Privacy Policy

Who we are

FirstTake is run by 36 Labs [legal company name], a company registered in [country] under number [company number], at [registered address]. We decide how your personal data is used, which makes us its controller under data protection law.

Questions or requests about your data: [privacy contact email].

What we collect

When you join the waitlist:

• your email address or phone number, and your country
• the page that sent you to us, if your browser tells us
• if you answer our follow-up questions: what best describes you, the platforms you post on, how many videos you want, your company, a social media handle, your website and anything else you choose to tell us

When you create an account or sign in:

• your email address
• if you sign in with Google: your name, profile picture and Google account ID, and the sign-in tokens Google gives us. We ask Google only for your basic profile and email address.
• for each signed-in session: your IP address and your browser’s user agent, so you can see where you’re signed in and we can spot misuse

To keep the service secure: your IP address is used to limit repeated sign-in attempts.

We don’t use analytics or advertising trackers, and we don’t buy data about you from anyone.

How we use it, and our legal basis

• To run the waitlist and send your invite, because you asked to join it (consent). You can leave at any time.
• To shape the product from your follow-up answers, because you chose to give them (consent).
• To sign you in and provide your account, because we need to in order to provide the service you signed up for (contract).
• To keep FirstTake secure and prevent abuse (our legitimate interests).

We only send marketing email if you’ve agreed to it, and every such email has a way to stop them.

Who we share it with

We don’t sell your personal data. We share it only with the companies that run parts of FirstTake for us, under contracts that limit them to doing that:

• Cloudflare hosts the website and app and protects them from attacks.
• PlanetScale hosts our database, on Amazon Web Services in London.
• Resend sends our emails (sign-in links and your invite) and keeps the waitlist’s mailing list.
• Google, if you choose to sign in with Google.

We may also disclose data when the law requires it, or to a buyer if FirstTake or 36 Labs is sold, who would then be bound by this policy.

Transfers outside the UK and EU

Some of these providers process data in the United States. Where they do, the transfer is covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or the provider is certified under the Data Privacy Framework. [confirm per provider]

How long we keep it

• Waitlist details and answers: until you get access, and then for [period], or until you ask us to delete them.
• Your account: while it’s open. When you delete it, we delete your account data within [period].
• Sessions: 30 days from your last visit. Sign-in links expire after 5 minutes.

Cookies

We set one cookie, and only when you sign in: a session cookie that keeps you signed in for up to 30 days. It’s needed for the service to work, so we don’t ask for consent to it. We use no analytics or advertising cookies.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to you or another company in a machine-readable form. You can object to our use of it, and withdraw your consent at any time where we rely on it. Email [privacy contact email]; we’ll reply within a month.

If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority where you live.

Children

FirstTake is not meant for anyone under 16, and we don’t knowingly collect their data.

Changes

When we change this policy we update the date at the top, and tell you by email first if the change matters. See also our Terms of Service.