Last updated 11 August 2026
Firsthand writes LinkedIn posts in your voice. To do that it holds what you tell it about yourself and your clients, and it sends some of that to other companies who do the parts we do not do ourselves. This page says which, and what they get.
Firsthand is operated by Bindry. If you want to reach a human about anything on this page, email support@bindry.io.
Your email address, a display name, and a password you set. Passwords are handled by our authentication provider and we never see them.
This is most of the product. It includes your LinkedIn profile and past posts when you import them, the description of what you do and who you sell to, the facts about yourself you want quoted in drafts, your writing style rules, and anything you upload or paste into the knowledge base: documents, links, transcripts, notes.
Ideas, drafts, edits, scheduled and published posts, and the conversations you have with the assistant while writing them.
If you connect LinkedIn, we store an access token that lets us post as you. It is encrypted before it is written down, with a key held separately from the database, and it is only ever decrypted at the moment a post is sent. We use it to publish posts you have written and scheduled, and for nothing else. Delete the connection in Settings and the token is destroyed.
This section is about other people, not you. Firsthand can search LinkedIn for companies and for people who work at them, so you can decide who is worth talking to. That means we hold information about people who have never used Firsthand and have not agreed to anything with us.
What we hold about them is what is publicly visible on their LinkedIn profile: name, job title, headline, employer, profile URL, and their recent public posts. We collect it through a third-party provider that reads public pages; we do not use your LinkedIn login to do it, and we do not see anything private, connection-only, or behind a login.
We use it for one thing: showing it to you, and drafting comments you might leave on their posts. Nothing is sent to them, nothing is posted automatically, and we do not sell it, share it between customers, or build a profile of anyone beyond what you asked to look up. If you are one of those people and you want your data removed, email us and we will delete it.
We record which model ran, roughly how much text went through it, and what it cost, so we can meter the service and keep it working. This is not linked to the content of what you wrote.
Firsthand is assembled from services that do specific jobs. Each one gets only what that job needs.
| Who | What they get |
|---|---|
| Supabase | Everything above, at rest. This is our database, file storage and login system. |
| Cloudflare | Hosting and background processing. Everything passes through it in transit. |
| Anthropic | The text of what is being written, plus the context assembled to write it: your identity, rules, examples and relevant knowledge. |
| OpenAI | Text turned into embeddings, so relevant knowledge can be found. Text only, no account details. |
| Perplexity | Search queries about your clients' industry. Not your content. |
| Apify | The public LinkedIn URLs and search terms used to find companies and people. |
| kie.ai | The words that go on a generated diagram. Nothing about you. |
| Langfuse | A record of model calls, used to debug and improve quality. |
| Posts you publish, sent as you, when you connect and schedule them. |
We do not sell your data. We do not share it with other Firsthand customers. We do not use one customer's content to write another's posts.
Your content is used to write your posts. We do not use it to train our own models, and we do not have any. The model providers above operate under their own terms; we use their commercial APIs, which are not used to train their public models by default.
For as long as you have an account. Delete something in the product and it is gone from the product; deleted records may persist in encrypted backups for a short period before those rotate out. Close your account and we mark it closed and stop processing; tell us you want it erased and we will erase it.
Data is stored and processed in the United States and Canada. Several of the providers above operate globally, so data may transit other countries in the course of being processed.
Email support@bindry.io and we will answer within 30 days. If you are in Canada, the UK or the EU you also have the right to complain to your data protection regulator.
Only the ones that keep you signed in, and a short-lived one used to make the LinkedIn connection safe. No advertising or tracking cookies.
If this changes in a way that matters, we will say so in the product rather than quietly changing the date at the top.