How we collect, use, store, and protect your data.
FirstPass Inc. operates an AI-powered sales training platform. This Privacy Policy describes how we collect, use, store, and protect personal data when you use our platform.
This policy applies to all users of the FirstPass platform, including sales representatives, managers, administrators, annotators, and observers within customer organizations.
Version 1.1 — effective May 19, 2026, last updated May 20, 2026.
We collect and process several categories of personal data to provide the FirstPass platform. Here's a breakdown of each category.
We process personal data strictly for the purposes of providing, securing, and improving the FirstPass platform. Your data is never used to train AI models.
FirstPass does not use your practice sessions, transcripts, or call data to train AI models. The AI customer simulator is prompt-engineered with your product and persona context — not fine-tuned on your team's conversations. Your data is used to serve you, and only you.
FirstPass uses the following third-party services. No customer data is used to train any AI model. Each provider's data processing terms are linked below.
| Provider | Purpose | Data shared | Trains on data? |
|---|---|---|---|
| Anthropic | Customer simulation, feedback generation, micro-learning exercises | Prompts, conversation history, scenario data | No |
| OpenAI | Speech-to-text (Whisper) and text-to-speech (TTS-1-HD) | Audio files, text content | No |
| Deepgram | Real-time speech-to-text (Nova-2) | Real-time audio stream | No |
| Voyage AI | Text embeddings for retrieval | Text content (max 8,000 chars) | Per policy |
| Simli AI | Avatar rendering (optional) | Audio for lip-sync | Not persisted |
| AWS | Infrastructure hosting (database, storage, compute, cache) | All data categories | Per DPA |
Data retention is configurable per organization. Administrators can set retention periods independently for each data category, from 1 day to 10 years.
We support data subject rights through built-in platform features. Most actions are available self-service — no need to file a request and wait.
Self-service: Data export and account deletion are available directly in the platform. Contact: For any other requests, email shaun@myfirstpass.com.
We implement comprehensive security measures across encryption, access control, monitoring, and infrastructure. For full details, see our Security page.
FirstPass uses a single authentication cookie managed by NextAuth.js to maintain user sessions. We do not use any analytics, advertising, or social media tracking cookies.
FirstPass infrastructure is hosted on Amazon Web Services in the US-East-1 (N. Virginia) region. All personal data is stored and processed in this region.
For customers in the European Economic Area (EEA) or United Kingdom, data transfers to the United States are governed by appropriate safeguards including Standard Contractual Clauses (SCCs) as required by applicable data protection law.
AI service providers (Anthropic, OpenAI, Deepgram, Voyage AI) process data in the United States. Data transmitted to these providers is protected by TLS encryption in transit and is subject to each provider's data processing terms.
For questions about how your organization uses FirstPass, contact your organization's administrator or data protection officer. For questions about FirstPass's data processing practices, reach out to us directly.
FirstPass is a business-to-business enterprise tool designed for professionals within customer organizations. The platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
Book a call. We'll walk through your data processing requirements, discuss compliance, and answer whatever your team needs to know.
Talk to us →