Privacy Policy

At Foundly, we take your privacy seriously. This Privacy Policy explains how Foundly ("Foundly," "we," "us," or "our") collects, uses, processes, stores, and protects information when you access or use the Foundly website, platform, products, and related services (collectively, the "Service").

Foundly is an AI-powered business idea validation and research platform. Our Service allows users to submit business ideas for analysis and receive research-based validation results, including insights related to markets, competition, demand, customers, opportunities, risks, and other business factors.

By accessing or using Foundly, you acknowledge the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should not use the Service.

1. Information We Collect

We aim to collect only the information reasonably necessary to operate, secure, improve, and provide Foundly.

Account Information

Foundly currently allows users to create or access an account using supported third-party authentication providers, including Google and GitHub.

Depending on the information made available by the authentication provider, we may receive and store information such as your name, email address, profile image, authentication provider, and account identifier associated with that provider.

Foundly does not require you to create or provide a separate Foundly password when you authenticate through these supported providers.

Your use of Google or GitHub authentication is also subject to the privacy practices and terms of the respective provider.

Business Ideas and Validation Inputs

When you use Foundly to validate a business idea, you provide information about that idea so that the Service can perform the requested research and analysis.

This information may include your idea description and other information you voluntarily provide as part of the validation process.

Because Foundly is an idea validation service, the information you submit must be processed in order to generate your requested validation.

You should not submit passwords, payment card information, government identification numbers, medical records, or other sensitive personal information that is unnecessary for validating your business idea.

Validation Results

Foundly generates research and analysis based on the information submitted through the Service.

Validation results may contain market research, competitor information, customer insights, demand analysis, opportunities, risks, and other information relevant to evaluating a business idea.

Stored validation results are protected using encryption as part of our security practices.

Usage and Technical Information

When you interact with Foundly, certain technical and usage information may be collected automatically by us or our service providers.

This may include information such as browser type, device information, pages or features accessed, interactions with the Service, approximate geographic information derived from technical information, timestamps, referral information, and similar diagnostic or analytics data.

Such information may also include IP addresses where they are processed by our infrastructure or third-party providers in connection with security, authentication, analytics, or delivery of the Service.

2. How We Use Your Information

We use information collected through Foundly to provide and operate the Service, authenticate users, generate requested idea validations, maintain user accounts, store validation results, process purchases, maintain credit balances, understand how the Service is used, improve reliability and performance, prevent fraud and abuse, protect the security of Foundly, provide customer support, comply with applicable legal obligations, and enforce our agreements and policies.

We do not use your submitted business ideas or validation results to train our own artificial intelligence models.

We also do not claim ownership of your business ideas merely because you submit them to Foundly for validation.

3. Artificial Intelligence Processing

Foundly uses artificial intelligence technologies to provide portions of its idea validation functionality.

Information submitted for validation may be processed by AI service providers, including OpenAI, when necessary to generate the analysis requested by the user.

This means that the information you submit for validation must be processed before the resulting validation can be generated and stored.

Foundly does not represent that information submitted for AI analysis remains end-to-end encrypted while it is actively being processed. Instead, encryption protections apply to stored validation results as described in this Privacy Policy and to data transmission where supported by the applicable infrastructure.

We encourage users not to include unnecessary personal, confidential, regulated, or highly sensitive information in their business idea submissions.

4. How We Store Validation Results

After a validation has been generated, the resulting validation data may be stored so that you can access it from your Foundly account.

Stored validation results are protected using encryption.

We implement technical safeguards designed to reduce unauthorized access to stored validation information.

However, no method of electronic transmission, storage, encryption, or information-security system can guarantee absolute security. We therefore cannot promise that unauthorized access, loss, misuse, or disclosure will never occur.

5. We Do Not Train Our Models on Your Ideas

Foundly does not use your submitted business ideas or saved validation results to train proprietary AI models.

Your ideas are submitted for the purpose of providing the validation and research functionality you request.

Where third-party AI providers process information on our behalf, their processing is governed by our applicable arrangements with those providers and their applicable privacy and data-processing terms.

6. Third-Party Service Providers

Foundly relies on third-party technology providers to operate certain portions of the Service.

These currently include:

• OpenAI for artificial intelligence processing used in generating idea validation and research results.
• Supabase for backend infrastructure, database functionality, authentication-related infrastructure, and other technical services used to operate Foundly.
• Dodo Payments for payment processing and related billing functionality.
• Google Analytics for analytics that help us understand how visitors and users interact with Foundly.

