Privacy Policy

FirstLook.FYI (firstlook.fyi)
Effective date: September 7, 2026
Last updated: September 7, 2026

This version replaces the Privacy Policy dated May 28, 2026.

1. Who we are and what this covers

FirstLook.FYI LLC ("FirstLook.FYI", "we", "us") operates firstlook.fyi, a subscription service that compiles job postings published by employers and the platforms they use, and delivers them to subscribers.

This Policy describes what we collect, why, who we share it with, how long we keep it, and what you can do about it.

This Policy covers the firstlook.fyi website and waitlist, the FirstLook.FYI application, and the accounts held in it. The website and the application are different things, and we say which one each statement is about. This Policy does not create any contractual or other legal right in favour of any person other than you and us, and is incorporated into, and governed by, our Terms of Service.

2. Information we collect

2.1 The website and the waitlist

Waitlist. If you join the waitlist on firstlook.fyi, we collect your email address and, if you choose to give it, your role or title. We use them solely to gauge early-adopter interest and to send you an invitation when access opens, nothing else. We keep your entry until you create an account, until you ask us to remove you, or until we close the waitlist, whichever comes first. To be removed, email support@firstlook.fyi.

Advertising measurement on the website. The marketing pages of firstlook.fyi load the Meta (Facebook) Pixel, which records that a browser visited a page and shares that event with Meta so that we can measure our advertising and reach people similar to our visitors. This is the only third-party tracking we use anywhere. It runs only on the marketing website, never inside the application, and it receives nothing about your account, your feed, or your job search. Section 4 explains your choices.

2.2 Information you give us in the application

Account identity. Your email address, and the identifier your sign-in provider gives us, obtained through Google sign-in. We never receive or store a password for the Service.

Your preferences. The role categories you follow, your saved feed filters, and your notification preference.

Optional profile information. You may, but do not have to, provide:

• your full name;
• your LinkedIn profile URL;
• your job-search state ("actively looking", "passively looking", or unanswered).

Every one of these fields is optional. Nothing in the Service requires them, nothing is inferred or filled in on your behalf, leaving one blank is stored as unanswered rather than as a guess, and none of them affects what appears in your feed. You can change or clear them at any time in Settings. See Section 3.2 for why we treat job-search state with particular care.

Things you save. Jobs you save, free-text notes you write on them, status you set, and reminders you schedule. Notes are free text: please do not put sensitive information in them.

Billing address. Collected at checkout by our payment processor, and used for tax calculation and for the residency check in Section 2.4.

Messages you send us. Anything you send to support@firstlook.fyi, which we keep in the mailbox so that we can answer you and refer back to it.

Exit survey. If you cancel, you may optionally tell us why (a reason, free text, whether you were hired, whether the role came through firstlook, and whether we may quote you). All of it is optional.

2.3 Information we collect automatically in the application

Sign-in and session records. The time of your last sign-in, and the credentials used to keep you signed in between visits.

Product usage. We record when you click through to apply to a role (the job identifier and its role category), so that we can measure whether the Service is working. This is the only product event we record: we do not log searches, page views, impressions, or scrolling.

Notification device records. If you enable push notifications, the delivery identifier your browser or device provides for each device you enable them on. It is issued by your browser or platform vendor, not created by us.

Records of messages we send you. When we send you an email, an in-app notification, or a push notification, we keep a record of it: the channel, whether it was sent successfully, and the subject line and full text of the message itself. We keep this so we can tell you what we sent you and when, and so we can evidence notices we are required to give.

Security and administrative logs. Records of administrative actions taken on accounts, including the IP address from which such an action was taken.

2.4 Residency-verification information

Because the Service is offered only in the United States, when you make a purchase we collect and retain, as evidence of eligibility:

• the country of your billing address;
• the country that issued your payment card;
• the result of that check; and
• the IP address from which the purchase was started.

Why this is called out separately. This is the only information we collect for a legal and tax compliance purpose rather than to operate a product feature, and an IP address is a network identifier that we retain as evidence rather than use transiently. We keep it so that we can show the basis on which a purchase was accepted or reversed. See Section 6 for how long.

2.5 Invitations

Where we open accounts by invitation, we keep a record of each invitation: the email address it was sent to, and administrative details about when and by whom it was issued and used.

