Privacy Policy

Last updated: March 2026

PullFirst is a contractor intelligence API platform. We aggregate public enforcement, safety, permit, and license data into a self-serve API. We collect as little as possible. No ads, no tracking pixels.

Accounts

API key accounts are created via email/password or Google OAuth during signup. We store your email, name, and hashed API keys. This information is used for API authentication and usage tracking. You can delete your account and all associated data at any time from the dashboard.

Cookies

We set a session cookie for authenticated dashboard users to keep you logged in. This cookie is essential for authentication and cannot be disabled while signed in. If you do not sign in, no cookies are set.

Analytics

We use Vercel Analytics for basic page view metrics. It tells us which pages get visited and general browser information. It does not track you across sites or use cookies. You can read their privacy policy if you want the details.

Local Storage

Your theme preference (light, dim, or dark) is stored in your browser's local storage. That data stays on your device and never touches our servers.

API Usage

We log API request metadata (endpoint, timestamp, response code) for rate limiting and abuse prevention. We do not log request payloads or response bodies.

Data Sources

Contractor data is sourced from public government records. We aggregate, normalize, and index this data. We do not collect personal data about end users of our API customers' applications.

Questions? Email us at contact@pullfirst.com.