Privacy Policy

This Privacy Policy explains how FirstPrompt (“FirstPrompt,” “we,” “us”) handles your personal data when you use firstprompt.buildand the course and services available there (the “Service”). By using the Service you agree to this policy.

Information we collect

• Account information: your name and email address, provided directly or via Google sign-in, managed through our authentication provider (Supabase).
• Learning data: your lesson progress, completions, streaks, XP, badges, and certificates.
• Payment information: handled by Stripe. We receive your subscription status and the last four digits / card brand, but we never see or store full card numbers.
• Usage & device data: pages visited, interactions, approximate location, browser and device type, collected via analytics (PostHog and Google Analytics) and cookies.

How we use your information

• Provide and operate the course, track progress, and issue certificates.
• Process payments, subscriptions, and referrals.
• Send transactional and product emails (delivered via Resend).
• Measure and improve the Service, and prevent fraud and abuse.

Cookies & analytics

We use essential cookies to keep you signed in and analytics cookies (PostHog, Google Analytics) to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may break sign-in.

Service providers

We share data only with providers that help us run the Service, each under its own privacy terms: Supabase (authentication and database), Stripe (payments), Resend (email), PostHog and Google Analytics (analytics), and Vercel (hosting). We do not sell your personal data.

Data retention

We keep your data for as long as your account is active. You may request deletion of your account and associated data at any time, after which we delete or anonymize it except where we must retain records (for example, for tax or accounting obligations).

Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us through firstprompt.build.

International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

Children

The Service is not directed to children under 16, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.

Contact

Questions about this policy or your data can be sent to us through firstprompt.build.