This may include people who never create an account. If you were invited and do not wish us to hold your email address, contact us at support@firstlook.fyi and we will delete the entry.

2.6 What we do NOT collect

To be explicit, because their absence is itself a privacy statement:

• No passwords. Sign-in is Google-only.
• No card numbers, no payment credentials. These go directly to Stripe. We store only the subscription information needed to determine your access, such as its status, term, and price. We hold no invoices, no charges, and no card data.
• No third-party advertising or analytics trackers in the application. The application loads no advertising network, no tag manager, and no third-party analytics script. The only pixel we use is on the marketing website (Section 2.1).
• No advertising profile of you. We do not sell personal information. The only information we share for advertising is website visit data via the Meta Pixel, which is never linked to your account.
• No location tracking, beyond the country-level checks in Section 2.4.
• No browsing history outside the Service.

3. How we use information

3.1 Purposes

3.2 Job-search state and LinkedIn URL: how we treat them

We recognise that "actively looking for a job" is information you may not want your current employer to have, and that a LinkedIn URL is a durable link to your real identity. We therefore commit that:

• both fields are entirely optional, and the Service works identically without them;
• neither is shown to any other user, sold, shared for advertising, or used to target you;
• neither affects what roles you are shown;
• you can clear either at any time from Settings, and deleting your account deletes both immediately with no retained copy (unlike the records in Section 7.2).

About the LinkedIn URL specifically. No feature currently uses it. Providing it is entirely your choice, and the Service behaves identically whether you fill it in or leave it blank. It is stored against your account and shown back to you in Settings. If we ever put it to a new use, we will update this Policy before we do, and you can clear the field at any time.

4. Cookies and local storage

The application uses one cookie, and it is strictly necessary: a session cookie that keeps you signed in. It is sent only to our own servers and lasts up to 90 days or until you sign out.

We also use your browser's local storage to remember interface preferences on your own device. This never leaves your device and is not sent to us.

The application uses no advertising cookies, no analytics cookies, and no third-party tracking cookies.

The marketing website at firstlook.fyi is different: it loads the Meta Pixel (Section 2.1), which may set or read Meta's own cookies in your browser. Your choices: you can block third-party cookies in your browser, install a content blocker, adjust your ad settings in your Meta account, or email support@firstlook.fyi and ask us to treat you as opted out of this sharing. Opting out has no effect on your access to the Service.

5. Who we share information with

We do not sell personal information. Apart from the website pixel described in Section 2.1, we do not share it for cross-context behavioural advertising. In the ordinary course, we disclose information only to the service providers we need to operate, and only for that purpose. We describe them by category; we will identify a specific provider on request.

We may also disclose information where we believe in good faith that disclosure is necessary or appropriate: to comply with law, regulation, legal process, or a governmental request; to enforce our Terms or this Policy; to detect, prevent, or address fraud, security, or technical issues; to protect the rights, property, or safety of FirstLook.FYI, our users, or the public; in connection with any actual or prospective litigation, claim, or investigation; or in connection with a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets (in which case we will give notice before your information becomes subject to a materially different policy). We may also disclose aggregated or de-identified information, which does not identify you, for any purpose.

6. How long we keep information

Deleting your account removes your account data immediately. Beyond that, we follow the retention periods below as our general practice, except that we may retain information longer where reasonably necessary to comply with a legal obligation, resolve a dispute, enforce our agreements, or address a legitimate business need, such as an open legal hold, an outstanding chargeback, or a suspected violation of these Terms.

Deletion runs periodically rather than continuously, so records may remain for a short time after the period ends.

7. Deleting your account

7.1 What deletion does

You can delete your account at any time from Settings. When you do, we:

• cancel your subscription, issuing a refund if you are inside the refund window;
• delete your customer record with Stripe; and
• delete your account and its associated data, including your profile, optional profile fields, saved jobs, notes, reminders, filters, notification devices, and sign-in identities.

If your subscription cannot be cancelled at the moment you ask, deletion will not complete until it can. You can retry or contact support.

