Privacy Policy

1. Information We Collect

We collect information that you provide directly, as well as data generated through your use of First Three.

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain the First Three platform, including our AI-powered content generation and ad analysis features
• Process and analyze Meta Ads data to deliver ROAS tracking and ad fatigue predictions
• Train and improve our custom RAG (Retrieval-Augmented Generation) models to generate better influencer scripts
• Calculate creator scoring across our five-pillar quantitative framework
• Send service-related communications, updates, and support responses
• Improve our platform, develop new features, and enhance user experience
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations and enforce our terms of service

3. How We Share Your Information

We do not sell your personal information. We may share your data in the following limited circumstances:

• With service providers who assist in operating our platform (hosting, analytics, payment processing)
• With Meta/Facebook as required for our native Ads integration to function
• With your consent or at your direction, such as when you share campaign reports with team members
• To comply with legal obligations, court orders, or government requests
• In connection with a merger, acquisition, or sale of company assets
• To protect the rights, safety, and property of First Three, our users, or the public

4. AI and Data Processing

First Three uses artificial intelligence to power core features. Here's how your data interacts with our AI systems:

• Ad content you analyze may be processed by our AI models to reverse-engineer winning creative patterns
• Your brand guidelines and past campaigns inform personalized script generation through our RAG system
• Creator performance data is processed to generate quantitative scoring metrics
• We use aggregated, anonymized data to improve our AI models — your individual data is never shared with other customers
• You retain ownership of all content you create using our AI-assisted tools

5. Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Role-based access controls and multi-factor authentication
• Secure cloud infrastructure with SOC 2 Type II compliant providers
• Automated threat detection and incident response procedures

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained for the duration of your subscription and 90 days after account deletion
• Analytics and performance data is retained for up to 24 months
• AI training data derived from your usage is anonymized and may be retained indefinitely
• Payment records are retained as required by applicable tax and financial regulations
• You can request deletion of your data at any time by contacting support@firstthree.io

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data, subject to legal retention requirements
• Portability — Request a machine-readable copy of your data
• Objection — Object to processing of your data for certain purposes
• Restriction — Request that we limit processing of your data
• Withdraw Consent — Withdraw consent for data processing where consent is the legal basis

8. Cookies & Tracking

First Three uses cookies and similar technologies to enhance your experience:

• Essential cookies — Required for platform functionality and authentication
• Analytics cookies — Help us understand how users interact with our platform
• Preference cookies — Remember your settings and personalization choices
• You can manage cookie preferences through your browser settings or our cookie consent banner

9. Third-Party Integrations

First Three integrates with third-party services to provide its features. Each integration has its own privacy practices:

• Meta (Facebook/Instagram) — Required for ad analysis and campaign management. Subject to Meta's Data Policy
• Google OAuth — Used for authentication. Subject to Google's Privacy Policy
• Payment processors — Billing data is handled by PCI-DSS compliant payment providers
• Cloud infrastructure — Data is hosted on secure, certified cloud platforms

10. Children's Privacy

First Three is a business-to-business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform and updating the "Last Updated" date. Your continued use of First Three after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: