Privacy policy

Draft. This text needs to be reviewed by a lawyer before the public launch.

What we store

  • Your login email. It is never public.
  • The profile details you enter yourself: first name and last initial, age, city, country, role, industries, skills, vision, time and investment, photo, Instagram and LinkedIn.
  • Posts, comments, likes, follows and messages.
  • In a project workspace: what your team enters, e.g. tasks, money entries and contacts (name, company, email and phone of people the team works with).
  • If you join the waitlist: your email, what you are interested in, city, language, the plan you want and where you came from (e.g. TikTok or an invite link).
  • Subscription details from Stripe (status and dates). We never see or store your card number.
  • Whether you are a founding member (one of the first members), how many months of Pro you get for free and how many people joined the list through your link, for the invite reward.

Who sees what

  • Guests on the home page see visions and posts without names or photos.
  • Members see profiles, posts and comments.
  • Messages are seen only by the sender and the recipient.
  • A project workspace (tasks, money, contacts) is seen only by the team members.
  • Other members can see a Founding member badge. We don't show other members how many people you invited or how many free months you have.
  • If you are on a paid plan (Pro) and agree to be featured in an ad, we publish only the text, photos and video you approve.

Who we share data with

With the services the app can't work without: Stripe (payments), an email delivery service, Google (if you sign in with a Google account), hosting (Vercel, which also counts visits, without cookies), Supabase (database and file storage: profiles, messages, photos, CVs and letters) and Formspree (when you join the waitlist, it sends us an email notification with your email, role, city, the plan you want, where you came from and whether someone invited you). If you allow the Meta Pixel, Meta (Facebook, Instagram) also receives visit data, as described below. We don't sell data. We don't use your profile, messages or email for advertising, except content you approve for an ad of your project. We publish that content on Instagram, TikTok and Facebook, and for paid ads we give it to Meta and TikTok.

Contracts and protecting your idea. When you create a contract from a template, we store the parties' names, the time each party signs, and the document text and its fingerprint (SHA-256). Only the parties and the project team members can see a contract. When you send a trademark or patent request, we send it to our IP partner with your name and email, so they can reply to you.

Your rights

You can edit or delete your profile at any time. When you delete your account, we permanently remove your data, except what the law requires us to keep (e.g. invoices). You give and withdraw permission for ads with a checkbox in your profile, and deleting your account also withdraws it. We then remove our posts about your project and stop any paid ads. We keep a record of the permission (name, email and dates) after the account is deleted, as proof that it was given.

Cookies

The login cookie and the cookie that remembers your language are necessary and always on.

Meta Pixel (Facebook and Instagram ads): on the home page, the sign-up page and the pricing page we ask whether you allow it. If you decline, Meta's code is not loaded at all. If you allow it, Meta sets its own cookies (_fbp, and _fbc if you came from an ad) and receives visit data: which page you opened (without your invite code), which ad you came from and whether you joined the list. With a signup we send only the role you picked, never your email or city. Meta may link the visit to your Facebook or Instagram account. We use this only to measure and improve our ads. We remember your choice in a cookie called "consent" for up to 6 months, and you can change it any time with the "Cookies" link in the page footer.

We also count visits with Vercel Analytics, without cookies.

Privacy · Foundmates