Privacy policy

Last updated: October 15, 2026

ShowFirst is operated by Feedback Footprint LLC, 8734 54th Ave E, Bradenton, FL 34211, United States. This page explains what information ShowFirst collects, how we use it, and who we share it with. It covers your own account, the homeowners who use the price tools and forms on the sites you build, the businesses that appear in ShowFirst search results, and the agencies we email about ShowFirst.

What we collect

• Your account. You sign in with Google or with an email sign-in link. When you sign in with Google, we get your name and email address from your Google profile. An email sign-in link works only for an address that already has a ShowFirst account, and each link works once; we store only a scrambled (hashed) copy of it. We don't ask for or store a password. To limit abuse, we keep a scrambled (hashed) copy of the IP address a new account or an email sign-in request comes from.
• Sites and leads you create. The websites, settings, and price tool rates you build in your account, plus the leads that come in through them.
• Your searches. What you searched for and where, and the lead credits each search used.
• Homeowner lead details. When a homeowner uses a price tool or contact form on one of your sites, we collect what they submit — usually a name, email, zip code, and their answers to the price tool's questions. That information is delivered to you, the site owner, so you can follow up. We don't use it for anything else, and we don't contact the homeowner ourselves.

How we use it

We use your account info to run your dashboard and your searches, build and host your sites, run your price tools, deliver the leads your sites collect, and reach you about your account.

Business information in search results

ShowFirst has a search tool that agencies use to research local businesses. An agency searches for a kind of business in a place, in the dashboard, through our API, or through a connected app, and we show it information about the businesses that match. Through our API or a connected app, an agency can also look up websites it already has and get the same kind of information about those businesses. Agencies pay for searches and lookups with lead credits, and can export the results as a spreadsheet (CSV file).

A search result can include:

• Listing details: the business's name, category, address, phone number, website, Google Maps link, star rating, number of reviews, and whether the listing is claimed.
• Contact details: email addresses found on the business's own website, phone numbers from its listing and its website, whether each email address passed a check that it can receive mail, and whether each phone number is a mobile or a landline and which carrier it was assigned to.
• People: the names and job titles of the owner and of other staff, where the business publishes them on its website or they appear on a public business accreditation profile or in state license records.
• About the business: text from a few pages of its website, a short summary of what it does and the services it offers, its social media links, its logo and main photo, a check of its website (whether it loads and has a secure connection), and details from its public business accreditation profile, such as its rating, whether it is accredited, and the year it started.

Where it comes from. Business listings on Google Maps, which we get through DataForSEO; the business's own public website, which our system reads; public business accreditation profiles; license records that state licensing boards publish; and email checks that test whether an address can receive mail. Phone line types and carriers come from public telephone numbering tables.

Contacting businesses. The search tool itself does not email, call, or text anyone. Agencies decide whether and how to contact the businesses in their results, and are responsible for following the laws that apply when they do.

Removing a business from search results

If you own a business and don't want it to appear in ShowFirst search results, email support@showfirst.app with the business's name and its website or phone number. We add the business to a do-not-include list. From then on, it is left out of search results and exports on ShowFirst. This does not reach copies an agency downloaded before the business was added.

Our emails to agencies

ShowFirst emails agencies about ShowFirst. We find their contact details the same way the search tool finds business information, and we send these emails through Smartlead. To opt out, reply to one of these emails and say so, or email support@showfirst.app.

Cookies

We use a cookie to keep you signed in (a session cookie). It's required for the dashboard to work and isn't used to track you across other sites. During Google sign-in we also set a short-lived cookie that protects the sign-in step and expires after ten minutes. We don't use advertising or analytics-tracking cookies.

API keys and connected apps

You can use ShowFirst from your own code with an API key, or from an AI assistant or other app that you connect to your account.

• API keys. We show you a new key once. We store a scrambled (hashed) copy of it, its first few characters so you can tell your keys apart, the name you gave it, and when it was created or revoked.
• Connected apps. When an app connects, we store the name it gives itself and the web address it asks us to send you back to. After you approve it, we give it sign-in tokens tied to your account. We store only scrambled (hashed) copies of those tokens, with when each one was issued and when it expires, and we record when you approved the app.
• What a connected app can do. It acts as you and can do what the approval screen lists when you connect it, such as checking your lead credits and running business searches and website lookups that spend them, the same way the dashboard does.
• What we record. Searches and website lookups run with an API key or a connected app, and the lead credits they use, are saved in your account's search history and credit history, the same as searches you run in the dashboard. Any site edits a connected app makes are saved in your site's edit history.
• What the app's company sees. Anything ShowFirst sends back to a connected app, including business contact details in search results, is then handled by that app's company under its own privacy policy.

Turning access off. To disconnect an app, go to Settings → Connected apps and click Disconnect; the app is signed out right away. To turn off an API key, click Revoke next to it on the API Keys page; it stops working right away. The built-in account key can't be revoked. Revoked keys and disconnected apps stay in our records, marked as no longer working.

Who else sees it

We share data with these outside services, and send each one only what it needs for the job listed next to it:

• Google — for signing you in, and to look up a business's Google listing when you ask for one.
• Cloudflare — for running your dashboard and storing your account data, search history, API keys and app sign-ins.
• Hetzner — for our own servers, which build and host the sites you make, check whether email addresses can receive mail, and read web pages for business searches.
• Vercel — to run our business search service.
• Supabase — to store searches and the business information they return.
• DataForSEO — to find the businesses that match a search, from Google Maps listings.
• MillionVerifier — to check whether an email address found on a business's website can receive mail.
• OpenAI — to generate site copy and images when you build or edit a site, and to read the text of a business's website, for example when you start a site from a search result.
• Resend — to deliver lead notifications, sign-in links and account emails.
• Our text message provider — to send the lead alerts and review request texts you turn on.
• Smartlead — to send our own emails to agencies about ShowFirst.
• Anthropic — to read the public websites of agencies we may email about ShowFirst, to help us choose which ones to email and to find the owner's name.

Text messages (SMS)

Some parts of the product send text messages — lead alerts to you, and review requests to the customers you upload. We only text a phone number when the person it belongs to has agreed to it.

Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. Wireless carriers are not liable for delayed or undelivered messages.

Text messaging opt-in data and consent will not be shared with third parties or affiliates for any purpose. All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

How long we keep it

We keep your account and site data for as long as your account is active. Homeowner lead data is kept as part of your account's records so you can look it up later. When you ask us to delete your account, we delete it along with your sites and the lead data tied to them (see below).

Business information returned by searches, and the history of searches run on ShowFirst, are kept to provide the service. We don't delete them on a schedule.

A business that asked to be removed stays on the do-not-include list, so it stays out of future search results and exports.

Deleting your data

Email support@showfirst.app from your account's email address and we'll delete your account, your sites, and the lead data tied to them.

People in the UK and EU

If you are in the UK or the EU, you can ask to access, correct or delete information about you, or object to its use, by emailing support@showfirst.app.

Changes to this policy

ShowFirst is in early access and this policy may change as the product does. We'll update the date at the top of this page whenever it does.

Questions

Email support@showfirst.app, or write to Feedback Footprint LLC, 8734 54th Ave E, Bradenton, FL 34211.