First Sale Scout Privacy Notice
Effective date: November 6, 2026
This Privacy Notice explains how LIKE A KING INC., a New York corporation ("we," "us" or "our"), collects, uses, discloses and protects personal information in connection with the website at https://firstsale.pro (the "Site") and the First Sale Scout service (the "Service"). It supplements our Terms of Service, and capitalized terms not defined here have the meanings given there. The Service is being launched in phases. At the effective date we operate only a marketing website, an early-access waitlist and a contact form. Statements about accounts, payments and connected accounts describe how we will handle information when and if those features become available.
1. Summary
- We collect only what you give us (for example, on the waitlist or contact form) plus limited technical data needed to run the Site.
- The Site currently sets no cookies and uses no browser local storage. See the Cookies and Local Storage page.
- We do not sell personal information, and we do not share it for cross-context behavioral advertising.
- We read publicly available posts on third-party platforms, which include personal information about other people. Section 5 explains how we handle that data and how anyone can ask us to remove it.
- To make a request or ask a question, use the contact form at https://firstsale.pro/contact. We publish no email address, telephone number or street address.
2. Who is responsible
LIKE A KING INC. is the "business" under California law and the "controller" under laws that use that term. You can reach us only through the contact form at https://firstsale.pro/contact.
3. Notice at Collection (California and other U.S. states)
This section is our notice at collection under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). We collect the categories below. "Now" means collected at the effective date; "Later" means collected only if and when the relevant feature launches.
3.1 Categories table
| Category | Examples | Source | Business purpose | Sold or shared? | Retention |
|---|---|---|---|---|---|
| Identifiers | Email address, name, project name; in future, Account ID, username on a connected platform, IP address | You; your device; connected platforms (Later) | Provide the waitlist, respond to requests, operate the Service, security | No | Waitlist: until you ask to be removed or we close the waitlist and delete it, up to 24 months. Contact messages: up to 24 months. Account data: life of Account plus up to 12 months |
| Customer records and commercial information | Plan interest, plan and billing history (Later; card details are held by our payment processor, not by us) | You; payment processor (Later) | Provide and bill for the Service, tax and accounting | No | Billing records: 7 years where law requires |
| Internet or network activity | Pages requested, timestamps, referrer, browser and device type, IP address in server logs; tracked-link and analytics events | Your device | Security, debugging, measuring results, abuse prevention | No | Server logs: up to 90 days. Analytics events: up to 25 months |
| Content you provide | Contact message text; "what are you building" text; in future product descriptions, brand voice, approved posts | You | Respond to you, generate plans and drafts, run the Service | No | See identifiers; Customer Content is deleted per Section 9 |
| Inferences and AI Output | Launch plans, community recommendations, draft posts generated for you | Generated by us and our AI providers | Provide the Service | No | Life of Account plus up to 12 months |
| Public Source Data about third parties | Public usernames, public posts and comments, post dates, links | Platforms' public APIs and endpoints | Research, discovery and planning for customers | No | Up to 24 months unless removed earlier; see Section 5 |
| Connected-account credentials (Later) | OAuth access tokens, platform handle | You, through the platform | Publish approved items for you | No | Until you revoke or close your Account, then deleted promptly |
| Communications | Support and contact form correspondence | You | Support, legal compliance, dispute resolution | No | Up to 24 months, longer if needed for a dispute |
3.2 Sensitive personal information
We do not intentionally collect sensitive personal information as defined by California law, such as government identifiers, precise geolocation, racial or ethnic origin, health information, or biometric data, and we ask you not to submit it. If you submit it, we use it only to respond to you and do not use it to infer characteristics.
3.3 Sale, sharing and retention
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16. We retain each category only for the period shown above or as long as reasonably necessary for the purposes described, and then delete or de-identify it.
4. Information We Collect
4.1 Information you give us
4.1.1 Waitlist: your email address (required), and, if you choose, your name, project name, a description of what you are building, and the plan you are interested in.
4.1.2 Contact form: your name, email address, topic and message.
4.1.3 Accounts and billing (Later): registration details, preferences, Customer Content, and your communications with us. Payment card data will be collected and held by Stripe, our payment processor, and not by us; we will receive limited billing information such as card brand, last four digits, expiration date and billing status.
