Privacy Policy
Last updated October 12, 2026
This Privacy Policy explains how Firefly Tools LLC (“Firefly”, “we”, “us”) collects, uses and shares personal information when you visit firefly.tools or use our services. Firefly is the controller of this information. You can reach us at team@firefly.tools.
Information we collect
Information you provide
- Your name, email address and password when you create an account. If you sign in with Google or Apple, we receive the name, email address and profile photo they share with us.
- Workspace details, including the names and email addresses of people you invite.
- Content you add to the Service, such as searches, saved leads, notes, contacts, drafts and sequences.
- The settings of any mailbox you connect, including its login details and the sender name and postal address added to your emails.
- Answers to our optional onboarding survey.
- Details you give us when you apply to the affiliate program or contact us.
Information collected automatically
- Device and usage information, such as your IP address, browser and device type, approximate location derived from your IP address, language, the pages you visit, the features you use, and the page or campaign that referred you.
- Security information, such as device and browser identifiers, used to protect accounts and prevent fraud and abuse.
- Information from cookies and similar technologies, described in the Cookie Policy.
Information from other sources
- Creem, our merchant of record, tells us about your purchases and subscription status. We do not receive your full card number.
- Google and Apple, if you use them to sign in.
- Business information from Google Maps Platform and from public websites, as described below.
You don’t have to give us personal information, but we need an email address to create an account.
How we use information
We use personal information for the purposes below. If you are in the European Economic Area, the UK or Switzerland, the table also shows the legal basis we rely on.
| Purpose | Legal basis |
|---|---|
| Providing the Service, managing your account, processing purchases and providing support | Performance of our contract with you |
| Sending messages about your account, purchases and changes to our terms | Performance of our contract; our legitimate interest in keeping you informed |
| Keeping the Service secure, preventing fraud and abuse, and enforcing our terms | Our legitimate interest in protecting Firefly and its users |
| Understanding how the Service is used and improving it | Your consent for analytics cookies in the EEA, UK and Switzerland and for survey answers; otherwise our legitimate interest in improving the Service |
| Complying with the law, and establishing or defending legal claims, including payment disputes | Legal obligation; our legitimate interest in protecting our rights |
We do not sell personal information, share it for cross-context behavioral advertising, or make decisions about you based solely on automated processing that have legal or similarly significant effects.
Your right to object
Where we rely on our legitimate interests, you have the right to object to the processing at any time. We will stop unless we have compelling legitimate grounds that override your interests, or need the information to establish or defend legal claims. To object, email team@firefly.tools. You can turn off analytics at any time in Cookie settings at the bottom of every page.
Cookies
We use cookies that are necessary for the Service to work, and analytics cookies to understand how it is used. In the EEA, the UK and Switzerland, analytics cookies are off unless you allow them. The Cookie Policy lists them and explains your choices.
How we share information
We share personal information only as follows:
- With service providers that process it on our behalf and under our instructions: hosting and database providers, email delivery, bot protection, website screenshot services, and AI providers. AI providers receive business and website information, not information about you.
- With Creem (Armitage Labs OÜ), which processes payments as our merchant of record under its own privacy policy.
- With Google, which receives your searches through Google Maps Platform, and with Google or Apple when you sign in with them.
- With members of your workspace, who can see its shared content.
- With your email provider, when your sequences send email from your mailbox.
- When required by law, or to protect the rights, property or safety of Firefly, our users or others.
- As part of a merger, acquisition or sale of our business, subject to this policy.
Businesses shown in search results
Firefly shows its users local businesses from Google Maps Platform and checks those businesses’ public websites. If you own one of these businesses, this information may relate to you, for example if the business trades under your name.
We keep Google’s identifier for the listing and our own findings about the business’s website, such as its speed, security and mobile layout. A Firefly user who saves the business keeps its listing details and their own notes in their workspace. We process this information based on our and our users’ legitimate interest in identifying businesses that may benefit from web services. You can ask us to delete our findings about your website, or object to this processing, by emailing team@firefly.tools.
Information you add about others
When you add personal information about other people to the Service, such as contact names, email addresses and notes, you decide how it is collected and used, and we process it on your behalf to provide the Service. Under the GDPR you are the controller of that information and we are your processor. You are responsible for having a lawful basis to collect it and for responding to requests from the people it concerns.
International transfers
Firefly is based in the United States, and we and our service providers process information there and in other countries. When we transfer personal information out of the EEA, the UK or Switzerland, we rely on safeguards recognized by those laws, such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep information
We keep personal information only as long as we need it for the purposes in this policy:
| Information | Retention |
|---|---|
| Account information and workspace content | Until you delete your account or the workspace is deleted. Content you added to a shared workspace remains for its other members. |
| Usage information | Up to two years. If you delete your account, we remove what identifies you from it. |
| Security information | As long as needed to protect accounts and prevent abuse |
| Records of accepted terms and purchases | For the life of the account and six years after, to handle disputes and legal claims |
| Records of cookie choices | Two years |
We may keep information longer where the law requires it. Backups are overwritten on a rolling schedule.
Your rights
Depending on where you live, you may have the right to access your personal information and receive a copy of it, to correct it, to delete it, to restrict how we use it, to receive it in a portable format, and to withdraw consent you have given. Withdrawing consent does not affect processing that took place before.
You can download a copy of your information or delete your account at any time from the Account & privacy page. For other requests, email team@firefly.tools from the address on your account. We may need to verify your identity before we act on a request, and we respond within the time the law requires. You may use an authorized agent, and we may ask for proof that you gave the agent permission. We will not treat you differently for exercising your rights.
If we decline your request, you can appeal by replying with “Appeal” in the subject line. If you are in the EEA, the UK or Switzerland, you also have the right to complain to your local data protection authority.
Global Privacy Control and Do Not Track
We treat a Global Privacy Control signal from your browser as a request to opt out of analytics. There is no common standard for “Do Not Track” signals, so we do not respond to them separately. We do not allow third parties to collect information about your activity across other websites through Firefly.
US state privacy rights
Residents of California and of other states with consumer privacy laws may have rights to know, access, correct and delete their personal information, to obtain a portable copy, and to opt out of the sale of personal information, targeted advertising and certain profiling. We do not sell personal information or share it for targeted advertising, including that of anyone under 16, and we do not use sensitive personal information for purposes that require a right to limit. You can exercise your rights as described above.
Security
We use technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
The Service is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18, and we delete it if we learn that we have.
Changes to this policy
We may update this policy. We will post the new version with a new date, and we will notify account holders by email of material changes.
Contact us
For questions about this policy or your personal information, contact:
Firefly Tools LLC
Email: team@firefly.tools