Privacy Policy

2. What we collect

We collect: your email address (for login and communication), business information you provide (company name, industry, stage, product details, customer details), plan selections and check-in responses, and basic usage data (pages visited, features used). When a visitor arrives from a known AI search or assistant product, we may record the referring host name and the page path for product discovery measurement. We do not collect sensitive personal data as defined by UK GDPR.

3. Lawful basis for processing

We process your data on the following bases under UK GDPR: (a) Contract, to provide the service you signed up for; (b) