Privacy policy

Last updated: October 7, 2026

We collect what is needed to give you your analysis, improve the journey and run your subscription, nothing more. We do not sell any data and we use no advertising cookies.

1. Who is responsible

EG PRIME LLC, 254 Chapman Rd, Ste 208 #25956, Newark, DE 19702, USA, is the controller of your data. For any question or request: hello@firstmrr.app.

2. What we collect, and why

During onboarding and the free analysis

Your first name, your age, and your answers: your situation, your idea or project (and its link if you give it), your interests, your available hours, your budget, what you know how to do, what has blocked you, what matters to you and your goal. We also keep the analysis produced, your country (deduced from your connection by our host), your device type and, where applicable, the video that brought you to us. This data is used to produce your analysis, to find it again if you come back, and to measure which videos bring which people. Legal basis: our contract with you and our legitimate interest in improving the service.

At payment

Payment is made in Whop's secure window. We never receive your card details. Whop sends us your identifier, your e-mail address, the amount, the dates and the status of your subscription. They are used to open and manage your access. If you linked an Apple or Google account during the free analysis, we pass its e-mail address to Whop to pre-fill the payment window; you can change it before paying. Legal basis: the contract, and our accounting obligations.

Your account

If you link an Apple or Google account, during the free analysis to save your progress or after your subscription, we receive the identifier and the e-mail address that this service sends us. They are used to keep your progress and your analysis, and to let you sign back in from any device. Legal basis: the contract.

In the member area

Your conversations with the coach, what you ask it to remember, your roadmap, your project profile and your settings. They are used to give you coaching that remembers you. Legal basis: the contract.

If you add them: the name you want displayed, your profile photo, your brand sheet (tone, colors, chosen logo) and the images you have generated (logos, icon, banners, visuals). The screenshots you send to the coach are read to answer you, then are not kept. Legal basis: the contract.

Your site's statistics, if you install them

If you add our script to your own site, we record for you the page views, the source of visits, the device type and the events you choose to track. Each visitor is represented there by a fingerprint calculated each day from their IP address and their browser: it is pseudonymous data, never displayed or cross-referenced. If you choose to send them, we also record the amount of your payments and a fingerprint of their order number, which is only used to avoid counting the same order twice. When the script runs on a preview (Lovable, Bolt or other), we only keep the address of that preview, without recording any visit. Your visitors can refuse the measurement: the script respects their browser's privacy setting (Global Privacy Control, Do Not Track) and the opt-out link you add to your own policy. For these visitors, you are the one responsible, and we act on your behalf.

Technical data

Like any site, our hosting providers process connection data (IP address, browser) to run and secure the service. Against abuse, we use short-lived counters with an encrypted version of the IP address, never the address itself. Legal basis: our legitimate interest in protecting the service.

How the journey is used

On the home page, the free analysis and the demo, we use Microsoft Clarity to understand how the journey is used: clicks, scrolling and a recording of the navigation on the page. Clarity works without cookies for us: it does not recognize you from one visit to the next. Your first name, your answers, your analysis and the payment window (including the pre-filled e-mail address) are masked in the recordings. The payment steps (opening, plan chosen, payment successful or in error) are reported to it, without any amount or personal data. It is not used in the member area. Legal basis: our legitimate interest in improving the journey.

3. Artificial intelligence

To produce your analysis and the coach's answers, your answers, your messages and the screenshots you send to the coach are sent to OpenRouter, which has them processed by a language model, such as those of Anthropic or Google. If you installed our script, the coach can also read your site's aggregated statistics to answer you: they then go through OpenRouter, like the rest of the conversation. The images you have generated also go through OpenRouter, to image models such as those of Recraft or Google, with the description of your brand. We have configured OpenRouter to exclude providers that use this data to train their models. Do not write sensitive information the coach does not need, such as passwords or health data.

4. Who has access to your data

Only the team members who need it, and our providers, each for their own task:

Vercel: site hosting (United States).
Supabase: database and sign-in, hosted in the European Union (Ireland).
Whop: payment and subscription management (United States).
OpenRouter and the model providers: artificial intelligence (United States).
Microsoft (Clarity): analysis of how the free journey is used, without cookies (United States).
Apple and Google: only if you choose to sign in with them.

Some of these providers are located outside the European Union. These transfers are covered by the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or the EU-US data protection framework.

We do not sell your data, we do not rent it and we do not share it for advertising purposes.

5. How long we keep it

Onboarding, analysis and linked account without a subscription: 12 months after your last visit.
Subscriber account, conversations, roadmap, profile photo, brand sheet and generated images: during your subscription, then 3 years after it ends, unless you ask for their deletion before.
Log of payments received from Whop: 13 months. Accounting records are kept for the time required by law.
Your site's statistics: 25 months at most.
FirstMRR visit statistics: 13 months.
Clarity recordings of the journey: 30 days, under Microsoft's rules.
Anti-abuse counters: 15 minutes. Hosting providers' technical logs: under their own rules, generally a few weeks.

6. Your rights

You can at any time ask to access your data, correct it, delete it, receive a copy in a reusable format, restrict its use or object to processing based on our legitimate interest. In the member area, you can export your data and erase everything yourself. For the rest, write to hello@firstmrr.app: we reply within a month. You can also file a complaint with the CNIL (cnil.fr) or with the data protection authority of your country.

7. Minors

FirstMRR is not intended for children under 13. Between 13 and 17, the subscription requires the consent of a parent or guardian. A parent can write to us at hello@firstmrr.app to obtain the end of the subscription, the refund of the last payment and the deletion of their child's data.

8. Cookies and storage in your browser

We use no advertising cookies. We only use what is necessary for the service, and an audience measurement cookie of our own:

the progress of your onboarding and your analysis, kept in your browser so you can find them again;
a session cookie, to keep you signed in to your member area;
if you save your progress, a cookie that links your analysis to your Apple or Google account, for one year at most;
a temporary cookie during payment, to link your payment to your analysis;
a session cookie for the admin area, reserved for the team;
a FirstMRR audience measurement cookie of our own (firstmrr-visitor), which holds a random identifier, for 13 months at most. It is only used to count visits and to know which video you come from. Your country, deduced from your connection by our host, and your device type are associated with it. We never keep your IP address and we do not share these statistics with anyone.

Whop's payment window uses its own cookies, notably to fight fraud, under its privacy policy.

9. Security

Exchanges are encrypted. Data is stored in a database closed to the public, accessible only by our server, and the team's access is limited to what is strictly necessary.

10. Changes

We may update this policy. The date at the top of the page changes with each version, and we notify you if an important change concerns you. The subscription terms are in our terms of sale.