Firm Markets Limited Liability Company
Privacy policy
This policy explains what FIRM collects, what becomes public, how information is used and how to make a privacy request.
Effective October 1, 2026
Who is responsible
Firm Markets Limited Liability Company, a Wyoming company, operates FIRM at firm.markets and is responsible for the personal information described here. This policy covers our website and FIRM services that link to it. Contact our team through Contact and support.
Information we handle
- Accounts and sign-in. Your handle, account identifiers, password and recovery-code hashes, session records, and authentication or wallet identifiers associated with the sign-in method you use. A sign-in provider may process additional information, such as your email, under its own policy.
- Activity and submissions. Predictions, positions, demo transactions, saved drafts, questions, source material, opinions, challenges, project claims, follows, responses and the times and status of those actions.
- Project connections. The provider and account you connect, authorization records, connection status and the business metrics needed for your selected feature. For example, a connected Stripe source can process subscription and customer identifiers to calculate revenue and paying-customer totals. Published observations contain the metric, methodology and supporting source record, rather than the underlying customer list.
- Purchases and communications. Where a paid feature is offered, billing-provider identifiers, subscription status and purchase records. Payment details entered in a hosted checkout are handled by its payment provider. We also process messages you send us, notification preferences and delivery records.
- Technical information. Our hosting and security services process connection information such as IP address, request time, browser and device details, and diagnostic logs. Optional analytics adds the visit and campaign information described below.
Where information comes from
We receive information from you, your use of FIRM, providers you connect and public sources used to document a prediction or project. Public material can include a quoted post, author name, source URL, publication time, company metrics or blockchain records. A project page or public quotation does not mean that its subject has a FIRM account or endorses FIRM.
Public and private information
Published questions, market rules, evidence, public handles, project profiles, opinions and shared prediction records can be viewed, copied and indexed by others. A forecast or market record may remain part of the public history after its outcome is decided. Drafts, session credentials and protected provider connections are not published as part of those pages.
Removing information from FIRM cannot remove copies held by other people or search engines. Where you use a blockchain feature, wallet addresses and transactions recorded on that network are public and cannot be changed or deleted by FIRM.
How we use information
We use information to create and secure accounts, save your work, run predictions and market features, verify sources and project claims, record outcomes, provide requested connections, administer subscriptions, send selected notifications, answer requests, prevent abuse and improve the service. Optional analytics helps us understand navigation and campaign performance. Where applicable law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and protecting FIRM, legal obligations, or consent for optional processing such as analytics. You can withdraw that consent without affecting earlier lawful processing.
Providers and disclosures
We disclose information needed to operate a feature to service providers. These include Vercel for hosting; database and infrastructure providers for storage and operations; Privy for supported sign-in and embedded wallets; Stripe for supported billing and connected metrics; Resend for email delivery; and Google for optional analytics. Which providers receive your information depends on the features you use and which are enabled.
If you use AI-assisted question drafting when available, the source text, URL, attributed author, timestamp and relevant market definitions are sent to OpenAI to produce the draft. This is separate from publishing it. Source retrieval may also send the public post URL to its source platform.
We may disclose information to professional advisers, in response to applicable legal process, to address fraud or protect rights and security, or as part of a business transfer subject to applicable protections. We do not sell personal information or use Google Analytics for personalized advertising. An independent provider or external website has its own policy for its own services.
Retention and security
We keep information for the purposes described in this policy, taking account of your account status, the feature used, outstanding requests, security needs and applicable recordkeeping obligations. Account and participation records may be needed while your account is active; public evidence and outcome history can remain relevant after a question closes. We assess deletion requests against these needs rather than promising a single retention period for every record.
Session expiry does not itself delete your account or public activity. Backups, records required by law and information needed for a dispute or abuse investigation may remain after other information is removed. We use access controls and protected authentication records to help secure information; no online service can guarantee absolute security.
Your choices and requests
You can change analytics preferences, use notification controls where provided, stop using a connection and ask us about your account information. Depending on the law that applies, you may have rights to access, correct, delete or obtain a portable copy of personal information, restrict or object to processing, withdraw consent, or appeal a decision about your request. Contact us through Contact and support, including the FIRM handle or relevant public URL and what you want us to do.
We may need to verify your identity or an agent's authority before releasing or changing account information. We respond within the time required by applicable law and explain any applicable exception. We do not penalize you for exercising privacy rights. You may also complain to the privacy authority where you live, where that right applies.
International processing and age
FIRM operates from the United States. Our providers may process information in other countries, where privacy laws can differ. Where applicable law requires safeguards for an international transfer, we use the safeguards required for that transfer.
FIRM is intended for adults who can enter into an agreement with us. We do not knowingly collect personal information from children under 18. Contact us if you believe a child has provided information so we can investigate and take appropriate action.
Policy updates
We may update this policy as the service and its data practices change. The effective date identifies the current version. Where a change requires additional notice or consent under applicable law, we will provide it before applying that change. Questions about this policy can be sent through Contact and support.