Privacy Policy

Last updated: April 14, 2026

This Privacy Policy describes how Create Connections LLC d/b/a Build First ("Company," "we," "our," or "us") collects, uses, and shares information when you use our Build First Apps service at buildfirst.ai (the "Service").

1. Information We Collect

1.1 Information You Provide

When you use the POP-IT Builder or other features, you may provide:

• Problem Descriptions: The initial problem statement you enter ("brain dump") and any refined versions
• Output Descriptions: What outcome or artifact you want to create
• Training Inputs: Background context, examples, or materials you provide
• Audience Selection: Whether the tool is for yourself, a small team, or general audience
• Test Criteria: Success metrics and testing criteria
• Build Path Selection: Your choice of beginner, intermediate, or hard implementation path
• Email Address: When you save a build brief for email delivery, you may provide your email address
• Workshop Feedback: If you participate in a Build First workshop, you may provide your name, email address, company name, and survey responses through our feedback forms

1.2 Information Collected Automatically

When you access the Service, we may automatically collect:

• Session Identifier: A randomly generated UUID stored in your browser's local storage to track your progress through the wizard
• Device Information: Browser type, operating system, and device type
• Usage Data: Pages visited, features used, time spent on pages, and interactions with the Service
• IP Address: Used to determine general geographic location (if analytics are enabled)

1.3 Information from Third Parties

We do not collect information about you from third parties. The Service does not use social login or integrate with external identity providers.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Process your inputs through AI services to generate suggestions, prompts, and recommendations
• Improve the Service: Analyze submitted problems, outputs, and prompts to understand usage patterns and enhance the quality of AI-generated content
• Maintain the Community Library: Display build briefs that users choose to share publicly
• Monitor and Analyze: Track usage patterns, identify issues, and improve performance
• Communicate: Respond to inquiries or requests you submit to us
• Deliver Build Briefs: Send you your completed build brief and starter prompt via email when you request it
• Facilitate Workshops: Manage workshop sessions with client-specific content and collect feedback to improve workshop quality
• Send Transactional Emails: Deliver build briefs and workshop-related communications you have requested

3. How We Share Your Information

3.1 Third-Party Service Providers

We share your information with the following third-party services to operate the Service:

Note on AI Providers: Both Anthropic and OpenAI state in their API terms that data submitted via API is not used to train their models. We encourage you to review their privacy policies for complete information.

3.2 Community Library

If you choose to share your build brief to the community library, the following information becomes publicly visible to all users:

• Your refined problem statement
• Output description
• Generated AI prompt
• Training inputs (reframed)
• Test criteria and success metrics
• Build path selection and recommendations
• AI-generated summary headline

This sharing is entirely optional and requires you to check the "Share my Build Brief (anonymously)" checkbox. No personally identifying information is associated with shared build briefs.

3.3 Workshop Data

When you participate in a Build First workshop, your facilitator may collect feedback including your name, email address, company name, and survey responses. This data is used to:

• Evaluate and improve workshop quality
• Share feedback with the workshop facilitator
• Share aggregated, anonymized results with the client organization that sponsored the workshop

Workshop feedback data may be used in aggregated, anonymized form in marketing materials or case studies. Your individual responses will not be publicly shared without your consent.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Retention

• Session Data: Stored indefinitely for analytics and service improvement purposes
• Published Build Briefs: Stored indefinitely unless removed by an administrator
• Local Storage Data: Stored in your browser until you clear your browser data; automatically cleared when you start a new session in the POP-IT Builder
• Analytics Data: Retained according to PostHog's data retention policies
• Email Addresses: Stored indefinitely when provided through the Save Build feature, used for build brief delivery
• Workshop Feedback: Stored indefinitely for workshop quality analysis and improvement

5. Cookies and Tracking Technologies

5.1 Local Storage

We use browser local storage to save your progress through the POP-IT Builder wizard. This includes a randomly generated session ID and your form inputs. This data is stored only in your browser and is cleared when you start a new session.

5.2 Analytics Cookies

If analytics are enabled, PostHog may set cookies to track your session and understand how you use the Service. These cookies help us analyze usage patterns and improve the Service.

5.3 Opting Out

You can disable cookies through your browser settings. Note that disabling local storage may affect your ability to save progress in the POP-IT Builder. Most browsers also offer "Do Not Track" settings, which we respect when analytics are enabled.

6. Your Rights and Choices

6.1 Access and Deletion

We collect limited identifying information, including email addresses when you save a build brief for email delivery, and name and email when you submit workshop feedback. You may exercise the following rights:

• You can clear your browser's local storage to remove locally stored session data
• You can request removal of a specific build brief from the community library by contacting us with details about the submission
• You can request deletion of your email address and associated data by contacting us at the email address below

6.2 Opt-Out of Analytics

You can opt out of analytics tracking by:

• Enabling "Do Not Track" in your browser
• Using browser extensions that block analytics scripts
• Disabling JavaScript (though this will affect Service functionality)

6.3 California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed and to whom
• Opt out of the sale of personal information
• Access their personal information
• Request deletion of personal information
• Not be discriminated against for exercising these rights

We do not sell personal information. To exercise your rights, contact us at the address below.

6.4 European Users

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, or port your data, and the right to object to or restrict processing. Our legal basis for processing is legitimate interest in providing and improving the Service. To exercise your rights, contact us at the address below.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS)
• Secure database access controls
• Row-level security policies on database tables
• Limited access to production systems

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers are located. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the modified Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Create Connections LLC d/b/a Build First
401 Park Avenue South, Suite 1055
New York, NY 10016
Email: bethany@buildfirst.ai