What we collect, why, and what we do with it.

First100 is operated by Optimize Labs. We help founders find the first 100 customers for their business by surfacing the communities where their customers already gather, and by generating per-community engagement playbooks.

Reach us at hello@thefirst100.io.

• Account data: your email address, used only to send sign-in magic links and account-related notifications.
• Business inputs: the business name, URL, description, ICP, and problem-solved you submit when you create a business in the app. This is what powers community discovery and playbook generation.
• Progress data: the status, notes, and outcomes you record against each community.
• Payment data: handled by Stripe — we do not store card numbers. We keep a Stripe customer ID and the timestamp of your Kit unlock.
• Telemetry: error reports (Sentry) and basic request logs. No third-party advertising trackers, no fingerprinting.

We use a small set of vendors to run the service. Each of them sees only the data they need to do their job.

• Supabase — auth (magic links) and database hosting (EU region).
• Vercel — application hosting + edge network.
• Anthropic — generates community recommendations and playbooks. Your business inputs are sent to the Claude API to produce your kit. Anthropic does not use the inputs to train models.
• Stripe — payments. Receives your email and billing details when you buy The Kit or book a Sprint.
• Sentry — error monitoring.

• To run the product (find communities, generate playbooks, track your progress).
• To process payments and remember which businesses have unlocked The Kit.
• To send you account-related email (sign-in links, payment receipts).
• To debug issues you run into.

We do not sell your data, share it with advertisers, or use it to train generic AI models.

You can request a copy of your data, correct it, or delete your account at any time. Email hello@thefirst100.io and we'll handle it within 30 days. Account deletion removes your businesses, channels, playbooks, and progress data; it does not delete payment records that we're required to keep for tax and accounting purposes.

We use one strictly-necessary cookie to keep you signed in (a Supabase auth session cookie). No analytics cookies, no advertising cookies.

If we make material changes to this policy we'll email everyone with an active account before the changes take effect.