FounderOS — Privacy Policy

1. What this covers

This policy explains what data FounderOS collects, how it's used, and your rights over it. FounderOS is a solo-founder operated SaaS product at myfounderos.app.

2. Data we collect

DATA	WHY	STORED IN
Email + password	Account creation, login, authentication	Supabase (encrypted)
Payment info	Subscription billing	Stripe (we never see your card number)
Pitch content, investor data, financial figures	Powering the AI modules you use	Your browser (local) + Supabase
AI prompts you submit	Generating deck content, emails, scores, chat replies	Sent to Anthropic Claude API, not stored by Anthropic for training

3. What we don't do

We do not sell your data to third parties.
We do not use your investor pipeline, financials, or pitch content to train AI models.
We do not share your data with advertisers.
We do not access your Stripe payment details directly. Stripe handles all card data under PCI-DSS compliance.

4. Third-party services we use

Supabase — authentication and database storage.
Stripe — payment processing and subscription billing.
Cloudflare — hosting and backend infrastructure (Workers, Pages).
Anthropic (Claude AI) — processes the prompts you submit to generate AI outputs.

Each of these providers has its own privacy policy governing how they handle data passed to them.

5. Data retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data remains accessible until you delete your account. Upon account deletion, your data is permanently removed within 30 days, except where retention is required for legal or tax purposes (e.g. billing records).

6. Your rights

You can at any time:

Request a copy of the data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Cancel your subscription through the billing portal without contacting support.

To exercise these rights, email [email protected].

7. Cookies

FounderOS uses essential cookies and local storage strictly necessary to keep you logged in and to store your investor pipeline locally in your browser. We do not use third-party advertising or tracking cookies.

8. Security

Passwords are hashed and never stored in plain text. All traffic between your browser and our servers is encrypted via HTTPS. Payment data never touches our servers directly, it is handled entirely by Stripe.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via email to active subscribers.

10. Contact

Privacy questions or requests can be sent to [email protected].