Skip to main content
FirstCoast.ai

Privacy Policy

This page covers what FirstCoast.ai collects through this website, its chat assistant, and the Business Gap Check at check.firstcoast.ai, why, and who sees it. It does not cover the separate work we do for clients; that is governed by the written agreement for that engagement.

What we collect and why

  • Contact and Discovery Audit requests. When you fill out the contact form or hand off from the chat assistant, we collect your name, email, and message, and phone number if you give one. We use this only to respond to you and, if you become a client, to manage that relationship.
  • Chat conversations. Messages you send the assistant are sent to Anthropic's Claude API to generate a response. We do not store your chat history on our end; it lives in your browser tab and is gone when you close or refresh the page.
  • Standard web logs. Our hosting infrastructure may automatically log things like IP address, browser type, and pages visited, the way almost every website does, for security and operational purposes.
  • Aggregate analytics. We run a self-hosted, cookie-free analytics tool (Umami) on our own infrastructure. It counts page views, referrers, and approximate location at the city level. It sets no cookies, does not follow you across sites, and we do not use it to identify individual visitors. No analytics data leaves our servers.

What we don't do

  • No cookies. Nothing on this site sets a cookie or follows you across visits. The chat assistant keeps one random session identifier in your browser's sessionStorage while a tab is open, so a conversation counts as one session rather than many; it contains no personal information and is discarded when the tab closes. Our analytics runs without cookies too, as described above. If anything here changes, we will update this page and add a cookie notice before it ships, not after.
  • No selling your information. We do not sell or rent contact or chat data to third parties for their own marketing.

Who we share it with

  • Contact and audit requests go into our own internal tools (a CRM and our team's messaging) so we can follow up. They stay internal.
  • Chat messages are sent to Anthropic, the company behind the Claude models that power the assistant, to generate a response. That exchange is governed by Anthropic's commercial API terms, not their separate consumer product terms.
  • The map on our contact page loads its background tile images from OpenStreetMap and Esri's public servers (Esri only if you switch the map to satellite view). Your browser requests those images directly, which shares your IP address with the tile provider the way any image request does. No cookies are involved, and nothing about you beyond the standard image request is sent.
  • We may share information if required to by law.

The Business Gap Check

The Business Gap Check (check.firstcoast.ai) is a free self-serve scan. You give it a website address and an email address; it reads what that website and domain publish publicly, the way a search engine does, and emails you a report. It identifies itself in every request as FirstCoastAuditBot, with a page explaining what it is. It does not log in, probe, or test for vulnerabilities.

  • What it collects. The website address you submit, the business name if you give one, your email address, your IP address (used only to rate-limit the service), your questionnaire answers if you take the deeper assessment (fixed multiple-choice options, no free-text fields anywhere), and the public evidence and report it produces. It never asks about your security arrangements: there is no field for passwords, backups, or system details, on purpose.
  • How long it keeps it. Scan runs, answers, and reports are deleted automatically after 180 days. Reports live at a private link; anyone with the link can view them, and search engines are told not to index them.
  • Who else touches it. Report data is stored in our database (Supabase), page speed is measured by Google PageSpeed Insights, and report emails are delivered by Resend. Each processes data only to provide that function.
  • If a report is about your business and you did not ask for it. Email us with the domain. We will delete the run and the report, and if you ask, block that domain from future submissions.

Your choices

Email support@firstcoast.ai to ask what we have on file for you, correct it, or have it deleted. A person reads every request, and we aim to respond within a reasonable time.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If what we collect or how we use it changes materially, we will update this page and move the date below.

Last reviewed 20 August 2026.