Privacy notice
Last updated: 22 September 2026
Who is responsible for your information
Firmeego is operated by Firmeego. For privacy requests or questions about this notice, contact support@firmeego.com.
Information we process
We process information you provide when creating or maintaining an account, including your name, email address, telephone number where supplied, country, preferred currency, time zone and account preferences. We also process listing information, messages, acquisition-workspace activity, offers, Deal Room permissions, verification submissions, billing records, support correspondence and security events.
Where you upload confidential documents or verification evidence, those files can contain business, financial or personal information chosen by you. Do not upload personal data that is unnecessary for the purpose of the transaction or review, and redact unrelated sensitive information where practical.
We also process technical information necessary to operate and protect the service, such as session information, timestamps, audit events, security/rate-limit data and proportionate network identifiers.
Why we process it
We use information to provide accounts and marketplace functionality; create and display listings; enable buyer-seller communication; operate Deal Rooms and transaction workspaces; perform requested evidence reviews; process Firmeego's own charges; send service notifications; prevent fraud and abuse; investigate reports; maintain audit and security records; comply with legal obligations; and improve the reliability of the service.
Depending on the activity and applicable law, processing may be necessary to perform a contract or take requested pre-contract steps, comply with a legal obligation, pursue legitimate interests in operating and protecting the marketplace, or rely on consent where consent is the appropriate basis.
Who can receive information
Public listing information is visible to marketplace visitors. Confidential files are delivered only under their configured access rules. Information can also be processed by service providers that support hosting, email, payment processing, security or other functions necessary to operate Firmeego. We may disclose information where required by law, to protect legal rights or to investigate suspected fraud or abuse.
Payment-card details entered into a supported payment-provider checkout are handled by that payment provider; Firmeego stores the transaction and service records needed to reconcile the payment rather than storing full card details.
International operation
Firmeego is designed for cross-border use. A transaction can involve parties or service providers in different countries. Where personal data is transferred internationally, the operator must use an appropriate lawful transfer mechanism where required by applicable data-protection law.
Retention
Account and marketplace information is retained while needed to operate the account and service. Transaction, billing, moderation, verification, security and audit information may be retained after account closure where necessary for legal obligations, fraud prevention, dispute handling, financial recordkeeping or the integrity of marketplace records. Confidential files should not be retained longer than needed for their stated purpose and applicable obligations.
Your choices and rights
Depending on the law that applies to you, you may have rights to obtain information about processing, access your personal data, correct inaccurate data, request deletion or restriction, object to certain processing, receive portable data, or withdraw consent where processing is based on consent. Some requests can be limited where retention or processing is required by law or necessary to establish, exercise or defend legal claims.
You can update normal profile information in your account. For other privacy requests, contact support@firmeego.com. We may need to verify your identity before completing a request.
If the GDPR applies and you are dissatisfied with how a privacy concern is handled, you can also make a complaint to the Irish Data Protection Commission or another competent supervisory authority.
Security
Firmeego uses access controls, authentication controls, audit records and separated private-file storage intended to protect confidential information. No internet service can guarantee absolute security. Users are responsible for protecting their passwords, recovery codes and authentication devices and for controlling what they upload or share.
Changes to this notice
Material changes will be reflected by updating this notice and, where appropriate, notifying account holders or requesting renewed consent when the law requires it.
Contact and operator
The controller/operator for Firmeego is Patrick Foerster, operating as Firmeego where applicable. Business/contact address: Apt. 197 Cookstown Gateway View, Block C, Tallaght, Dublin, D24C3NV, Ireland. Operator country: Ireland. Privacy enquiries and data-rights requests can be sent to support@firmeego.com or submitted through the signed-in privacy controls.
Buy & Sell and high-value marketplace data
When you create or interact with an item listing, Firmeego can process structured item facts, price and currency, approximate or disclosed location, photographs or video, private evidence, favourites, reports, conversations, offers and transaction/handover status. Private evidence is not made public simply because an item is published.
Job and applicant data
Job posts can contain employer and role information, compensation, workplace and location details. On-platform applications can include an application note, private CV, application status, employer/applicant messages and event history. CVs and application records are subject to configured retention controls and may be retained longer where a documented legal hold or dispute requires it.
Professional-services data
Service profiles can contain professional categories, location/remote availability, service languages, pricing basis, profile descriptions and credentials. Supporting credential files are private unless Firmeego explicitly publishes a scoped verification result. Enquiries, engagement proposals, engagement state and eligible reviews are linked to the relevant accounts.
Support, bug reports and privacy requests
Firmeego's Support Centre stores the issue category, subject, messages, status and any files you choose to attach. Technical reports can also include page context, interface locale and viewport information to help reproduce a problem.
Privacy requests are handled inside the Support Centre through a restricted privacy workflow. Available request types include access, data portability/export, correction, deletion or account closure, restriction, objection, consent withdrawal and other applicable privacy rights. Firmeego records the request, identity-verification status where needed, handling events, response target, any justified extension, outcome and audit history. Ordinary support staff do not receive access to the restricted privacy queue solely because they can handle general support cases.
A deletion request does not mean that every record can always be erased immediately. Information that must be retained for legal obligations, security, fraud prevention, payment/accounting records, dispute handling or establishment, exercise or defence of legal claims can be restricted or retained for the applicable period. Firmeego should explain material retention or refusal grounds in the request outcome.
