FirstVector SignalsStart a 14-day trialStart trial

Legal · privacy

Privacy

What we hold about subscribers, trial members, the people we write to and visitors, who processes it for us, how long we keep it, and your rights, including under UK GDPR.

The controller of your personal data is FirstVector Signals, a sole proprietorship in Minnesota, USA, reachable at msunkrish@firstvectorsignals.com.

Version 2026-10-23

Subscribers and trial members

We hold the name, email address and firm you give us or that Stripe passes to us at checkout; your plan, status and billing-period date and your Stripe customer and subscription IDs (card details stay with Stripe); the private token that is your terminal link; the digest preferences you set; a log of every email we send you (address, kind, subject, time, whether it was delivered); your one-click answers from the digest and the terminal (pursuing / passed, any reason you give with a Passed answer, check-in scores, cancellation reasons, whether you accepted or declined a lens change we offered); when you last opened the terminal, feed or MCP endpoint and how many times this month; and, when you tick the terms box or start a trial, the time, the version of the terms and the IP address it came from. Replies you send to our emails are read by the founder; the sender address, subject, how the reply was classified and up to 600 characters of its text are kept so a person can answer it.

People we write to

If we email you an introduction, it is because your work name, work email, firm and role are publicly listed and relevant to the Service. We keep those details, where we found them, when we last wrote and whether you asked us to stop. We send one introduction; if you do not reply you hear nothing more. Every introduction is marked as an advertisement and carries a working unsubscribe link, applied at once when you press the button (and within 10 days in every case). Unsubscribed addresses stay on a suppression list so we never write again. Replying STOP does the same.

Visitors

The public pages set no cookies and run no analytics or advertising trackers. The only cookie on the site is the login cookie for the founder's own console. Our host, Google Cloud, keeps standard request logs including IP addresses for a limited time. Page fonts load from Google Fonts, so your browser requests them from Google's servers. To stop abuse, the service keeps short-lived, in-memory counts of requests per IP address on its public pages and its feed (the trial form among them); the counts are never written to storage and disappear when the server restarts.

Feed and MCP users

Your terminal token is your credential and is sent in the URL; see /developers for what that means and how to get it replaced. We record when you last used it and a monthly count of calls; we do not record which filings you look up.

Who processes data for us

Stripe (payments, receipts, invoices and the billing portal, under Stripe's own privacy policy); Google Cloud, United States (hosting, database, scheduled jobs) and Google Workspace (sending and receiving email); GitHub (code and deployment; no personal data). We do not sell or rent personal data and do not share it with anyone else unless the law requires.

How long

Subscriber, billing and email records for as long as the subscription is active and as long afterwards as tax and accounting rules require; prospect records until you ask us to stop, after which only the suppression entry remains.

Your choices

Email msunkrish@firstvectorsignals.com to see, correct or delete what we hold; we reply within 30 days and delete everything except records the law requires us to keep and your suppression entry. Pause the daily email from any digest; cancel billing by email or in Stripe's portal.

UK GDPR and PECR

For people in the United Kingdom, these lines add what the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR) ask for; everything above applies as well.

  • Controller. FirstVector Signals, a sole proprietorship in Minnesota, USA, PO Box 490092, Blaine, MN 55449; email msunkrish@firstvectorsignals.com. We have not appointed a UK representative or a data protection officer; the founder answers every request personally.
  • Lawful basis. For an introduction we send to a work address at a firm (a corporate subscriber under PECR), our legitimate interests in offering a business-to-business service to people whose role makes it relevant, balanced against yours: one introduction, marked as an advertisement, from publicly listed work details, with the opt-out below. For subscribers and trial members, the contract with you (the terms), and for billing records the legal obligations that apply to us. Nothing is profiled and no decision about you is automated.
  • Opting out. One click on the unsubscribe link in any email, honoured at once; replying STOP does the same. The address then stays on a suppression list, which is the only record kept, so that we never write again. You may object to any other processing by email.
  • Where your data is kept. In the United States: on Google Cloud (hosting, database, scheduled jobs; region us-central1) and with Stripe (payments), and FirstVector Signals itself is in the United States. That is a transfer out of the UK. The safeguards, stated plainly: Google Cloud's and Stripe's data processing terms, which apply to every customer of theirs including us, include the UK Addendum to the EU standard contractual clauses for that transfer; we hold no other copy of your data anywhere else, and we do not sell or share it.
  • Retention. Subscriber, billing and email records for as long as the subscription or trial is active and as long afterwards as tax and accounting rules require; prospect records until you opt out, after which only the suppression entry (the address) remains; request logs at our host for a limited time.
  • Your rights, and the ICO. Access, rectification, erasure, restriction, portability and objection, including to direct marketing, which we always honour: email msunkrish@firstvectorsignals.com and we answer within one month. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk; we would be grateful to hear from you first.

Where this applies

The Service is offered to firms in the United States; a United Kingdom market is in build, and the UK lines above already apply to anyone in the UK we hold data about. If you are elsewhere and want your data removed, email us and we will do it.

Changes

We email subscribers before any material change to this page; the date at the top is the current version.