Privacy Policy

From captains: your business name, cell number, email, and business details like location, boat, and trip types.

From callers: whatever comes up on the call, usually a name, phone number, preferred dates, party size, and what kind of trip they want. Calls are recorded and transcribed so the captain can see what was discussed. If the captain has connected a Google Calendar and you ask to hold a trip, we also ask for your email address so the calendar invitation can reach you.

To run the product: answer calls, take down details, and notify the captain so they can call back, and to support captain accounts.

We don't use any of this for advertising, and we never sell it.

Captains can choose to connect a Google Calendar so the assistant can tell callers which trip times look open and add a pending hold for the captain to confirm. Connecting is optional, and FirstMate works the same as always without it.

What we access. We ask Google for these permissions:

• See when you're free or busy. We only see blocks of busy time, never the titles, descriptions, locations, or guests of your events.
• Create and manage events on calendars you own. We use this for one thing: adding a "PENDING" hold for a trip a caller asked about, with the caller invited if they give an email, so Google sends them an invitation. Google's permission would also let an app read, change, or delete your other events. FirstMate doesn't. We only create holds.
• Your Google account's email address, so your FirstMate dashboard can show which Google account is connected.

How we use it. Only to check open trip times during a call, create pending holds, and show hold details in your lead text and dashboard. During a call, the open times we find are passed to the AI providers that run the conversation (listed below) so the assistant can offer them to the caller.

What we store. A Google access key (called a refresh token), encrypted before it's saved; the email address of the connected Google account; and a record of each hold we create (the trip, its time, the party size, and a link to the event) so we can show it with the lead. We don't store your calendar or your busy times. We check them fresh on each call. FirstMate doesn't save the caller's email address on its own. Like anything said on a call, it's in that call's recording and transcript, which follow the same deletion schedule as other lead records.

What we don't do. We don't sell Google data, use it for advertising, or use it to train AI models, ours or anyone else's. Nobody at FirstMate reads it unless you ask us to for support, it's needed for security, or the law requires it.

Turning it off. Disconnect anytime from your FirstMate dashboard, or remove FirstMate at myaccount.google.com/permissions. When you disconnect, we revoke FirstMate's access at Google and delete the stored key right away. If you close your FirstMate account, we do the same. Holds already on your Google Calendar stay there because they're yours, and you can delete them in Google Calendar like any other event. To have anything else deleted, email support@askfirstmate.com.

Google's rules. FirstMate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Every call starts with a short message saying you are speaking with an automated assistant and that the call may be recorded. We do this on every call, everywhere. Several states require it, and there's no reliable way to know where a caller actually is when they dial in.

A few outside companies help run FirstMate, each limited to what it needs for its part:

• Twilio: phone calls and text messages
• Vapi: runs the voice conversation
• Anthropic and OpenAI: power what the assistant says
• Supabase: stores account and lead data, handles login
• Resend: sends account emails
• Vercel: hosting
• Sentry: error monitoring. Personal information is scrubbed out before a report reaches them.
• Cloudflare: bot protection on sign-in and sign-up
• Google: calendar availability and pending-trip holds, for captains who connect a Google Calendar, including sending the invitation to the caller's email
• Speech-to-text processing (the provider can change automatically if needed)

None of them can use FirstMate data for anything beyond that.

Call recordings are deleted twelve months after the call, by a job that runs automatically every night. Everything else about a lead, the transcript, the summary, and the trip details, is meant to follow that same twelve-month clock, but automatic deletion for those records isn't switched on yet. Today, we delete them when you ask us to, at the address below.

Trips a captain has saved in the FirstMate trip calendar aren't on a timer. They're the captain's own business records, and we delete them when the captain asks or closes their account. Pending holds FirstMate adds to a captain's Google Calendar live in Google, not with us, so the captain deletes those in Google Calendar. Our record of a hold is deleted along with its lead. Records of someone opting out of texts are kept indefinitely, since that's what lets us keep honoring the opt-out.

Traffic to and from FirstMate is encrypted in transit, and lead and account records are protected by database rules so a captain can only reach their own data. Access on our side is limited to the people who run FirstMate. We don't hold a formal security certification. Google Calendar access keys are encrypted before they're stored.

Captains agree to receive text alerts about new leads. Reply STOP to opt out anytime, or HELP for support. Message and data rates may apply.

We only email you about your account and the service: setting up, changes to your account, and notices about it. No marketing and no newsletters.

Email support@askfirstmate.com to ask what we have on file, or to have it deleted.

FirstMate isn't directed at children, and we don't knowingly collect information from anyone under 13.

We'll post updates to this page as FirstMate changes.