Security
Last updated: September 28, 2026
These documents cover orders delivered in Canada. FirstBy does not take orders for United States yet, so they do not apply there.
1. How we protect your account
- Passwords are stored as salted hashes that cannot be turned back into the password.
- Everything between your browser and FirstBy is encrypted with TLS.
- Card details go directly to our payment provider; FirstBy never sees or stores the full number.
- Sensitive actions, such as changing how you sign in or closing your account, ask for your password again.
- We tell you when your account is signed in to from a device it has not used before.
- Seller identity documents sit in private storage and open only for the staff reviewing them.
2. What you can do
- Use a password you do not use anywhere else.
- Sign out of shared computers.
- Treat any message asking for your password or card number with suspicion. FirstBy will never ask for them by email, text or phone.
- Pay only through FirstBy checkout. A store asking you to pay another way breaks our rules.
3. Reporting a security problem
If you think you have found a weakness in FirstBy, tell us through the Help Center and choose a security report. Please give us time to fix it before telling anyone else, and do not access other people's data or disrupt the service while testing. We will reply, keep you informed, and thank you.