Privacy Policy

1. Who this applies to

This policy covers visitors to our marketing site, account holders (the adult who creates and pays for an account), and learners who use the platform. ThinkFirst is for adults: every account holder and learner must be 18 or older, including anyone you buy a seat for.

2. Information we collect

• Account information — name and email, handled by our authentication provider (Clerk).
• Learning activity — journeys, modules, and activities completed, and related progress, stored in our database (Convex).
• AI chat conversations — the messages you exchange with our AI learning scenarios, so we can provide and improve the lesson experience.
• Payment information — handled by our payments provider (Stripe). We do not store full card numbers.
• Limited technical/usage data — needed to operate and secure the service.

We practise data minimization: we collect only what is reasonably necessary to provide the service, and we do not condition participation on collecting more than that.

3. How we use information

• To provide the learning experience and track progress.
• To operate AI chat scenarios and keep them safe.
• To process subscriptions and payments.
• To secure the service and meet legal obligations.

4. AI conversations

AI chat messages are processed by our model provider (OpenRouter) to generate responses. Conversations are retained per our Data Retention policy and can be deleted on request. We do not sell conversation data.

5. Sharing and third parties

We do not sell personal information. We share data only with the service providers needed to run ThinkFirst — Clerk (authentication), Convex (database), Stripe (payments), and OpenRouter (AI model access) — each under their own terms, and only for the purposes above. We will disclose the specific categories and purposes of any third-party sharing in our consent flow.

6. Age requirement

ThinkFirst is for adults. You must be 18 or older to create an account or use the service, and anyone you buy a seat for must also be an adult. We do not knowingly collect personal information from anyone under 18; if we learn that we have, we delete it.

7. Your rights and choices

Depending on where you live (including under Canada's PIPEDA, Quebec's Law 25, and US state privacy laws), you may access, correct, delete, or port your information, and withdraw consent. To exercise these rights, contact us below.

8. Retention and security

We keep personal information only as long as needed for the purposes above and then delete it — see our Data Retention policy. We maintain a written information-security program and use reasonable technical and organizational safeguards.

9. Where we operate

ThinkFirst operates in Canada and the United States. By default we apply privacy-protective settings (privacy by default). Quebec residents have specific rights under Law 25, including in relation to automated decision-making where applicable.

10. Changes

We may update this policy; we will post the new date above and, where required, notify you.

11. Contact & Privacy Officer

Questions or requests: privacy@thinkfirst.ai. Our designated Privacy Officer (per Quebec Law 25) can be reached at the same address. [Legal entity name and mailing address to be confirmed before launch.]