Privacy Policy

Last Updated: October 1, 2026

First Gear AI, operated by First Gear AI LLC, a Texas limited liability company (“we,” “us,” or “our”), provides AI-powered business operating tools through the website https://firstgear.ai and related services. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

We believe in being straight about data. The short version: we run a dedicated database for your business, and we pay for it. Your data is locked on your screen before it ever reaches that database, with a key only you hold. We store it and keep it running. We cannot read it. We do not sell it, advertise against it, or train AI models on it. You can export all of it at any time. If you leave, we keep your locked copy free so you can take it or come back.

How Our Product Works

First Gear AI builds and runs a dedicated database for your business and runs an AI assistant, which you name during setup, on top of it. Here is what that means for your data:

• Your First Gear data (tasks, projects, notes, contacts, workflows, and everything your agent manages for you) lives in a Supabase project dedicated to your business. That project sits inside our Supabase organization and we pay for it, so you never create or pay for a database account of your own. The data is yours. Because the project is ours, we host it and keep it running. We can see that your account exists, when you signed in, and how much storage you use. We cannot see what you saved.
• Leaving. You can export everything at any time, in a standard format, and take it with you. The project itself stays with us, because it is ours. If you cancel, your desk stays up and your data stays exportable for a window after you leave. When that window closes we keep your locked copy, free, so you can take it or come back. Only your key opens it. See Data Retention below for how long the window runs, and how to tell us to delete sooner.
• Your AI conversations happen between you and Anthropic’s Claude, using your own Claude account. We provide the system prompt and configuration. Your conversation data with Anthropic is governed by Anthropic’s privacy policy and usage terms, not ours.
• Your other tools (email, calendar, drive, and anything else you connect) stay under your control. You choose what to connect and can disconnect at any time.
• Account data (your name, email, and payment information) is collected and stored by us as described below.

Information We Collect

Information You Provide

• Account information: Name, email address, phone number, and business name when you sign up or fill out a form.
• Payment information: Credit card and billing details processed through Stripe. We do not store your full credit card number.
• Communications: Emails, chat messages, and call recordings when you contact us for support or consultations.

Information Collected Automatically

• Website analytics: Pages visited, time on site, referring URLs, and general geographic region. We use Plausible Analytics, which is privacy-focused and does not use cookies or collect personal data.
• Authentication data: Session tokens and authentication cookies necessary to keep you logged in.
• Device information: Browser type, operating system, and screen resolution for improving our website experience.
• Where you came from: if you arrive from an ad or a campaign link, we keep the click identifier the ad platform put on that link, the campaign tags, the page you landed on and the site you came from. It is stored in one first-party cookie on your first visit, never rewritten, and it expires after 90 days. A browser sending Global Privacy Control is skipped entirely. Our Cookie Notice has the detail.

If You Are Not a Customer

We keep records of people who have not bought anything: someone our team meets in the field or at an event, someone who fills in a form, and someone who starts a checkout. That record holds the name, email and phone we were given, where the person came from, and a dated list of each time we interacted. We keep it to follow up on a real conversation and to see which advertising actually works, not to build a profile of you.

If you become a customer, that record is linked to your account, and we tell the ad platform that the click became a sale so it stops spending your attention on people it should not. Some state laws treat that as sharing for advertising, which is why Global Privacy Control turns the whole thing off before it starts.

The rights below are yours whether or not you ever paid us. Email hello@firstgear.ai and we will delete the record.

Your First Gear Data and What We Can See

The project your data lives in is ours and we pay for it. Your data is locked with a key only you hold, so what we can reach is short:

• We cannot see what you saved. We can see that your account exists, when you signed in, and how much storage you use, and we use that only to run, secure, back up, and support your system. If the law requires us to hand over what we hold, all we can give is your account details and a locked copy we cannot read.
• We do not sell your data, share it for anyone’s advertising, or use it to train AI models.
• Access is limited to the people who need it to do that work, and we keep it to the minimum the job requires.
• Export everything and leave whenever you want, self-serve, from the download in your desk. After you leave, we keep your locked copy in storage only. We still cannot see what you saved.
• Tell us to delete your data and we delete it, during your subscription or after it ends. That is how you end our holding of it completely.
• Your Claude conversation history sits with Anthropic under your own Claude account, not with us.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and manage your subscription
• Communicate with you about your account, appointments, and service updates
• Send setup instructions, onboarding materials, and product updates
• Respond to support requests
• Send promotional messages about new features or offers (only with your consent)
• Comply with legal obligations
• Detect and prevent fraud or abuse

We do not use your information to train AI models. We do not sell your information. Period.