4.1.4 Connected accounts (Later): if you choose to connect a social account, we will receive an access token and basic profile information that the platform authorizes, and we will act only on items you approve.
4.2 Information collected automatically
4.2.1 Our servers record standard technical information when you request a page: IP address, date and time, requested address, response code, referrer, and browser and device type.
4.2.2 The Site does not currently use cookies, local storage or session storage. If we enable self-hosted, cookieless analytics (Umami), it counts visits without setting identifiers on your device. We do not use advertising pixels or third-party advertising trackers.
4.2.3 Tracked links and analytics events (Later): when a customer uses a Tracked Link, we may record the click, timestamp, referrer and coarse device information to report results to that customer.
4.3 Information from other sources
4.3.1 Public Source Data, as described in Section 5.
4.3.2 Our service providers, such as our payment processor (Later), who may tell us whether a payment succeeded.
4.4 Information we do not collect
We do not collect audio, video, biometric identifiers, or precise location. We do not make decisions with legal or similarly significant effects about individuals through automated processing.
5. Public Source Data and Information About Other People
5.1 What it is
5.1.1 To provide the Service we read publicly available posts and comments on third-party platforms, for example Reddit, Hacker News, Bluesky, Dev.to, Hashnode, Indie Hackers, Product Hunt, Substack and X. We access them through official application programming interfaces or public endpoints, subject to each platform's terms.
5.1.2 These posts contain personal information of people who are not our customers: public usernames, their statements, and sometimes details about their businesses. Founders' descriptions of first sales and the replies to them are studied to learn patterns of what works. We also find current discussions where a customer's likely buyers are active.
5.2 How we use and limit it
5.2.1 We use Public Source Data to produce research and discovery results, launch plans and draft posts for our customers. We do not use it to build advertising profiles, to sell lists, or to make eligibility decisions about anyone.
5.2.2 We collect only what is needed, we keep it for a limited period (see the table above), and we do not seek out private, deleted or restricted content. We honor platform rules, deletions and removal signals to the extent available to us.
5.2.3 Our customers are prohibited from using the Service to harass, stalk, spam or unlawfully contact people, and are responsible for complying with CAN-SPAM, the TCPA and platform rules. See the Terms, Sections 6 and 8.
5.2.4 Revenue and similar claims in public posts are unverified statements by third parties. We do not treat them as facts about a person.
5.3 Removal and rights requests from people named in public posts
5.3.1 If you believe we hold information about you from a public post and you want it removed or corrected, or want to know what we hold, submit a request through the contact form at https://firstsale.pro/contact and choose the topic for a privacy request. Include the platform and your public username or a link to the post, so we can find it. We will not ask for more information than we need to identify the data.
5.3.2 We will delete or de-identify the data we hold about that username, exclude it from future collection where technically feasible, and confirm to you, unless a legal exception applies. Removing it from our dataset does not remove the post from the original platform, which you must do on that platform.
6. How We Use Information
We use personal information to: (a) operate the Site and the waitlist and let you into early access; (b) respond to contact requests; (c) provide, personalize, maintain and secure the Service, including generating plans and drafts and, with your approval, publishing; (d) process payments and prevent fraud (Later); (e) measure results through Tracked Links and analytics events; (f) communicate service messages, security notices and, where permitted and with an opt-out, product announcements; (g) improve the Service using aggregated or de-identified data; (h) comply with law and enforce our terms; and (i) protect rights, safety and security.
We do not use Customer Content to train artificial-intelligence models unless you give separate, explicit opt-in consent, and we do not permit our AI providers to do so with data we send them through the Service.
7. How We Disclose Information
7.1 Service providers and processors
We disclose personal information to the following categories of service providers, who may use it only to provide services to us under contract:
| Provider or category | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Servers and hosting, running our self-managed Coolify platform | Germany |
| Hostinger | Domain registration and DNS | Varies |
| AI model providers such as OpenRouter and the model providers it routes to | Generate plans and drafts from the content you submit and Public Source Data | United States and other locations |
| Stripe | Payment processing and billing (Later) | United States |
| Our self-hosted email service | Sending service and reply messages | Hosted on our infrastructure |
| Self-hosted analytics (Umami), if enabled | Cookieless site statistics | Hosted on our infrastructure |
| Professional advisers (legal, accounting, insurance) | Advice and compliance | United States |
7.2 Other disclosures
We may disclose information: (a) to comply with law, subpoena or legal process; (b) to protect the rights, property or safety of us, our customers or others, or to prevent fraud and abuse; (c) in connection with a merger, financing, acquisition, bankruptcy or sale of assets, in which case the recipient will be bound to honor this Notice or give you notice of changes; (d) with your direction or consent, including publication you approve to your connected platforms; and (e) in aggregated or de-identified form that cannot reasonably identify you.
