StarDrive Inc.
Privacy Policy
Last updated: July 5, 2026
This Privacy Policy describes how StarDrive Inc. (“StarDrive,” “we”) collects and uses information in connection with the FirstLight website and the FirstLight Compose platform (the “Services”).
1. Information We Collect
Account data: your email address and a salted hash of your password (never the password itself), or your email as verified by Google sign-in. Usage data: board descriptions you submit, generated design artifacts, run history, plan and quota status. Payment data: handled entirely by Stripe; we receive subscription status and a customer reference, never card numbers. Technical data: standard server logs (IP address, timestamps, requests) used for security and operations.
2. Bring-Your-Own-Key AI
If you configure a personal AI provider API key, it is stored only in your browser’s local storage and sent with your requests to authenticate against that provider. We do not persist your provider keys on our servers.
3. How We Use Information
To operate the Services: generating designs, maintaining your run history, enforcing plan limits, processing subscriptions, providing support, and securing the platform. Board descriptions are processed by third-party AI model providers (such as Anthropic) to power the design interview, reviews, and diagnosis; component lookups may be sent to distributor APIs (such as DigiKey) without your identity attached.
4. What We Don’t Do
We do not sell your personal information. We do not use your private board designs to market to third parties. Your designs are visible only to your account unless you share them.
5. Cookies
We use a session cookie to keep you signed in and short-lived cookies during OAuth sign-in and checkout. No third-party advertising cookies.
6. Data Retention and Deletion
Account and run data are retained while your account is active. Email jack@thestardrive.com to request deletion of your account and associated data; we will honor verified requests within 30 days, subject to legal retention obligations.
7. Security
Passwords are hashed (scrypt), sessions are signed, and access to run artifacts requires authentication. No system is perfectly secure; use a unique password.
8. Children
The Services are not directed to children under 13.
9. Changes
We may update this policy; material changes will be posted here with an updated date.
Contact
StarDrive Inc., jack@thestardrive.com