Privacy Policy

Introduction

FirmOptic, operated by ThirtyNine Capital, LLC ("we," "us," or "our"), provides a cloud-based company intelligence platform. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our website, application, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Information We Collect

Account Information

When you create an account, we collect:

• Name
• Email address
• Company name
• Password (stored in hashed form)

Payment Information

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe may collect and store payment information in accordance with their own privacy policy.

Usage Data

We automatically collect information about how you interact with the Service, including:

• Pages and features accessed
• Search queries and company domains submitted for research
• Browser type, device information, and IP address
• Timestamps and session duration

Company Research Data

The Service collects and aggregates publicly available business information about companies you research. This includes data from government registries (e.g., SAM.gov, USAspending), court records, business directories, news sources, and public web content. This data relates to business entities, not individuals, and is sourced from public records and databases.

Contact Form Submissions

If you contact us through our website or email, we collect the information you provide, such as your name, email, company, and message content.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Improve and personalize the Service
• Communicate with you about your account, updates, and support requests
• Analyze usage patterns to improve product functionality
• Detect, prevent, and address security issues and fraud
• Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We use third-party service providers to operate the Service:

• Google Cloud Platform -- Hosting, data storage, and compute infrastructure. Data is processed and stored in the United States.
• Stripe -- Payment processing. Stripe handles payment data in accordance with PCI-DSS standards.
• Analytics providers -- We may use analytics tools to understand how the Service is used. These tools may collect anonymized or aggregated usage data.

Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.

Business Transfers

If ThirtyNine Capital, LLC is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes.

Company research data generated through the Service is retained to provide ongoing value to subscribers and may be retained in aggregated or anonymized form after account closure.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security reviews and monitoring
• Cloud infrastructure managed by Google Cloud Platform with SOC 2 compliance

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Opt-Out: Unsubscribe from marketing communications at any time using the link in our emails.

To exercise any of these rights, contact us at hello@firmoptic.com.

Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the Service is used. You can control cookie settings through your browser preferences.

Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

International Data Transfers

The Service is hosted in the United States on Google Cloud Platform. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

ThirtyNine Capital, LLC (d/b/a FirmOptic)
Email: hello@firmoptic.com