Cookies, analytics, advertising and discovery controls
Strictly necessary browser storage is used where required to provide or protect a function the user requests, including secure sessions, CSRF/request protection, consent choices and selected interface preferences. Analytics and Advertising are separate optional categories and remain off until the visitor chooses them.
If Google measurement is configured through Google Tag Manager or a direct Google tag, the identifier alone does not override the visitor's choice. Advertising is separately gated. Entering an AdSense publisher identifier can enable ownership metadata and, after Google site review is requested, a paused AdSense/CMP bootstrap on eligible public pages. That bootstrap does not itself enable ad serving. Actual Google ad serving remains blocked until Google marks the site Ready, the required Firmeego serving controls are enabled and, where Google requires it, a named Google-certified consent-management platform using the IAB Transparency and Consent Framework is confirmed. Global Privacy Control is treated as a signal not to enable optional advertising through Firmeego's own consent layer.
If Google AdSense is enabled after those gates are satisfied, third-party vendors including Google can use cookies to serve ads based on a visitor's prior visits to Firmeego or other websites. Google advertising cookies can enable Google and its partners to serve ads based on visits to Firmeego and/or other sites. Users can control personalised advertising through Google Ads Settings. Firmeego will update this notice before enabling any additional third-party advertising network that requires separate disclosure.
Firmeego intentionally keeps the Google AdSense/CMP bootstrap off the Privacy, Cookie and Terms pages. It also does not intentionally load Google advertising code on private communications, account or administration pages, checkout or transaction workspaces, posting forms, unsupported-language pages or other surfaces that are unsuitable for advertising. A certified CMP remains responsible for the applicable Google/vendor consent choices where required; Firmeego's own Advertising preference is an additional platform-level gate and is not presented as a substitute for that CMP.
Opening a third-party service deliberately requested by the user, such as an external payment-provider checkout, can involve that provider processing technical data or using storage needed for its own service under its own notice. Provider names describe services or infrastructure in use and are not presented by Firmeego as certifications or endorsements.
Public crawler access, including search and AI-discovery crawlers, is configured separately from private areas, which are not intended for public indexing. Public pages can be discovered, indexed or summarised by third-party search and AI services according to their own lawful operation and Firmeego's crawler controls.
Buyer Requests and matching
Buyer Requests store the purchase criteria a buyer chooses to provide, such as budget, business type, geography and selected financial or operating requirements. Firmeego compares those criteria with current and future public business listings and can send matching notifications.
Buyer Requests can be private matching-only, anonymously visible, or public. Private requests are not published. Anonymous requests can expose the buyer-selected business criteria while hiding the buyer account identity. Public requests can expose both the selected criteria and the current buyer account name. Direct contact details are not published by the Buyer Request feature. Sellers can also receive aggregate demand counts for their own listings, including demand from private requests, without receiving private buyer criteria or contact details from that aggregate signal alone.
AI-assisted features
Firmeego can use an externally hosted AI model when the operator enables Firmeego AI and a user requests an AI-assisted workflow. Current purposes can include structuring seller-authorised listing content, interpreting a listing screenshot or photo for draft creation, drafting Buyer Request criteria, producing an AI Fit Brief from a buyer's request and public listing facts, and preparing controlled outreach or public-market intelligence for administrators.
AI output is assistance, not verification, legal advice, financial advice, valuation, a recommendation to transact, or an automatic publishing decision. Users should review generated content before relying on or publishing it. Firmeego is designed not to send passwords, MFA secrets, full payment-card details, private identity evidence or Deal Room files to the AI provider for these features. Requests are purpose-limited to the information required for the selected feature. Where supported, Firmeego configures the API request not to persist response state. The AI provider can still process limited service and safety data under its applicable business/API terms and law.
Error reports and reliability diagnostics
When an application error is shown, you can report the displayed reference with one action and optionally add a description. Firmeego can attach the error reference, time, requested page, referrer path, signed-in account identifier where available, browser user-agent and basic viewport information. These diagnostics are used to reproduce, investigate and resolve reliability or security problems. They do not intentionally capture your password, MFA code or form contents.
Device alerts
If you enable important device alerts and separately grant browser/device permission, Firmeego can show selected service notifications such as security, verification, buyer/deal, billing or support activity. Marketing and ordinary saved-search notifications are excluded from the device-alert channel. Browser permission can be withdrawn in the browser or operating-system settings, and the Firmeego preference can be disabled in your account. The current web implementation can deliver alerts while Firmeego is active or installed and able to check for new notifications; availability when the application is fully closed depends on the device/browser and any future push-notification integration.
Seller-authorised listing import
If you use listing import, Firmeego processes the public URL, text, CSV row or listing screenshot/photo you choose to provide in order to prepare a private draft. You must have the right to reuse the source material. Screenshot/photo source bytes used for AI structuring are processed for that request and are not intentionally retained as the original source image by the importer. Imported drafts are not automatically published and must be reviewed by the account before publication.
Public competitor intelligence
Firmeego administrators can configure a weekly watch of selected public competitor pages. The service records public-page facts such as URL, response status, visible title/description/headline, text-change fingerprint and server-side fetch time. It is not designed to collect private pages or infer competitor traffic, revenue, conversion rate, customer count or market share from those pages. This activity is for Firmeego product and market research and uses only publicly retrievable pages configured by the operator.