Privacy Policy
Last updated: June 21, 2026
This Privacy Policy explains how FounderOS ("we," "us," "our"), operated by Jefferson Buiar and available at myfounderos.app (the "Service"), collects, uses, stores, and protects your information. By using the Service, you agree to the practices described here.
1. Who We Are
FounderOS is the data controller for the personal information described in this policy. As we are based in Brazil, processing of personal data is governed by the Lei Geral de Proteção de Dados (LGPD). We also aim to comply with the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) for users covered by those laws.
2. Information We Collect
| Category | Examples |
|---|---|
| Account data | Name, email address, password hash (via Supabase Auth) |
| Billing data | Subscription plan, billing history. Card details are collected and stored directly by Stripe — we never see or store full card numbers. |
| Product data | Investor pipeline entries, pitch deck content, cold email drafts, financial figures (cash, burn, MRR), term sheets you submit for analysis |
| Usage data | Token consumption, feature usage, login activity, anonymized analytics via Cloudflare Analytics |
| Technical data | IP address, browser type, device information |
3. How We Use Your Information
- To provide and operate the Service, including AI-generated outputs from the features you use;
- To process payments and manage your subscription;
- To enforce daily token allowances per plan;
- To communicate with you about your account, billing, or material changes to the Service;
- To improve the Service through aggregated, non-identifying usage analytics;
- To comply with legal obligations.
4. AI Processing
This data is processed in accordance with Anthropic's own commercial data handling terms, which do not use API content to train their models. We do not share this data with any other third party beyond what is necessary to operate the Service.
5. Third-Party Service Providers
| Provider | Purpose |
|---|---|
| Supabase | Authentication and database storage |
| Stripe | Payment processing and subscription billing |
| Cloudflare | Hosting, content delivery, and aggregate traffic analytics |
| Anthropic | AI processing for product features (Claude API) |
We do not sell your personal information to advertisers or data brokers, and we do not run third-party advertising on the Service.
6. Data Retention
We retain your account and product data for as long as your account is active. If you cancel your subscription, your data is retained for a limited grace period in case you reactivate, after which it may be deleted upon request or as part of routine data minimization.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Request deletion of your data ("right to be forgotten");
- Request a copy of your data in a portable format;
- Withdraw consent or object to certain processing, where applicable.
To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law (including LGPD and GDPR where relevant).
8. Data Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), authentication handled by Supabase, and payment processing handled entirely by Stripe (PCI-DSS compliant). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
Your data may be processed in countries other than your own, including the United States, where our infrastructure and AI providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
10. Children's Privacy
The Service is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it.
11. Cookies & Analytics
We use minimal, privacy-respecting analytics (Cloudflare Analytics) to understand aggregate traffic patterns. This does not involve cross-site tracking cookies or advertising identifiers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact
For privacy-related questions or requests, contact [email protected].