Firsty

Privacy Policy

Last updated: May 25, 2026

Firsty B.V. ("Firsty", "we") is the data controller for personal data processed via Firsty Builders. This policy explains what we collect and why, in line with the EU General Data Protection Regulation (GDPR).

Data we collect

  • Account data: email, company name, and (optionally) a display name.
  • Sandbox & API usage: request logs, endpoints called, status codes, and timestamps — used to operate and secure the API.
  • Order data: email, cart contents, payment status. Payment card data is processed by Stripe and never touches our servers.
  • Technical data: IP address, user agent, and basic browser metadata for security and abuse prevention.

How we use it

  • Operate the Service, fulfill eSIM orders, and provide support.
  • Protect the platform from fraud, abuse, and security incidents.
  • Send transactional emails (order confirmations, password resets). We do not send marketing email without your consent.

Legal basis

We rely on (a) contractual necessity to deliver the Service you requested, (b) legitimate interest in operating and securing the platform, and (c) your consent where required (e.g. analytics cookies).

Sharing

We share data only with processors necessary to operate the Service: Supabase (database & auth, EU region), Stripe (payments), and our connectivity partners for eSIM fulfillment. We do not sell personal data.

Retention

Account data is kept while your account is active. Order records are retained for 7 years to meet tax obligations. Sandbox logs are pruned after 90 days. You can request earlier deletion at any time.

Your rights

Under GDPR you can request access, correction, deletion, restriction, or portability of your personal data, and object to processing. Email privacy@firsty.app and we will respond within 30 days.

International transfers

Our infrastructure runs in the EU. Where data is transferred outside the EU (e.g. for support tooling), we rely on Standard Contractual Clauses approved by the European Commission.

Cookies

See our Cookie Policy for details.

Contact

Firsty B.V., Amsterdam, The Netherlands. Email privacy@firsty.app. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).