Privacy

Updated October 4, 2026. Contact [email protected] with privacy questions or to request human assistance.

Information we use

We use account and billing references, public firm information and customer corrections, website content and assets, site activity, inquiries, and saved chat transcripts to build, host, maintain, and measure your website. Payment details are handled by Stripe. We store payment references and subscription status, rather than full card numbers.

Inquiries and support access

Visitors’ inquiries are saved and sent to the firm’s verified notification address. Authorized firm owners and team members can access inquiries and transcripts. FirmFront operators can access customer information when needed to provide support, deliver the service, and investigate failures. The founder receives operational failure alerts and, when enabled, a two-day inquiry summary containing the firm, time, source, name, practice area, and a short matter excerpt. Summary emails omit contact details and full transcripts. Visitors should avoid sending sensitive documents or confidential details through initial intake.

Service providers

We use Supabase for accounts and database storage, Cloudflare and our build hosting provider for website files and processing, Stripe for payments, Resend for email, and Lob for approved postcards. Google Places and search/scraping services help gather public firm information and measure performance. AI and image-generation providers process the information needed for requested website generation, edits, intake replies, or support. These providers process data for their respective services.

Retention and control

Saved inquiries and chat transcripts remain available while the account exists, including after subscription cancellation. Owners can request exports and account deletion from Settings. Support verifies the active owner, provides site content and portable files separately from inquiries/transcripts, and completes deletion after subscription-cancellation requirements are satisfied. Hosted forms and chat need replacement services when a site is exported.

Operational email and audit records are retained for 90 days, with personal payloads removed where practical. Backups expire separately under the deployment’s backup schedule; deleting active data does not immediately erase retained backups. We use necessary session storage for account access and site functionality, and record page views, phone clicks, and inquiry attribution to provide reports. Page views and phone clicks do not establish unique visitors or completed calls.

FirmFront does not sell inquiry information. Contact support to correct information, request an export, or arrange deletion. A firm may also provide its own notices and retention practices for information received in its inbox or other systems.