Privacy Policy

FirstHold ("we", "us", "our") is a freelance business management platform operated by Paolo Cogliati LLC.

Contact: hello@firsthold.io

• Account information — name, email address, password (hashed — never stored in plaintext)
• Professional data you enter — booking records, client names, earnings figures, rates, invoice details, availability ranges
• Usage data — pages visited, features used, session duration — collected via Sentry session replay (10% of sessions) for product improvement
• Payment information — handled entirely by Stripe. We never store card numbers or payment credentials
• Tax estimation inputs — country, filing status, deduction amounts — stored to persist your settings across sessions

• To provide and improve the FirstHold service
• To calculate and display your earnings, statistics, and tax estimates
• To generate invoices on your behalf using information you provide
• To analyze aggregated, anonymized usage patterns and industry trends across our user base — this data cannot identify individual users
• To send transactional emails (account confirmation, subscription receipts) — we do not send marketing emails without explicit opt-in
• To detect and prevent fraud, abuse, and security incidents

We may derive anonymized, aggregated statistics from user data — such as average freelance day rates by discipline or market trends — with all personally identifiable information permanently removed. This data may be used internally for product development, published as industry benchmarks, or shared with third parties in aggregate form only. No individual user can be identified from this data.

• Supabase — database and file storage (US-based; EU data residency available)
• Stripe — payment processing, subject to Stripe's own privacy policy
• PDFMonkey — PDF generation; invoice data is sent to generate PDFs and is not stored by PDFMonkey beyond generation
• Google Gemini — AI parsing of uploaded files; file content is sent to Google's API for extraction and is not used to train Google models per Google's API terms
• Sentry — error monitoring and session replay; anonymized session data only
• Vercel — hosting and serverless functions; request data only

We do not sell your personal data to third parties.

• Active account data — retained for the lifetime of your account
• Deleted account data — EU users: erased immediately via in-app deletion in Settings. All other users: email hello@firsthold.io to request deletion; we process these requests within 30 days
• Aggregated anonymized data — retained indefinitely (contains no personal information)
• Stripe payment records — retained per Stripe's policy and applicable financial regulations

All users:

• Active subscribers can export bookings, invoices, earnings, and availability data via Settings → Export Your Data. Anyone can request a full copy of their data by emailing hello@firsthold.io, free of charge
• EU users can delete their account and all associated data immediately via Settings. All other users: email hello@firsthold.io to request deletion, processed within 30 days
• Correct inaccurate data by editing it directly in the app

EU/EEA users (GDPR):

• Right to data portability — available in-app for active subscribers (Settings → Export Your Data); free of charge for all EU users on request, regardless of plan
• Right to erasure ("right to be forgotten") — available in-app for EU users
• Right to restrict processing — contact hello@firsthold.io
• Right to object to processing — contact hello@firsthold.io
• Right to lodge a complaint with your local supervisory authority

We use browser localStorage (not cookies) to store your session token and preferences. We do not use advertising cookies or third-party tracking pixels.

Data is encrypted in transit (TLS) and at rest (AES-256 via Supabase). Passwords are hashed and never stored in plaintext. We conduct regular security reviews and access is restricted to authorized personnel only.

FirstHold is intended for professional use by adults. We do not knowingly collect data from anyone under 16.

We will notify users of material changes via email or in-app notice at least 14 days before changes take effect.

hello@firsthold.io