses, and safeguards personal information when you use firmtree.com and our Services. We do not disclose personal information to third parties for money. Because Network Partners pay to receive the leads you submit, that disclosure may be considered a “sale” or “sharing” under some state laws — you can opt out below. We honor Global Privacy Control.

Categories we collect

Identifiers (name, email, phone, address, ZIP, company); commercial information (Services considered/bought; Business Idea Generator inputs — experience, budget, timeline, U.S. state, skills, interests; partner applications); internet/network activity (browser, device, IP, interactions); geolocation (general, from IP); inferences; communications (inquiries, messages, support, SMS opt-in numbers); Business Assessment intake (your website URL, documents you upload, and what you tell us by typing or voice — voice is transcribed and the audio deleted); meeting guests (names, titles, and emails of colleagues you ask us to invite); and account sign-in identifiers (your Google profile name and email when you sign in with Google, or your email address when you sign in by magic link).

Where we get it

From you (forms, accounts, inquiries, sign-ups); from your devices (cookies and similar technologies); from third-party vendors and partners; and from public records.

How we use it

To provide and support the Services; manage accounts; process payments (Stripe); route leads to Network Partners you choose to contact; communicate with you and send transactional messages (Resend) and opt-out marketing (ActiveCampaign); operate and improve our sites (Google Analytics 4); marketing/promotions; security, fraud prevention, and legal compliance.

When and to whom we disclose it

To companies providing requested services (Network Partners — the leads you submit); to vendors/service providers under contract (Stripe, ActiveCampaign, Resend, Google Analytics 4, DigitalOcean, Cloudflare (site security, content delivery, and the Turnstile bot check), Anthropic (Claude — AI features and assessment synthesis), OpenAI (Whisper — voice transcription), Google Workspace (Calendar & Meet), Google (account sign-in), OpenStreetMap Foundation (business office-address lookup), U.S. Census); to our corporate family; for legal/safety and lawful requests; and in business transfers (financing, due diligence, merger/acquisition, successor).

Do we sell or use data for targeted advertising?

We do not disclose personal information to third parties for money and do not use it for cross-context targeted advertising. The paid Network-Partner lead-sharing above may be treated as a “sale”/“sharing” under state law; you may opt out. We honor Global Privacy Control; we do not currently respond to Do-Not-Track.

Cookies & analytics

We use cookies for functionality and analytics (GA4). Control cookies via your browser and any cookie settings on the site.

Your U.S. privacy rights

Residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia may request access/confirmation, correction, and deletion; opt out of sale and targeted advertising; and appeal a denial. California residents (CCPA/CPRA) may know/access, delete, correct, limit sensitive-data use, and opt out of sale/sharing, with non-discrimination and authorized agents. Nevada residents may opt out of the sale of covered information. To exercise rights or opt out, email [email protected] (subject “Privacy Request”); appeals: “Data Privacy Appeal.” We verify identity before responding.

SMS / text messaging

If you opt in, we send account/transactional and (with consent) marketing texts via Resend. Reply STOP to opt out, HELP for help; message/data rates may apply; consent is not a condition of purchase. We do not share mobile opt-in data with third parties for their own marketing.

Business Assessment: bookings, recordings & uploads

When you book a free Business Assessment, we use what you provide — and, if you give us a website URL, a summary of your public site — to prepare for the call. If you answer by voice, we transcribe it and delete the audio; we keep only the transcript. Documents you upload are stored privately and used only to prepare for your assessment. Your meeting is scheduled on Firmtree’s Google Workspace calendar with a Google Meet link. Colleagues you ask us to invite receive the calendar invite only — we do not add them to marketing unless they opt in themselves. Booking is protected by Cloudflare Turnstile, a privacy-preserving bot check that analyzes browser signals instead of showing puzzles. After you book, we may look up your company’s public office address (for example, from your website) to prepare for the call; addresses are located using OpenStreetMap’s geocoding service. You may ask us to delete a transcript, uploaded file, or your office location at any time at [email protected].

Children

The Services are for adults 18+ and are not directed to persons under 16; we do not knowingly collect or sell their personal information and will delete it if discovered.

Security & retention

We use commercially reasonable safeguards, but no system is 100% secure. We keep personal information as long as needed for the purposes above or as required by law, then delete or de-identify it.

Third-party links & changes

Our sites may link to third-party sites we don’t control; their policies govern. We may update this policy; material changes are posted with a new effective date.

Contact

[email protected] · Firmtree Inc., c/o Business Filings Incorporated, 108 West 13th St, Wilmington, DE 19801.