Privacy Policy

1. Information We Collect

Information you provide

• Email address collected at the audit gate and during account creation
• Assessment responses your answers to audit questions (skills, background, goals, constraints)
• Subscription and billing information processed by Stripe; we do not store card numbers
• Account preferences tier selection, communication preferences

Information collected automatically

• Usage data (pages visited, features used, session duration)
• Device and browser type for compatibility purposes
• IP address for security and fraud prevention

2. How We Use Your Information

• To deliver the Service generating your analysis, maintaining your dashboard, tracking your progress
• To send transactional emails results delivery, billing confirmations, account notices
• To send the First Principled newsletter if you have opted in (unsubscribe anytime)
• To improve the Service aggregate, anonymized usage analysis only
• For fraud prevention and security

We do not use your data for advertising. We do not sell your data to third parties. Ever.

3. Your Data Belongs to You

You retain 100% ownership of your personal data and assessment history. At any time you may:

• Export your complete audit history and dashboard data in JSON format
• Request deletion of your account and all associated data
• Update or correct any stored information
• Unsubscribe from all marketing communications

To exercise any of these rights: privacy@firstprincipledlife.com

4. Third-Party Processors

We work with the following service providers who process data on our behalf under strict data processing agreements:

• Stripe payment processing and subscription management. Stripe's privacy policy governs payment data.
• Beehiiv email newsletter platform. Your email address is shared with Beehiiv for newsletter delivery if you opt in.
• Anthropic (Claude API) AI analysis engine. Your assessment responses are sent to Anthropic's API to generate your analysis. Anthropic does not use API data to train its models per their enterprise data policy.
• Vercel application hosting and serverless functions.
• Supabase database infrastructure for storing your account data and history.

5. Data Security

• All data is encrypted in transit using TLS 1.3
• Database data is encrypted at rest using AES-256
• Access to production data is restricted to authorized personnel only
• Payment data never touches our servers processed entirely by Stripe

6. Data Retention

Active account data is retained for the life of your account plus 90 days after deletion, to allow for error recovery. After that window, all personal data is permanently deleted. Anonymized aggregate data may be retained indefinitely for service improvement.

7. Cookies

We use cookies and similar technologies only where necessary to run the Service, process payments, and monitor for errors — never for advertising or behavioral tracking.

• Clerk (authentication) sets a session cookie so you stay signed in. Necessary; you cannot opt out without logging out of the Service.
• Stripe (payment processing) sets cookies during checkout for fraud prevention and to process your payment. Necessary if you make a purchase.
• Sentry (error monitoring) captures a sample of application errors so we can diagnose and fix bugs, and occasionally records a short session replay when an error occurs so we can see what happened. It is not used to track you across sessions for marketing or advertising purposes.

We do not currently use Google Analytics, advertising trackers, or third-party marketing pixels of any kind. If that changes, we will update this policy first.

8. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data immediately.

9. Changes to This Policy

Material changes to this policy will be communicated via email to active subscribers 30 days before taking effect.

10. Contact

Privacy questions or data requests: privacy@firstprincipledlife.com

11. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You may still record a formal opt-out below, or by emailing privacy@firstprincipledlife.com. We will not discriminate against you for exercising any of these rights.