7.2 What survives deletion, stated plainly

Deletion is not total erasure, and we would rather say so than overstate it. Two categories survive, de-identified, with the link to you removed:

• Administrative and security logs, including residency-check records. These are kept for security, fraud prevention, and to evidence decisions about purchases and refunds. The record of who acted is removed.
• Product usage records and your exit-survey reason. For the exit survey we keep only the reason category, for aggregate churn analysis. Your free-text comments, whether the role came via firstlook, and any permission you gave us to quote you are erased: a testimonial permission does not outlive the account that gave it.

Stripe retains its own billing and transaction records under its legal obligations, independent of your deletion here.

These survive on the retention schedule in Section 6, after which they are deleted.

8. Your choices and rights

• Access and correction. Your account information is visible and editable in Settings.
• Optional fields. Provide none, some, or all; clear them at any time.
• Notifications. Turn push notifications off in Settings or in your browser at any time.
• Cancellation. Cancel from Settings at any time (see the Terms for refund rules).
• Deletion. Delete your account from Settings at any time.
• Questions or requests. Contact support@firstlook.fyi.

8.1 State privacy rights, granted to everyone

Some US state privacy laws grant residents specific rights. Those laws apply to businesses above defined revenue and volume thresholds, and we may not currently meet them. We are granting these rights to every member regardless, so that your rights do not depend on where you live or on how large we happen to be:

• The right to know. You may ask what personal information we hold about you, where we got it, why we hold it, and who we have disclosed it to. Sections 2, 3 and 5 answer this for every member already; ask us if you want it confirmed for your own account.
• The right to correct. Your account information is editable in Settings. If something we hold is wrong and you cannot fix it yourself, ask us.
• The right to delete. Delete your account from Settings at any time. Section 7 explains exactly what is deleted and the narrow categories that survive de-identified.
• The right to opt out of sale or sharing. We do not sell personal information. The only sharing for cross-context behavioural advertising is website visit data sent to Meta by the pixel on our marketing pages (Section 2.1), which is never linked to your account. To opt out, use any of the methods in Section 4. If we ever share anything more than this, we will tell you under Section 13 before it takes effect.
• Non-discrimination. We will not deny you the Service, charge you a different price, or give you a worse experience because you exercised any of these rights.

How to exercise them. Email support@firstlook.fyi. We will verify that the request comes from the account holder (normally by requiring it from the email address on the account) and respond within 45 days. We may decline a request we cannot reasonably verify, and may decline or charge a reasonable fee for a request that is excessive, repetitive, or manifestly unfounded, as permitted by applicable law. You may use an authorised agent; we may ask for proof of that authority.

We do not use personal information for automated decision-making or profiling, and we do not use it to train machine-learning models.

9. Security

We use technical and organisational measures appropriate to a service of this kind, including encryption in transit, protections on the credentials that keep you signed in, restricted administrative access, and logging of administrative actions. We review these as the Service changes.

No method of transmission over the internet, or method of electronic storage, is completely secure. We cannot and do not guarantee absolute security, and any information you transmit to us is transmitted at your own risk. In the event of a security incident affecting your information, we will notify you as required by applicable law.

10. Children

The Service is not directed to children and we do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

11. Do Not Track and Global Privacy Control

In the application, we do not track you across other websites and share nothing for advertising, so there is nothing for a Do Not Track or Global Privacy Control signal to opt you out of, and we do not act on those signals there.

On the marketing website, the Meta Pixel is the only advertising sharing we do. Where the law requires us to treat a Global Privacy Control signal as an opt-out request, we do. Whatever your browser sends, the choices in Section 4 always work, and none of them require a browser signal.

12. International users

The Service is offered only to United States residents and our systems are operated in the United States. It is not intended for use elsewhere, and we do not offer it to residents of the European Economic Area or the United Kingdom.

13. Changes to this Policy

We may update this Policy at any time. We may make non-material changes, including clarifications and corrections, at any time without prior notice, effective when posted. We will change the "Last updated" date and, for material changes, give you at least 30 days' notice by email to the address on your account, and notice in the Service, before they take effect. Whether a change is material is determined by us in our reasonable judgment. Your continued access to or use of the Service after a change takes effect constitutes your acceptance of it.

14. Contact

FirstLook.FYI LLC · 155 Willowbrook Blvd, Ste 110 #8652, Wayne, New Jersey 07470, USA · support@firstlook.fyi