How we collect, use, store, and protect your data.
FirstPass Inc. operates an AI-powered sales training platform. This Privacy Policy describes how we collect, use, store, and protect personal data when you use our platform.
This policy applies to all users of the FirstPass platform, including sales representatives, managers and administrators within customer organizations.
Version 1.2, effective May 19, 2026, last updated October 10, 2026.
We collect and process several categories of personal data to provide the FirstPass platform. Here's a breakdown of each category.
We process personal data strictly for the purposes of providing, securing, and improving the FirstPass platform. Your data is never used to train AI models.
FirstPass does not use your practice sessions, transcripts, or call data to train AI models. The AI customer simulator is prompt-engineered with your product and persona context, not fine-tuned on your team's conversations. Your data is used to serve you, and only you.
FirstPass uses the following third-party services. FirstPass does not use customer data to train any AI model. Each provider's data processing terms are linked below.
| Provider | Purpose | Data shared | Trains on data? |
|---|---|---|---|
| Anthropic | Customer simulation, feedback generation, skill builder exercises, help assistant, and deal research including web search | Prompts, conversation history, scenario data | No |
| ElevenLabs | Text-to-speech for the AI buyer's voice (current provider) | The text the AI buyer speaks | Per provider agreement |
| Deepgram | Real-time speech-to-text | Real-time audio stream | No |
| OpenAI, Hume AI, Cartesia | Alternate text-to-speech providers. Only the provider configured for your deployment receives any data. | The text the AI buyer speaks | Per provider agreement |
| Anam AI | Video-avatar rendering (optional, off unless enabled for your organization) | The AI buyer's reply text and audio, for lip-sync | Not persisted |
| Attio, Slack | Handling demo requests submitted on our website. Slack also delivers assignment notifications to your own Slack workspace when your organization connects it. | Name, email, company and message from the demo form. For assignment notifications: the rep's email (to find their Slack user), assignment type and title, priority and due date | No |
| AWS | Infrastructure hosting (database, storage, compute, cache), email delivery (SES), and opt-in PHI redaction (Comprehend Medical) | All data categories | Per DPA |
| People Data Labs | Professional profile lookups for Research a Deal, an optional feature turned on per organization | Names, companies and profile links of the prospects a rep researches; only work details are requested and kept, never emails, phone numbers or addresses | Per provider agreement |
| Sentry | Error monitoring | Error reports and the technical context around them | Not applicable |
| Integrations you connect | Salesforce, HubSpot, Gong, Chorus, Zoom, Microsoft Teams, Slack, and LMS connections via SCORM, xAPI or LTI. Each is turned on by your organization | The data needed for the connection your organization turns on | Per your agreement with that provider |
Data retention is configurable per organization. Administrators can set retention periods for practice sessions and audit logs, from 1 day to 10 years. The help assistant and Research a Deal periods below are fixed.
We support data subject rights on request. Email data@myfirstpass.com and we will act on your request.
On request: Data export and account deletion are available on request to data@myfirstpass.com.
We implement comprehensive security measures across encryption, access control, monitoring, and infrastructure. For full details, see our Security page.
FirstPass uses a single authentication cookie managed by NextAuth.js to maintain user sessions. While an administrator connects an integration, a short-lived security cookie (10 minutes) protects the sign-in handoff. We do not use any analytics, advertising, or social media tracking cookies.
FirstPass infrastructure is hosted on Amazon Web Services in the US-East-1 (N. Virginia) region. FirstPass stores personal data in this region.
For customers in the European Economic Area (EEA) or United Kingdom, data transfers to the United States are governed by appropriate safeguards including Standard Contractual Clauses (SCCs) as required by applicable data protection law.
AI and data providers (Anthropic, Deepgram, the configured speech provider and People Data Labs) process data in the United States. Other processors in the table above process data under their own terms, and integrations you connect process data under your agreement with that provider. Data transmitted to these providers is protected by TLS encryption in transit and is subject to each provider's data processing terms.
For questions about how your organization uses FirstPass, contact your organization's administrator or data protection officer. For questions about FirstPass's data processing practices, reach out to us directly.
FirstPass is a business-to-business enterprise tool designed for professionals within customer organizations. The platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
Book a call. We'll walk through your data processing requirements, discuss compliance, and answer whatever your team needs to know.
Talk to us →