Third-Party Services

We use the following third-party services to operate our business. Each has its own privacy policy governing how they handle data:

• Stripe — Payment processing (receives name, email, payment details)
• Supabase, database infrastructure. We provision your dedicated project inside our Supabase organization and we pay for it, so Supabase is our subprocessor rather than your vendor. The locked copy we keep for you after you leave sits there too.
• Resend — Transactional email delivery from send.firstgear.ai (receives your email address and the contents of the messages we send you, which today are sign-in codes and the receipt telling you your system is ready)
• Vercel — Website hosting (receives IP address, request logs)
• Cloudflare — DNS and edge network for firstgear.ai, and the default AI inference for the assistant on our public website (receives IP address and request metadata, and the text of messages typed into that website assistant)
• Plausible Analytics — Privacy-focused website analytics. No personal data collected.
• Anthropic — two different relationships, and the difference matters. Your own Claude subscription runs under your own account on Anthropic’s terms and never reaches us. Separately, two features we operate call Anthropic on our own account: the assistant on our public website, when it does not run on Cloudflare, and the assistant inside shared rooms in the portal. For those two, Anthropic is our subprocessor and receives the text of those messages

The full list, with what each one touches, is at firstgear.ai/subprocessors.

Cookies and Tracking

We use minimal cookies:

• Authentication cookies: Required to keep you logged in. Essential and cannot be disabled while using our services.
• Plausible Analytics: Does not use cookies. No personal data is collected.

We run no third-party advertising cookie, no Meta Pixel, no Google Analytics and no retargeting tag. We do set one first-party attribution cookie when you arrive from an ad, described above and in our Cookie Notice, and Global Privacy Control stops it being written at all.

Text Messaging

If you provide your phone number and consent to receive text messages, we may send you appointment reminders, service updates, and promotional messages through our messaging provider listed on the Subprocessor List. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP. Reply HELP for assistance.

Mobile information and SMS opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes. This includes the phone numbers collected for SMS notifications and the consent records associated with them.

Data Retention

• Your First Gear data, while you are with us: kept in the dedicated project we run for you, for as long as your subscription is active.
• Your First Gear data, after you leave: the project stays up and your data stays exportable for 30 days from the day you cancel, and never for less than the rest of the period you already paid for. When that window closes we keep your locked copy free so you can retrieve it or rejoin. Only your key opens it. Tell us to delete it at any point and we delete within 30 days and clear backups within 90 days. Section 11 of the Data Processing Addendum sets out the full mechanics.
• Account data: Retained for as long as your account is active, plus 12 months after cancellation.
• Payment records: Retained for 7 years as required by tax and financial regulations.
• Communications: Support correspondence retained for 24 months.
• Website analytics: Plausible retains aggregate (non-personal) data indefinitely.
• Records of people who are not customers: kept for 24 months from the last interaction, then deleted. Ask sooner and we delete it sooner. The attribution cookie behind it expires on its own after 90 days.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including your First Gear data locked on your device with your own key before it leaves, encrypted data transmission (HTTPS/TLS), Stripe PCI-DSS compliance for payment processing, and access controls limiting who can view account data.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated personal information, including the locked copy we keep after you leave
• Opt out of promotional communications at any time
• Export your account data in a standard format

To exercise any of these rights, email us at hello@firstgear.ai. We respond within the time the applicable law allows.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your personal information. We have never sold personal information and have no plans to do so.

To submit a CCPA request, email hello@firstgear.ai with the subject line “CCPA Request.”

European Residents (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

Data Processing

For the First Gear data we hold on your behalf, you decide what goes in and what it is used for. We process it as your service provider, on your instructions and to keep the system running, secure, and supported. In GDPR terms, you are the data controller for that information and we act as a processor. That stays true for the locked copy we keep after you leave, where our processing is storage only. We still cannot see what you saved. For account and payment data that we collect directly, First Gear AI LLC is the data controller.

Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and notify you by email if the changes significantly affect how we handle your data.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at hello@firstgear.ai.

First Gear AI LLC
5900 Balcones Drive STE 100
Austin, TX 78731