We may disclose or make information available to these providers only to the extent reasonably necessary for them to perform services on our behalf or as otherwise described in this Privacy Policy.

Third-party providers maintain their own privacy and security practices. Information processed directly by a third party may also be subject to that provider's terms and privacy policies.

7. Payments

Payments for Foundly products, including purchases of Foundly credits, are processed through Dodo Payments.

Foundly does not directly store your complete payment card number or card security code.

Payment information necessary to complete a transaction is processed by the applicable payment provider.

We may receive and retain transaction-related information necessary to maintain your Foundly account, credit balance, purchase history, customer support, fraud prevention, accounting, or other legitimate operational purposes.

This may include information such as transaction status, purchased credits, transaction identifiers, amounts paid, currency, dates, and other non-sensitive transaction information.

8. Foundly Credits

Foundly operates using a credit-based system.

Information regarding the number of credits purchased, consumed, or remaining may be associated with your account so that Foundly can provide the Service and maintain an accurate credit balance.

Credit and transaction records may be processed through Foundly and relevant payment or infrastructure providers.

9. Google Analytics and Cookies

Foundly uses Google Analytics to understand how visitors interact with our website and Service.

Google Analytics may use cookies or similar technologies and process information about your interactions with Foundly, such as pages visited, device or browser information, approximate location, referral information, and usage events.

This information helps us understand product usage, identify technical issues, evaluate website performance, and improve the user experience.

Your browser may provide controls that allow you to block or delete cookies. Disabling certain cookies may affect some website functionality.

Where applicable law requires consent before placing or accessing certain non-essential cookies or similar technologies, Foundly will seek such consent as required. See our Cookie Policy for more information.

10. How We Share Information

We do not sell your business ideas or validation results.

We may share or disclose information with service providers that help us operate Foundly, including the providers described in this Privacy Policy.

We may also disclose information where reasonably necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; protect the rights, security, or property of Foundly, our users, or others; investigate fraud, abuse, or security incidents; enforce our Terms of Service; or protect against legal liability.

If Foundly is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law and appropriate protections.

11. Sale of Personal Information

Foundly does not sell personal information for monetary consideration as part of its ordinary business model.

Foundly's business model is based on providing idea validation and research services, not selling users' personal information.

If our practices change materially in the future, we will update this Privacy Policy and provide any notices or choices required by applicable law.

12. Data Retention

We retain account information and validation-related information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Privacy Policy, or comply with applicable legal obligations.

Users may delete individual validation results where that functionality is provided by the Service.

Users may also delete their Foundly account.

When account or validation information is deleted through the applicable Foundly functionality, we remove the relevant information from active user-facing systems in accordance with our deletion processes.

Certain limited information may nevertheless be retained where required or permitted by applicable law, including for fraud prevention, security, dispute resolution, accounting, tax, payment records, enforcement of agreements, or compliance with legal obligations.

Information independently maintained by third-party providers may be subject to those providers' applicable retention requirements.

13. Account Deletion

You may delete your Foundly account through the account functionality made available within the Service.

Account deletion removes the account and associated user data from Foundly's active systems in accordance with our deletion process, subject to limited retention where required or permitted for legitimate legal, security, fraud-prevention, accounting, or transactional purposes.

Account deletion may be permanent and may result in the loss of stored validation results and other information associated with the account.

Users should therefore confirm that they wish to permanently delete their account before completing the process.

14. Data Security

We use reasonable technical and organizational safeguards designed to protect information processed through Foundly.

Depending on the relevant information and system, these safeguards may include encryption, secure transmission technologies, authentication controls, access restrictions, infrastructure protections, and other security measures.

Stored validation results are protected using encryption.

Nevertheless, no internet service can guarantee absolute security. You use online services and transmit information over the internet at your own risk.

If we become aware of a data security incident requiring notification under applicable law, we will provide notifications as required.

15. Your Privacy Rights

Depending on where you live, applicable privacy laws may provide rights regarding your personal information.

These rights may include the ability to request information about personal data collected about you, request deletion, request correction of inaccurate information, object to or restrict certain processing, or exercise other rights provided by applicable law.

Not every right applies in every jurisdiction or circumstance.

Foundly may need to verify your identity before processing certain privacy requests.

You may contact us regarding an applicable privacy request at hello@foundly.pro.

We will respond to valid requests in accordance with applicable law.

