Legal

Privacy Policy

Last updated: 29 April 2026

1. Who we are

First Sale Lab (“we”, “us”, “our”) is an ecommerce education platform operated at firstsalelab.com. We help beginners build their first Shopify dropshipping business through a structured 12-module course.

If you have any questions about this policy, contact us at support@firstsalelab.com.

2. What data we collect

We collect only what is necessary to provide the service:

  • Account data: your email address, first name, and password (hashed — we never see it) when you sign up.
  • Progress data: which modules you have completed and when, your learning streak, and your quiz answers.
  • Payment data: handled entirely by Stripe. We store only your Stripe customer ID and subscription ID — never your card details.
  • Usage data: anonymous page-view counts via Vercel Analytics (cookieless, no cross-site tracking). With your consent, we also load Google Analytics 4 for more detailed behavioural data.
  • AI tool inputs and outputs: when you use an AI tool (Ad Copywriter, UGC Brief, Ad Auditor, Product Description Writer, Subject Line Tester, Store Autopsy), the inputs you submit and the response we return are stored against your account. This is used for daily rate-limiting and so you can later revisit your past results in your account.
  • Email engagement: whether you open or click emails we send via Resend.

3. How we use your data

  • To create and manage your account
  • To track your course progress and learning streak
  • To process and manage your Pro subscription via Stripe
  • To send you transactional emails (welcome, module completion, Pro upgrade confirmation)
  • To send Pro members the weekly product picks and monthly ad strategy update newsletters
  • To improve the product based on aggregated, anonymous usage patterns

We do not sell your data. We do not use your data for advertising targeting.

4. Third-party services

We use the following third-party services to operate First Sale Lab. Each processes data under their own privacy policy:

ServicePurpose
SupabaseDatabase and authentication (EU/US servers). If you sign in with Google, Supabase brokers the OAuth handshake.
Google (sign-in)Optional sign-in via your Google account. Google sees only that you authenticated to firstsalelab.com — we receive your email address, name, and profile picture.
StripePayment processing, subscriptions, and billing portal
ResendTransactional emails (welcome, module completion, weekly digest, etc.)
GroqAI generation for free / Pro-tier features (Niche Picker, blog, weekly product picks, ad copy). Inputs you provide are sent to Groq for processing.
Google AI (Gemini)AI generation for Scale Lab (Growth-tier) features (Store Autopsy, advanced ad tools). Used only when you trigger one of these tools. Inputs you provide are sent to Google for processing.
Google AdSenseDisplay advertising for free users (only loaded after you accept cookies)
Google Analytics 4Site analytics (only loaded after you accept cookies)
VercelHosting and cookieless page-view analytics

5. Cookies and tracking

The first time you visit, we ask whether to load optional tracking. You have two choices:

  • “Essential only” — only the cookies needed for the site to work load: a Supabase session cookie (to keep you logged in) and Stripe checkout cookies (only on the upgrade flow, used to prevent payment fraud).
  • “Accept all” — the above plus Google Analytics 4 (site analytics) and Google AdSense (ads for free users). These set additional cookies in your browser.

Vercel page-view analytics is always loaded, since it is cookieless and does not track you across sites.

You can change your choice at any time by clearing your browser's site data for firstsalelab.com — the consent banner will reappear on your next visit.

Pro and Scale Lab members never see ads, regardless of cookie choice.

6. Data retention

We keep your account data for as long as your account is active. When you delete your account (from Settings → Danger zone), your profile, module progress, AI tool history, supplier validations, referral code, and other personal data are removed immediately and any active subscription is cancelled.

Two narrow exceptions:

  • Stripe billing records are retained by Stripe (not us) for as long as required by tax law in their jurisdiction. We hold no copy after deletion.
  • Aggregated analytics data (e.g. “X% of users completed Module 3”) may be retained indefinitely — this data does not identify you.

7. Your rights

You have the right to:

  • Delete your account and all personal data — instantly, from Settings → Danger zone.
  • Access or export the personal data we hold about you — email support@firstsalelab.com and we'll send a JSON export within 30 days.
  • Correct inaccurate data — change your name from Settings, or email us for anything else.
  • Unsubscribe from marketing emails at any time (transactional emails related to your account cannot be opted out of while your account is active).
  • Lodge a complaint with your local data protection authority if you believe we've mishandled your data.

8. Children

First Sale Lab is not directed at children under the age of 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the “last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Terms of Service →← Back to home