Firstweek, Inc. ("Firstweek," "we," "our," or "us") is a Delaware corporation. This Privacy Policy explains how we collect, use, and share information when you use our software platform and related services (the "Service").
By accessing or using the Service, you agree to this policy. If you are using the Service on behalf of an organization (a "Workspace"), your organization's agreement with us governs data processing, and this policy applies to the extent not superseded by that agreement.
When you create an account or set up a workspace, we collect your name, work email address, company name, and any single sign-on (SSO) identity information provided by your identity provider. Billing contacts and payment method details are collected during subscription setup.
Workspace administrators submit information about new hires — including names, job titles, start dates, role context, and other onboarding-related content — to generate personalized onboarding letters. This data is provided by the workspace and is processed by Firstweek on behalf of the workspace (see Data Controller vs. Processor below).
When a workspace administrator connects a third-party integration (such as Slack, GitHub, Notion, Atlassian, or Google Drive), we access content from those services within the scopes you authorize — for example, repository content, channel messages, or documents. This access is read-only, limited to the repositories, channels, or folders you explicitly select, and used solely to generate onboarding content. You may revoke any integration at any time from your workspace settings.
We collect information about how you interact with the Service — including pages visited, features used, and session duration — to improve the product and diagnose issues. We use Google Analytics 4 (GA4) across the full Service, including the authenticated application (see Analytics and Cookies below). No personally identifiable information is included in URL paths within the authenticated application.
If you contact us by email or through the Service, we retain those communications to respond to your inquiry and improve support.
Firstweek operates as both a data controller and a data processor, depending on the data:
We do not sell, rent, license, or otherwise monetize your data or your users' data to any third party, for any reason, ever. We do not use customer data — including new-hire information, integration content, or usage data — to build data products, conduct advertising targeting, or derive insights that benefit any party other than you. We do not use your data to train AI models without your explicit prior written consent. Your data exists in our systems solely to provide the Service to your workspace.
Onboarding content is transmitted to third-party AI providers to generate personalized letters. By using AI-powered features, workspace administrators authorize this processing. Customer data is not used to train AI models without your explicit prior written consent.
Firstweek uses one or more third-party AI inference providers to power features including onboarding letter generation. When a workspace administrator initiates letter generation, the relevant onboarding content (role context, focus areas, and content retrieved from connected integrations) is transmitted to an AI provider for inference. Our current primary AI provider is Anthropic. We may engage additional AI providers for specific features as the Service evolves; any such providers will be listed on our Subprocessors page before they process customer data.
We select AI providers that operate under zero-retention or equivalent data handling commitments, meaning submitted content is not stored or used by the provider to train their models. Customer data transmitted for AI inference is used solely to generate the requested output and is not retained by the provider beyond that request.
AI-generated outputs are suggestions. The workspace administrator is responsible for reviewing generated content before delivering it to a new hire. Firstweek makes no guarantee as to the accuracy, completeness, or fitness of AI-generated content for any particular purpose.
The Service uses the following types of cookies:
Firstweek uses Google Analytics 4 (GA4), operated by Google LLC, across the full Service to understand how the product is used and to guide product improvements. GA4 collects IP addresses, browser and device identifiers, pages visited, feature interactions, and session duration. This data is processed by Google subject to its own privacy policy. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on.
We share data with third-party subprocessors only to the extent necessary to provide the Service. A complete, current list of our subprocessors — including the data they process and their locations — is available at firstweek.app/subprocessors.
Key subprocessors include:
We design our systems with security as a core requirement, applying controls aligned with SOC 2 Trust Service Criteria as we work toward formal certification.
If you discover a security vulnerability, please report it to [email protected].
We retain account and workspace data for as long as your subscription is active. When a workspace subscription ends and is not renewed, we retain data for 90 days to allow for reactivation, after which it is deleted from production systems. Backup purge may take up to an additional 30 days.
You may request deletion of your workspace data at any time by contacting [email protected].
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete the information we hold about you. To exercise any of these rights, contact us at [email protected].
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
To submit a California privacy request, contact [email protected]. We will respond within 45 days.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice in the application. Continued use of the Service after a change constitutes your acceptance of the updated policy.
Questions about this policy or your data:
Firstweek, Inc., a Delaware corporation