16. California Privacy Rights

California residents may have additional rights under applicable California privacy laws.

Where the California Consumer Privacy Act, as amended, applies to Foundly, eligible California residents may have rights concerning access to categories or specific pieces of personal information, deletion, correction, information regarding disclosure practices, opting out of certain sales or sharing, limiting certain uses of sensitive personal information, and protection against unlawful discrimination for exercising privacy rights.

Not every California privacy statute or requirement necessarily applies to Foundly merely because a California resident uses the Service. Applicability can depend on statutory thresholds and other legal requirements. For example, the CCPA applies to covered for-profit businesses meeting specified criteria.

California residents may contact hello@foundly.pro regarding applicable privacy rights.

17. Users Outside the United States

Foundly is available to users in multiple countries.

If you access Foundly from outside the United States, information may be processed in countries different from the country in which you reside, including the United States and locations where our service providers operate.

Privacy and data protection laws may differ between jurisdictions.

Where required by applicable law, we will use appropriate mechanisms or safeguards for international processing and transfers of personal information.

Nothing in this Privacy Policy is intended to waive rights that cannot lawfully be waived under the privacy laws applicable to you.

18. Users in the European Economic Area, United Kingdom, and Similar Jurisdictions

Where applicable data protection law requires a lawful basis for processing personal information, our processing may rely on performance of a contract or steps requested before entering into a contract, legitimate interests, consent, or compliance with legal obligations, depending on the specific processing activity.

For example, processing information necessary to generate a validation requested by you may be necessary to provide the Service, while certain analytics technologies may require consent depending on applicable law and configuration.

Where applicable, users may have rights to request access, correction, deletion, restriction, objection, or other rights provided by their local law.

Requests may be sent to hello@foundly.pro.

19. Age Requirement

Foundly is intended for users who are at least 16 years old.

You may not use Foundly if you are under 16.

We do not knowingly intend to collect personal information from children under 16 through the Service.

If we learn that information has been collected from a person under the applicable minimum age in violation of our policies or applicable law, we may take reasonable steps to delete the information.

If you believe a person under 16 has provided personal information to Foundly, please contact us at hello@foundly.pro.

20. Third-Party Authentication

Foundly supports authentication through third-party services such as Google and GitHub.

When you choose one of these authentication methods, the provider authenticates your identity and may provide Foundly with information necessary to create or access your account.

Foundly does not control the independent privacy practices of those providers.

Your interaction with those services is also governed by their respective privacy policies and terms.

21. Third-Party Websites and Sources

Foundly may analyze publicly available information or provide references to external websites, services, sources, companies, or resources as part of its research functionality.

Foundly does not control the privacy practices, security, availability, or content of independent third-party websites.

Accessing a third-party website is subject to that third party's own terms and privacy practices.

22. Automated Processing and AI-Generated Research

Foundly uses automated systems and artificial intelligence to analyze information and generate business research.

AI-generated validation results are intended to assist users with research and decision-making.

Automated systems may make mistakes, misunderstand information, rely on incomplete information, or produce inaccurate conclusions.

Users should independently evaluate important business decisions and verify information where appropriate.

The use of AI to generate research does not change the privacy practices described in this Policy.

23. Do Not Track Signals

Some browsers provide "Do Not Track" or similar privacy signals.

Because there is not a single universally implemented standard governing all such browser signals, Foundly may not respond to every Do Not Track mechanism.

Where applicable law requires recognition of a legally recognized opt-out preference signal, we will handle such signals as required by applicable law.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Foundly, our technology, service providers, legal obligations, or privacy practices.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy.

If a change is material, we may provide additional notice where appropriate or required by law.

We encourage users to review this Privacy Policy periodically.

Continued use of Foundly following an updated Privacy Policy will be governed by the updated Policy to the extent permitted by applicable law.

25. United States Legal Framework

Foundly is designed to operate in the United States market and this Privacy Policy is intended to address applicable United States privacy requirements relevant to the Service.

Privacy regulation in the United States includes both federal and state law rather than a single general U.S. privacy statute applicable identically to every online business.

Nothing in this Privacy Policy limits consumer privacy rights that apply regardless of contractual language.

Any separate governing-law or dispute-resolution provisions applicable to use of Foundly should be established in Foundly's Terms of Service.

26. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or Foundly's privacy practices, you may contact us at:

Foundly
Email: hello@foundly.pro

We will review privacy-related requests and respond as required by applicable law.