Privacy

Three things, and nothing else:

• Account data: your email address, and the workspace created when you first sign in. We use magic links, so we never receive or store a password.
• Firm data you enter: the firm names, aliases, cities, practice areas, competitors, and questions you choose to track. This is your input, not data we gather about you.
• Scan results: the answers public AI engines return to those questions, stored verbatim, along with the scores derived from them.

We do not use advertising trackers, we do not sell data, and we do not build profiles of individuals.

Running this service means sending some data to other companies. The complete list:

Supabase

Database and authentication. Stores everything above.

Vercel

Hosting. Processes requests and standard server logs.

OpenAI, Google, Perplexity

The engines we query. They receive the tracking questions, for example “best personal injury lawyer in Austin”. They never receive your email or account details.

Stripe

Payments. Stripe handles card details directly; we never see or store a card number.

Resend

Email delivery for sign-in links and weekly reports.

The questions sent to AI engines are the kind any member of the public could type. They contain firm names and practice areas. That is business information, not personal information about your clients. Do not enter client names, matter details, or any privileged information into First Chair. The product has no use for it, and it would leave our systems as part of a query.

Account and firm data are kept while your account is open. Raw engine responses are retained so that every score stays auditable. That traceability is the point of the product. Close your account and we delete both, along with any workspace that has no remaining members.

• Get a copy of your data, or have it corrected.
• Delete your account and everything attached to it.
• Stop the weekly report from its unsubscribe link without closing your account.

Email kandulanikhilvarma@gmail.com and we will action it. Depending on where you live, the GDPR or state privacy laws may give you further rights; we apply the list above to everyone regardless.

Every table enforces row-level security, so one workspace cannot read another's data. Data is encrypted in transit and at rest by our infrastructure providers. Sign-in is by emailed link, which means there is no password to leak. No system is perfect; if you find a problem, write to kandulanikhilvarma@gmail.com and we will respond.

If this policy changes materially we will email account holders rather than quietly editing this page. Questions, requests, or complaints: kandulanikhilvarma@gmail.com.

Operator: Kandula Studio, Warangal, Telangana 506001, India.