Privacy Policy

Last Updated: April 15, 2026

First Gear AI, operated by Haole II LLC (“we,” “us,” or “our”), provides AI-powered business operating tools through the website https://firstgear.ai and related services. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

We believe in radical transparency about data. The short version: your Peggy data lives in your own database, not ours. We never see it, store it, or access it.

How Our Product Works

First Gear AI deploys an AI assistant called Peggy into your own infrastructure. Here is what that means for your data:

• Your Peggy data (tasks, projects, notes, contacts, workflows, and everything Peggy manages for you) is stored in your own Supabase database that you create and control. We deploy the schema and system prompt. You own the database, the data, and the credentials. We do not have access to your Supabase project after setup is complete.
• Your AI conversations happen between you and Anthropic’s Claude. We provide the system prompt and configuration. Your conversation data is governed by Anthropic’s privacy policy and usage terms, not ours.
• Account data (your name, email, and payment information) is the only data we collect and store, as described below.

Information We Collect

Information You Provide

• Account information: Name, email address, phone number, and business name when you sign up, book a call, or fill out a form.
• Payment information: Credit card and billing details processed through Stripe. We do not store your full credit card number.
• Communications: Emails, chat messages, and call recordings when you contact us for support or consultations.
• Booking information: Appointment details when you schedule through our booking system.

Information Collected Automatically

• Website analytics: Pages visited, time on site, referring URLs, and general geographic region. We use Plausible Analytics, which is privacy-focused and does not use cookies or collect personal data.
• Authentication data: Session tokens and authentication cookies necessary to keep you logged in.
• Device information: Browser type, operating system, and screen resolution for improving our website experience.

Information We Do NOT Collect

• Your Peggy database contents (tasks, projects, notes, contacts)
• Your Claude conversation history
• Your Supabase credentials or API keys
• Any data stored in your personal Supabase project

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and manage your subscription
• Communicate with you about your account, appointments, and service updates
• Send setup instructions, onboarding materials, and product updates
• Respond to support requests
• Send promotional messages about new features or offers (only with your consent)
• Comply with legal obligations
• Detect and prevent fraud or abuse

We do not use your information to train AI models. We do not sell your information. Period.

Third-Party Services

We use the following third-party services to operate our business. Each has its own privacy policy governing how they handle data:

• Stripe — Payment processing (receives name, email, payment details)
• Supabase (your account) — Database hosting for your Peggy data. We have no access.
• Go High Level — CRM, booking, and email/SMS communication (receives name, email, phone)
• Vercel — Website hosting (receives IP address, request logs)
• Cloudflare — Domain and DNS management (receives IP address, request metadata)
• Plausible Analytics — Privacy-focused website analytics. No personal data collected.
• Anthropic / Claude (your account) — AI conversations. We have no access.

Cookies and Tracking

We use minimal cookies:

• Authentication cookies: Required to keep you logged in. Essential and cannot be disabled while using our services.
• Plausible Analytics: Does not use cookies. No personal data is collected.

We do not use advertising cookies, tracking pixels, or retargeting technologies. We do not use Google Analytics or Meta Pixel.

Text Messaging

If you provide your phone number and consent to receive text messages, we may send you appointment reminders, service updates, and promotional messages through GHL. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP. Reply HELP for assistance.

Mobile information and SMS opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes. This includes the phone numbers collected for SMS notifications and the consent records associated with them.

Data Retention

• Account data: Retained for as long as your account is active, plus 12 months after cancellation.
• Payment records: Retained for 7 years as required by tax and financial regulations.
• Communications: Support correspondence retained for 24 months.
• Website analytics: Plausible retains aggregate (non-personal) data indefinitely.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encrypted data transmission (HTTPS/TLS), Stripe PCI-DSS compliance for payment processing, and access controls limiting who can view account data.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated personal information
• Opt out of promotional communications at any time
• Export your account data in a standard format

To exercise any of these rights, email us at hello@firstgear.ai. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your personal information. We have never sold personal information and have no plans to do so.

To submit a CCPA request, email hello@firstgear.ai with the subject line “CCPA Request.”

European Residents (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

Data Processing

Because your Peggy data lives in your own Supabase database, we are not a data processor for that information. You are the sole data controller of your Peggy data. For account and payment data that we do collect, Haole II LLC is the data controller.

Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and notify you by email if the changes significantly affect how we handle your data.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at hello@firstgear.ai.

First Gear AI
Haole II LLC
8705 White Cliff Drive
Austin, TX