Privacy Policy
Last updated October 1, 2026
CiteFirst ("we") runs CiteFirst, a lead service for attorneys and safety professionals. This policy explains what we collect and why.
Information about our customers
- Account details: your company name, email and the states you cover.
- Your pipeline: the statuses and notes you add to leads. Only your account can see them.
- Payment: handled by Stripe. We never see your full card number; we store your Stripe customer and subscription IDs.
- Usage data: a login cookie and IP address, used to keep you signed in and to prevent abuse.
Information about businesses in our leads
Lead data comes from OSHA inspection and violation records that the U.S. Department of Labor publishes as public open data. It describes employers, not individuals, and we don't add personal information about workers. To ask about a record, contact OSHA, or email us.
Who processes data for us
- Stripe (payments)
- Vercel (hosting and scheduled jobs)
- Upstash (database)
- Resend (email)
- Anthropic (AI drafting of outreach text; we send it the public inspection details and your company name)
We don't sell personal information.
Your choices
You can turn off the daily email, cancel your subscription in Settings, and email us to request access to or deletion of your account data.