What we keep, and for how long.

The short version

• The saving period is 30 days, followed by the next daily deletion run.
• If a copy is saved, the result page gives you a private receipt and a delete button.
• We do not ask for your name, email or phone number.
• No raw IP address, precise location, cookie or device fingerprint enters the research record.

What the AI receives

Your three answers travel over HTTPS to the First 60 server and then to Anthropic, the model provider, so the model can produce your read. An automated schema and safety check reviews the result before it is shown.

Anthropic states that standard commercial API inputs and outputs are normally retained for up to 30 days, with limited exceptions for legal or policy enforcement, and are not used to train its models unless the customer opts in. See Anthropic’s retention explanation and training explanation.

What the research copy contains

The copy contains your three answers, the result, the time, a random receipt, the model and validation status, your usefulness answer if you give one, the page that sent you here, fixed campaign and creative labels for a limited distribution test, and an approximate country, region and city supplied by Vercel.

The approximate location comes from the connection IP, which Vercel processes to run and protect the site. The raw IP is replaced with a temporary salted hash for the in-memory rate limit and is not written into the research record. We do not store precise coordinates, postal code, full referring URL, user agent, advertising ID or a cross-visit identifier.

This data is privacy-minimized, but it is not guaranteed anonymous. Free text, location and timing can identify someone when combined. Use roles instead of names, and leave out confidential company facts, health information and anything else you would not say to a stranger.

Why it is saved

The only research purpose is to understand which meeting situations people bring, find weak or unsafe results, improve the prompts and product, and measure whether the output was useful. It is not used to contact you, build an advertising profile, or make a decision about you.

The legal basis for this limited research copy is legitimate interests: improving and securing First 60 while keeping the impact on participants small. The safeguards are a short retention period, private storage, data minimization, no contact field, no raw IP in the record, a short notice before the first answer, and immediate deletion from the live research store when you use the delete control. You can object at any time.

Background: the French data protection authority’s guidance on legitimate interests and AI improvement.

Storage, access and deletion

Research copies are kept in a private Vercel Blob store configured in Paris. Access is restricted to Kai through a password-protected private Insights page. The app schedules each copy for deletion after 30 days, and a daily cleanup removes expired copies. A copy can therefore remain until the next daily run.

On the result page, “Delete my saved copy” removes the live research copy immediately. Keep the random receipt shown there if you may want to request deletion later. Deleting the research copy does not accelerate the separate provider retention described above.

Providers and international processing

Vercel provides hosting, private storage, security and cookieless site analytics. Anthropic provides the AI model. These providers can process service data in countries outside yours and describe their transfer safeguards in their own privacy terms. No research copy is sold or shared with advertisers.

Provider information: Vercel privacy · Anthropic commercial terms

Analytics and the share card

Product events carry short labels and numbers, never your three free-text answers. A campaign or creative label is included only when it exactly matches an approved test label; arbitrary UTM text is not sent as a product analytics property. Vercel Analytics receives site usage data but no free-text answer fields from the app. The optional share card is drawn in your browser. It starts with a safe summary and includes generated text only if you explicitly add it.

The Bailout waitlist

If you join the waitlist on the Bailout page, we keep your email, the button you picked, the site or campaign that sent you, and the time you signed up. We use it only to email you about Bailout and what Kai builds next, because you ticked the box to agree. We never ask for your bills. We do not sell or share the list. Every email has an unsubscribe link, and you can ask Kai to delete your email at any time.

Your choices and rights

If a copy was saved, use its delete button or contact Kai with the receipt. Where data protection law applies, you may also ask for access, correction, deletion, restriction or objection, and you may complain to your local data protection authority.

Who is responsible

Kai Shapiro is the controller for the First 60 research copy. For a privacy request, message Kai on LinkedIn and include the random receipt if you have it.