Firefly.

Legal

Privacy Policy

Plain language, no fine-print games. This page explains what Firefly CMO collects, why, and how it's handled.

Effective 2026-07-02

What we collect

We collect information you give us directly, and a small amount of automatic analytics data:

  • Contact & audit forms — name, work email, company, website, and anything you write in the "biggest marketing challenge" field, when you submit a form on this site (the audit request, the discovery-call form, or a newsletter signup).
  • Attribution data — if you arrive via a tracked link (a UTM parameter, Google Click ID, or Facebook Click ID), we store the first-touch source in your browser so we know which channel to credit. This stays on your device (localStorage) until it's submitted with a form.
  • Analytics — anonymized-where-possible usage data via Google Analytics 4 (pages viewed, general location, device type) and, where enabled, Google Ads and Meta Pixel conversion events. We use this to understand which pages and channels are working — not to build a profile on any one visitor.

We do not collect payment information on this site, and we do not sell your data to anyone, ever.

Why we collect it

Every field we ask for has a direct, practical use:

  • To respond to you — if you request an audit or a call, we need your email and enough context to do that well.
  • To run the audit or the engagement — company and website details let us actually review your marketing rather than guess at it.
  • To measure what's working — analytics and attribution tell us which pages, channels, and campaigns are worth the spend, so we're not flying blind.

Where it's stored

Form submissions are processed and stored using Supabase (database and backend infrastructure) and Resend (transactional email delivery) as our data processors. Both are reputable infrastructure providers used to run the mechanics of the site — we don't hand your information to anyone beyond what's needed to respond to you or send the email you asked for.

Analytics data (page views, events) is processed by Google (GA4, and Google Ads where applicable) and Meta (Pixel, where applicable), under their own privacy terms.

Your rights

Under Canada's anti-spam and privacy framework (CASL and PIPEDA) — and as a matter of basic respect regardless of where you're writing from — you have the right to:

  • Unsubscribe from any email at any time — every email we send includes a one-click unsubscribe link, and honoring it is immediate.
  • Ask what we have — request a copy of the information we hold about you.
  • Ask us to delete it — request that we remove your information from our systems, subject to what we're legally required to retain (e.g., basic records of consent).
  • Correct it — let us know if something we have on file is wrong.

We only email people who have given consent — by submitting a form on this site, or through an existing business relationship — and every message identifies who it's from and how to opt out, per CASL requirements.

Cookies & tracking

This site uses standard analytics cookies/local storage (GA4, and where enabled, Google Ads and Meta Pixel) to understand traffic and measure which marketing channels work. No cookie on this site is used to sell your data or build a profile for third parties.

Questions

If anything here is unclear, or you want to exercise any of the rights above, email [email protected] and we'll sort it out directly — no ticket system, no runaround.

This policy may be updated as the site or its tools change. The effective date above reflects the latest revision.