7.3 No sale or sharing
We do not sell personal information for money or other valuable consideration, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA and similar laws.
8. Cookies, Local Storage and Tracking Technologies
8.1 At the effective date, the Site sets no cookies and uses no localStorage or sessionStorage. Details are on the Cookies and Local Storage page.
8.2 When Accounts launch we expect to set a strictly necessary session cookie to keep you signed in. We will not use advertising cookies, and we will decline non-essential tracking by default.
8.3 Global Privacy Control
We honor the Global Privacy Control (GPC) and similar opt-out preference signals as a valid request to opt out of sale and sharing, and we treat it as applying to the browser or device that sends it. Because we do not sell or share personal information, the signal does not change how we process data, but we will respect it if our practices change.
8.4 Do Not Track (CalOPPA)
Some browsers transmit "Do Not Track" signals. There is no uniform standard for how to respond. Because we do not track you across other websites and do not use third-party advertising trackers, our Site operates the same way whether or not the signal is sent. Other parties do not collect personal information through the Site about your online activities over time and across third-party sites for their own purposes.
9. Retention and Deletion
9.1 We keep personal information only as long as needed for the purposes in this Notice, as shown in the table in Section 3.1, or longer where the law requires or permits, for example for tax records, to resolve disputes, to enforce our agreements, or to maintain security logs.
9.2 After an Account ends, Customer Content is available for export through the contact form for 30 days (see Terms, Section 13.5) and is then deleted or de-identified, apart from backups that are overwritten in the ordinary course within a limited period and records we must keep.
9.3 We may keep de-identified or aggregated information that cannot reasonably be linked to you, and we commit not to try to re-identify it.
10. Your Rights and Choices
10.1 California rights
If you are a California resident, you have the right to:
- Know the categories and specific pieces of personal information we collected, the sources, the purposes, and the categories of recipients;
- Delete personal information we collected from you, subject to exceptions;
- Correct inaccurate personal information;
- Opt out of sale or sharing (we do neither);
- Limit use of sensitive personal information (we do not use it beyond what the law permits);
- Not be discriminated against for exercising your rights.
10.2 Residents of other U.S. states
10.2.1 Residents of Colorado, Connecticut, Delaware, Florida (to the extent applicable), Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with comprehensive privacy laws may have rights to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale and certain profiling, subject to each law's conditions and exceptions.
10.2.2 We do not engage in targeted advertising or sale of personal information, and we do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
10.2.3 Some state laws apply only above certain thresholds. We apply the rights in this Section to all U.S. requesters where reasonably practicable, without admitting that a law applies to us.
10.3 How to submit a request
10.3.1 Submit requests through the contact form at https://firstsale.pro/contact, selecting the privacy request topic and stating the right you wish to exercise. We cannot accept requests by other means.
10.3.2 Verification. We will verify your identity by matching information you provide to information we hold, for example by sending a confirmation to the address you used on the waitlist or contact form. We will not ask for more than is reasonably necessary, and we may decline a request we cannot verify.
10.3.3 Timing. We will confirm receipt within 10 business days and respond within 45 days, extendable by a further 45 days where reasonably necessary, with notice to you. We provide the response free of charge, but may charge a reasonable fee or decline requests that are manifestly unfounded, excessive or repetitive, as the law permits.
10.4 Authorized agents
You may use an authorized agent. Through the contact form, the agent shall provide proof of written permission signed by you, and we may require you to verify your identity directly and to confirm the agent's authority. A person holding a power of attorney under applicable law needs no separate permission.
10.5 Appeals
If we deny your request, you may appeal within a reasonable time by submitting an appeal through the contact form, selecting the privacy appeal topic and including your original request details. We will respond in writing within 45 days (60 days in some states) and explain the reasons. If we deny your appeal, you may contact your state attorney general or other applicable authority.
