Privacy Policy

We collect the minimum information needed to run FirstKnock: your email and password for authentication, billing information processed by Stripe, and basic technical logs for security and product improvement. We do not sell your information. The lead data shown in the tool comes from public county records and is not "personal information about you" — it describes properties that have permits on file with their county.

You provide:

• Account: email address and password (stored hashed).
• Billing: payment card details are entered directly with Stripe — we never see your card number. Stripe shares back your billing name, ZIP, last four digits, customer ID, and subscription state.
• Support: any information you include when emailing us.

Collected automatically:

• Usage: which leads you unlock, your current plan, your credit balance.
• Technical: IP address, browser user-agent, request timestamps, and approximate location (city/state from IP) for security, abuse prevention, and analytics.

• To operate and authenticate the Service;
• To bill you and process subscription changes;
• To enforce credit limits and unlock state;
• To detect, investigate, and prevent fraud and abuse;
• To communicate with you about your account, billing, and material changes to the Service;
• To improve product features and pricing decisions, in aggregate;
• To comply with legal obligations.

We share information only with the vendors needed to run the Service:

• Supabase — database, authentication, and row-level access control. Hosted in the United States.
• Stripe, Inc. — payment processing and subscription management.
• Vercel, Inc. — hosting, edge networking, and request logging.

Each of these processes your information solely on our instructions and under their own security and privacy commitments. We do not sell or rent your information to advertisers, data brokers, or other third parties.

The lead records shown in the tool are derived from publicly available property appraiser and municipal permitting databases (e.g., Duval County Property Appraiser, pcpao.gov, City of Tampa Accela). This information is, by Florida law, a matter of public record. We curate and aggregate it; we did not collect it from the property owners themselves and we are not their data processor. If you are a property owner who believes a record about your property is in error, the correct path is to contact the relevant county or municipal agency.

We use a small number of strictly-necessary cookies for authentication (session tokens issued by Supabase) and security. We use browser local storage to remember your in-tool preferences (current city tab, notes you take on leads). We do not run third-party advertising or tracking cookies.

We keep account and billing records for as long as your account is active and for up to seven (7) years after account closure to comply with tax and financial recordkeeping obligations. Authentication logs and security telemetry are retained for up to 12 months. Aggregated, de-identified usage statistics may be retained indefinitely.

You may request to access, correct, or delete your account information at any time by emailing tpmccann88@gmail.com. We will respond within 30 days. We will retain information where required by law (for example, completed transaction records) and may decline requests that would compromise security or the rights of others.

We use encrypted transport (HTTPS), hashed passwords, row-level access controls in the database, and least-privilege service credentials. No system is perfectly secure; if a breach materially affects you, we will notify you and the appropriate authorities as required by applicable law.

FirstKnock is a business-to-business service intended for users over 18. We do not knowingly collect information from anyone under 13. If you believe a child has provided us information, email us and we will delete it.

The Service is operated from and hosted in the United States. By using the Service you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country.

We may update this policy from time to time. Material changes will be announced via email or a notice in the Service at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

Questions about this policy or your data: tpmccann88@gmail.com.