Privacy Policy

FireStart ("we," "us," or "our") operates the FireStart AI Education Platform located at firestartagency.com(the "Platform"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our Platform, create an account, use our services, or interact with our AI-powered features.

By accessing or using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

Account Information. When you create a FireStart account, we collect your name, email address, and password. If you sign up using a third-party authentication provider, we may receive your name and email address from that provider.

Profile Information. You may optionally provide additional profile details such as a display name, bio, profile photo, skills, and certifications.

Payment Information. When you purchase an EmberLearn subscription or enroll in the FireStart Program, payment processing is handled by PayPal. We do not directly collect or store your credit card numbers, bank account details, or other sensitive financial information. We receive transaction confirmation data (such as payer ID, transaction ID, and subscription status) from PayPal to manage your account.

Usage Data. We automatically collect information about how you interact with the Platform, including pages viewed, features used, Spark credit consumption, guide interactions, session timestamps, browser type, operating system, and IP address.

AI Interaction Data. When you use the Ember AI assistant or the Guide Agent Chat, we collect the content of your messages and the AI-generated responses. This data is used to provide the service and may be used to improve the quality of AI responses.

Chat & Coaching Data. Messages sent through the coaching chat feature, including conversations between members and coaches, are stored to provide the service and maintain conversation history.

Cookies & Local Storage. We use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and collect usage analytics.

We use the information we collect for the following purposes:

• Platform Operation: To create and manage your account, authenticate sessions, deliver content, process subscriptions, and provide access to features based on your membership tier (Free, EmberLearn, or FireStart Program).
• AI Features: To power the Ember AI assistant, Guide Agent Chat, flashcard generation, quiz generation, and other Gemini-powered features. Your prompts and interactions are sent to the Google Gemini API for processing.
• Communications: To send you transactional emails (account confirmation, password resets, coaching chat notifications) and, where permitted, occasional platform announcements and updates.
• Coaching & Marketplace: To facilitate coaching ticket purchases, listing, and redemption through the coaching ticket marketplace.
• Analytics & Improvement: To analyze usage patterns, measure feature engagement, track Spark credit usage, and improve the Platform's features, content, and user experience.
• Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.

We share information with the following categories of third-party service providers, strictly to operate and improve the Platform:

• Supabase: Our backend-as-a-service provider for database hosting, user authentication, file storage, and Edge Functions. Your account data and content are stored on Supabase infrastructure.
• Google Gemini API: AI interactions (Ember AI, Guide Agent Chat) are processed through the Google Gemini API. Your prompts are sent to Google for response generation. Please review Google's AI Terms of Service for their data practices.
• PayPal: Payment processing for EmberLearn subscriptions and FireStart Program enrollment is handled by PayPal. Your payment information is subject to PayPal's Privacy Policy.
• Cloudinary: Used for image hosting and delivery (e.g., guide thumbnails, profile images).
• Vercel: Our hosting and deployment provider. Web traffic passes through Vercel's global edge network.
• n8n (Webhooks): Used internally for automated notifications such as chat message alerts and coaching ticket events.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal, tax, or compliance purposes.

AI interaction logs (Ember AI conversations) are retained for the duration of your session and may be stored for up to 90 days for quality improvement purposes, after which they are automatically purged.

Coaching chat messages are retained for the duration of your active membership and for 12 months following account closure, after which they are permanently deleted.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request a portable copy of your data in a structured, machine-readable format.
• Opt-Out: Unsubscribe from non-transactional emails at any time using the unsubscribe link in any email, or by contacting us directly.

To exercise any of these rights, please contact us at staff@firestartagency.com.

The Platform is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at staff@firestartagency.com.

We implement industry-standard security measures to protect your personal information. These include:

• Encrypted data transmission via HTTPS/TLS across all Platform endpoints.
• Supabase Row-Level Security (RLS) policies ensuring users can only access their own data.
• Secure session management through Supabase Auth with token-based authentication.
• Environment-level secret management for API keys and credentials (never exposed client-side where avoidable).

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: