Privacy Policy

Overview

Firststreet, Inc. ("Firststreet," "we," "us," or "our") operates an AI-powered lease governance platform for commercial real estate. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website (firststreet.ai), request a demo, or use our platform and services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

Information We Collect

We collect information in the following ways:

• Information you provide directly — When you request a demo, fill out a contact form, or communicate with us, we collect your name, email address, company name, job title, and any other information you choose to provide.
• Platform data — When you use the Firststreet platform, we process lease documents, financial data, and operational information that you upload or connect through integrations. This data is processed solely to deliver our services.
• Usage data — We automatically collect information about how you interact with our website and platform, including pages visited, time spent, browser type, IP address, and referring URLs.
• Cookies and tracking technologies — We use cookies and similar technologies to maintain session state, analyze usage, and improve the user experience. You may disable cookies in your browser settings, though some features may not function correctly.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our platform and services
• Respond to inquiries, demo requests, and support tickets
• Send product updates, security notices, and other service-related communications
• Analyze usage patterns and improve our website and product experience
• Comply with legal obligations and enforce our agreements
• Protect against fraud, abuse, and security threats

We do not sell your personal information to third parties.

How We Share Your Information

We may share your information with:

• Service providers — Trusted third-party vendors who help us operate our platform (e.g., cloud infrastructure, analytics, email delivery). These providers process data only on our behalf and under confidentiality obligations.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal compliance — When required by law, court order, or to protect the rights and safety of Firststreet or others.

Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. Our platform infrastructure is hosted on SOC 2-compliant cloud services with encryption in transit and at rest.

While we take data security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining appropriate controls.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at the address below.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of our services after any changes constitutes acceptance of the revised policy.