10.6 Shine the Light
California Civil Code section 1798.83 lets California residents request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. You may confirm this through the contact form.
10.7 Marketing messages
You may opt out of product announcements by using the unsubscribe mechanism in the message or the contact form. We may still send service, security and legal notices. We do not send text messages or make calls; see Texts and Calls.
10.8 California minors
California residents under 18 who are registered users may request removal of content they posted, as California Business and Professions Code section 22581 provides. The Service is not directed to minors. Use the contact form.
11. Visitors Outside the United States
11.1 Application
This Section applies to individuals in the European Economic Area, the United Kingdom, Switzerland and other places with similar laws (together, "GDPR-style laws"). The Service is operated from the United States and is directed to customers in the United States.
11.2 Legal bases
| Purpose | Legal basis |
|---|---|
| Waitlist and responding to contact requests | Consent and our legitimate interests in operating our business and responding to you |
| Providing the Service and Accounts (Later) | Performance of a contract |
| Billing and tax (Later) | Contract and legal obligation |
| Security, fraud prevention, logs | Legitimate interests |
| Research and drafting from Public Source Data | Legitimate interests in providing customer-acquisition tools, balanced against the rights of the people named; you may object |
| Marketing announcements | Consent or, where permitted, legitimate interests with an opt-out |
11.3 Your rights
You may have the right to: access your data; correct it; delete it; restrict processing; object to processing, including processing based on legitimate interests and direct marketing; port data you provided; withdraw consent at any time without affecting earlier processing; and lodge a complaint with your local supervisory authority. Submit requests through the contact form. We do not make solely automated decisions with legal or similarly significant effects.
11.4 International transfers
11.4.1 We and our processors process information in the United States and Germany, and AI providers may process it in other countries. Where required, we rely on appropriate safeguards for transfers from the EEA, UK or Switzerland, such as the European Commission's standard contractual clauses and the UK addendum, and, where applicable, certification of a recipient under an adequacy framework.
11.4.2 You may request information about the safeguards through the contact form.
11.5 Representatives
We have not appointed a representative in the European Union or United Kingdom. Because the Service is not directed to those places, we do not intentionally offer it there, but we will respond to requests as described above.
12. Children
12.1 The Service is not directed to children under 13, and we do not knowingly collect personal information from them, in accordance with the Children's Online Privacy Protection Act (COPPA). The Service requires users of Accounts and Paid Plans to be at least 18.
12.2 We do not sell or share the personal information of anyone we know to be under 16.
12.3 If you believe a child under 13 has given us personal information, contact us through the contact form, and we will delete it.
13. Security and Breach Notice
13.1 We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), access controls, least-privilege access, separation of secrets from code, encrypted storage of connected-account tokens (Later), and monitoring and logging. We select processors with reasonable security practices.
13.2 No system is completely secure, and we cannot guarantee security. You are responsible for keeping your credentials confidential.
13.3 If a breach of security affects your personal information, we will notify you and regulators as the law requires, including under the New York SHIELD Act and other state breach notification laws, generally without unreasonable delay. Notice may be by email to the address you gave us or by notice on the Site.
14. Third-Party Sites and Platforms
The Site and Service link to and interoperate with third-party platforms. Their privacy practices are theirs, not ours, and you should review their policies. Content you publish to a platform becomes subject to its terms and may be public.
15. Changes to This Notice
We may update this Notice. We will post the new version with a revised effective date and, for material changes, give notice by posting a prominent notice on the Site or by contacting you at least 30 days before the change takes effect, unless the law requires otherwise. Your continued use after the effective date means you accept the updated Notice, where the law permits.
16. Your Responsibilities
If you use the Service for outreach, you are responsible for how you use personal information of other people, and you shall comply with the Terms, including the anti-spam and anti-harassment requirements, and with the laws that apply to you as an independent controller or business.
17. Contact
To exercise rights, appeal, ask questions or request removal of public-post data, use the contact form at https://firstsale.pro/contact. We do not publish an email address, telephone number or street address. Related pages: Terms, Cookies, Cancellation and Refunds, Texts and Calls, Accessibility, Licenses.
18. Limits of This Notice
This Notice describes our practices and is intended to meet our legal obligations, but it does not guarantee that no claim will ever be made against us.