FIRMPOINT.

Privacy

Effective 13 August 2026

Firmpoint helps construction procurement teams collect and check the paperwork suppliers send them. This page says what information we hold, what we do with it, and what we never do with it. It covers the firmpoint.app website and the Firmpoint app. Questions and requests: rumman@firmpoint.app.

On the website

• The waitlist form. If you join the waitlist we keep what you type: your name, work email, company, and your answers. We use it to reply to you and to tell you when Firmpoint is ready for you. Nothing else. Ask and we remove you.
• Usage analytics. We use Microsoft Clarity to see how the site is used, such as which sections people read and where they stop. This uses cookies.

In the app: your firm's paperwork

The app exists to read the documents your firm chooses to connect. All of it is read-only, and all of it is your firm's data, not ours.

• Email intake. If your firm connects a mailbox, we read new incoming mail to find quotes, invoices and delivery notes, and we file what we find. We can never send, reply, delete or change anything in the mailbox, and mail from before you connected stays where it is.
• WhatsApp intake. If your firm connects its WhatsApp Business number, we read messages only from the chats your firm has named on its list. A chat that is not on the list is left alone: nothing from it is stored, not even the sender's number. Documents and photos from named chats are downloaded so the paperwork inside them can be filed.
• Uploads. Documents your team uploads directly.

We use AI models to read these documents and pull out the fields your team needs, such as amounts and supplier names. Every extracted value keeps a link to the document it came from, and your team confirms values before they are trusted. Our AI providers do not use your data to train their models.

What we never do

• We never sell your information, and we never share it for advertising.
• We never send messages from your mailbox or your WhatsApp number.
• We never read chats or mailboxes you did not connect.

Who helps us run the product

Firmpoint runs on service providers who process data on our instructions: hosting and storage (Vercel, Render, Neon, Cloudflare), AI document reading (Anthropic), email delivery (Resend), product analytics (PostHog in the app, Microsoft Clarity on the website), and the platforms your firm connects (Google's Gmail API, Meta's WhatsApp Business Platform). Connection credentials are stored encrypted, and data moves over encrypted connections.

Google user data

Firmpoint's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only Gmail access, we use it only to file your firm's procurement paperwork into your workspace, and we do not transfer Gmail data to anyone else except as needed to provide that feature, as required by law, or with your explicit consent.

WhatsApp data

Messages received through the WhatsApp Business Platform are used only to provide document intake for the firm that connected the number. Disconnecting the number in Settings deletes the connection and its stored credential immediately, along with the list of chats it was allowed to read. Documents already filed stay in your firm's workspace, because they were read with permission at the time.

Keeping and deleting data

Your firm's data stays as long as your firm uses Firmpoint. Disconnect a mailbox or a WhatsApp number at any time in Settings, and the stored credential goes with it. Email us to delete your firm's data or your waitlist entry, and we will do it and confirm.

Cookies

The app uses a cookie to keep you signed in. The website uses Microsoft Clarity cookies for analytics, as above.

Changes

If this page changes in a way that matters, we will say so here with a new date at the top.

Firmpoint · rumman@firmpoint.app · firmpoint.app