Privacy Policy

Foundrie, Inc. provides the Services and is responsible for personal information handled through them. You can reach us at info@foundrieai.com.

When you use the Services as an individual, Foundrie is the controller of your personal information. When the Services are provided to or through an organization (a Workspace), that organization is generally the controller of the content and member information in its Workspace, and Foundrie acts as a processor on its behalf, handling that information according to the organization’s instructions and any data-processing terms.

We collect the information you give us when you create an account and use the Services, including:

• Account and profile information — your name, email address, authentication credentials (managed through our authentication provider), and profile details such as background, skills, and experience.
• Career content — resumes, job descriptions, cover letters, portfolio items, and other documents you upload or create in the Career suite.
• Company content — business ideas, validation inputs, phase progress, decisions, evidence, and other venture materials you create in the Company suite.
• Brand content — brand strategy, voice, and content materials you create in the Brand suite.
• Communications — messages, inbox content, support requests, and feedback you send us.
• Payment information — when you purchase a Subscription, our payment processor collects your payment details. We do not collect or store your full payment card number.

Please do not submit sensitive personal information (such as government identifiers, health, or financial account numbers) unless it is necessary for the feature you are using.

When you use the Services, we and our providers may automatically collect:

• Usage and activity data — the features and tools you use, actions taken, and timestamps.
• Device and connection data — browser type, device and operating-system information, and IP address.
• Log and diagnostic data — authentication events, AI request metadata, error reports, and performance information.
• Cookies and local storage — as described in our Cookie Policy.

We may receive information from third parties, such as: a third-party identity provider if you choose to sign in through it (basic profile information); our payment processor (Subscription and payment status, not full card numbers); and an organization’s Administrators when they add you to a Workspace.

We use personal information to:

• provide, operate, and maintain the Services, including generating the Output you request;
• authenticate users, secure the Services, and prevent fraud and abuse;
• process Subscriptions, payments, and related transactions;
• provide support, respond to requests, and send service and administrative communications;
• understand usage, debug, control AI processing costs, and improve the quality and safety of the Services;
• comply with legal obligations and enforce our Terms.

We rely on various legal bases where applicable, including performance of our contract with you, our legitimate interests in operating and improving the Services, your consent (where required), and compliance with legal obligations.

The Services use artificial intelligence to generate Output. To do this, the inputs you provide (such as a resume, a business idea, or a prompt) are sent to our AI provider, Google, through its Gemini API, which processes them to return the requested Output. That processing is subject to Google’s applicable terms for the API.

We do not sell your personal information, and we do not use the private content you submit to train our own foundation models. We use content to provide the feature you requested and, in aggregated or de-identified form, to understand and improve how the Services perform.

You remain responsible for the content you submit and for reviewing and verifying Output before relying on it. Please avoid submitting content you are not permitted to share.

We do not sell your personal information. We share it only as described here:

• Service providers (sub-processors) that help us operate the Services, under contracts that limit their use of the information, including: Google (Gemini AI processing; Firebase Authentication and Firestore data storage on Google Cloud), Stripe (payment processing), Vercel (application hosting and infrastructure), and Resend (transactional email). Where enabled, PostHog (product analytics) and Sentry (error monitoring) as described in Section 8.
• Within your organization — if you use the Services in a Workspace, your account information and content in that Workspace may be accessible to the organization’s Administrators.
• Legal and safety — when we believe disclosure is necessary to comply with law or legal process, enforce our Terms, or protect the rights, property, or safety of Foundrie, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your consent — for any other purpose disclosed to you.

We use privacy-protective product analytics and error monitoring, and both are disabled unless their keys are configured for an environment.

Product analytics (PostHog) helps us understand page views and feature usage. It is configured to mask on-screen text, input values, and element attributes; it scrubs event properties before they are sent; and any session recording, if ever enabled in the analytics project, masks all inputs and text and is stopped on sensitive pages (such as Career, portfolio, profile, inbox, and admin pages).

Error monitoring (Sentry) helps us detect and fix problems. It is configured to send no default personal information and no session replay, and it scrubs error reports and breadcrumbs to remove resume, job-posting, and chat text, email addresses, phone numbers, and authentication tokens, and to strip request bodies, cookies, and query strings.

We use cookies and local storage to operate the Services, remember your preferences, and (where enabled) measure usage. For details and your choices, see our Cookie Policy.

We retain personal information for as long as your account is active and for a reasonable period afterward as needed to provide the Services, comply with legal obligations, resolve disputes, maintain security and backups, and enforce our agreements.

When information is no longer needed, we take steps to delete or de-identify it. You can request deletion of your account and associated data as described below.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• access the personal information we hold about you and request a copy;
• correct inaccurate or incomplete information;
• delete your personal information, subject to legal exceptions;
• port your information to another service where applicable;
• object to or restrict certain processing, and withdraw consent where processing is based on consent.

If your information is managed within an organization’s Workspace, please direct requests to that organization; we will assist as a processor as needed. You can exercise your rights or ask questions by emailing info@foundrieai.com, and we will respond consistent with applicable law. You may also have the right to lodge a complaint with your local data-protection authority.

For California residents: we do not sell your personal information and do not share it for cross-context behavioral advertising, and we honor the rights described above without discrimination.

We are based in the United States, and we and our sub-processors may process personal information in the United States and other countries. Where required, we use appropriate safeguards for international transfers. By using the Services, you understand your information may be processed in countries whose data-protection laws may differ from those of your country.

We use reasonable technical and organizational measures to protect personal information, including authenticated access, database security rules, role-based access controls, separation of development and production environments, encryption in transit, and scrubbing of sensitive data from diagnostics and analytics.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your credentials and notify us of any suspected compromise.

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

Where Foundrie processes personal information on behalf of an organization, we do so according to the organization’s instructions and our agreement with it. Organizations are responsible for their lawful basis to use the Services and for providing any required notices to, and obtaining any required consents from, their members. Data-processing terms are available to organization customers on request.

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, take reasonable additional steps to notify you. Your continued use of the Services after an update takes effect constitutes acceptance of the updated Policy.

For questions about this Policy or to exercise your rights, contact Foundrie, Inc. at info@foundrieai.com.