Privacy Policy

This Privacy Policy explains how FirstFirms (operating as OptFirst) ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the On Watch Page WordPress plugin (the "Plugin"), our website, and related services (together, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Policy.

1. Information we collect

We collect the following categories of information:

a. Account and signup information

When you register, start a free trial, or contact us, we collect information you provide directly, such as your name, email address, business name, and account credentials.

b. Payment information

When you subscribe to a paid plan, payments are processed by our third-party payment processor (e.g., Stripe). We do not store full payment card numbers on our servers. We may retain limited billing details such as your billing name, the last four digits of your card, billing address, and transaction history.

c. Plugin scan data

To generate watch pages, the Plugin scans your WordPress site and reads content-level information about your videos and pages, such as video URLs, embed codes, titles, descriptions, thumbnails, transcripts (where available), and associated page metadata. This data is used to build and maintain the watch pages for your site. Where processing is performed on our servers, we act as a data processor for the content you choose to scan.

d. Usage and analytics data

We automatically collect information about how you interact with our Services, such as IP address, browser type, device information, pages viewed, referring URLs, and timestamps. We collect this through cookies and analytics tools to understand and improve our Services.

2. How we use your information

• To provide, operate, and maintain the Plugin and Services, including scanning your site and generating watch pages;
• To create and manage your account and process your free trial or subscription;
• To process payments and send billing-related communications;
• To respond to your requests, questions, and support inquiries;
• To analyze usage, monitor performance, and improve our features;
• To detect, prevent, and address security issues, fraud, or abuse;
• To send service updates and, where permitted, marketing communications (which you can opt out of at any time);
• To comply with legal obligations.

3. Legal bases for processing (GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

Purpose	Legal basis
Providing the Services and generating watch pages	Performance of a contract
Processing payments	Performance of a contract
Analytics and product improvement	Legitimate interests
Marketing communications	Consent
Meeting legal and tax obligations	Legal obligation

4. How we share information

We do not sell your personal information. We share information only in these circumstances:

• Service providers: with vendors who help us operate the Services (e.g., hosting, payment processing, analytics, email delivery), bound by contractual confidentiality and data-protection obligations;
• Legal reasons: when required to comply with law, legal process, or a valid government request, or to protect our rights, users, or the public;
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy;
• With your consent: when you direct us to share your information.

5. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and measure how our Services are used. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required by law, we request your consent before setting non-essential cookies.

6. Data retention

We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Scan data is retained while your account is active and the associated watch pages exist. When you close your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.

7. Data security

We use appropriate technical and organizational measures to protect your information, including encryption in transit, access controls, and secure infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights under GDPR

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data ("right to be forgotten");
• Restrict or object to certain processing;
• Request data portability;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@firstfirms.com.

9. Your rights under CCPA/CPRA

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose;
• Request deletion of your personal information;
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of personal information — note that we do not sell your personal information;
• Not be discriminated against for exercising your privacy rights.

To submit a request, email privacy@firstfirms.com. We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf.

10. International data transfers

Your information may be processed and stored in countries other than your own, including the United States. Where we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses, to protect your information in accordance with applicable law.

11. Children's privacy

Our Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date. If changes are material, we will provide additional notice where required by law.

13. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

FirstFirms / OptFirst
Email: privacy@firstfirms.com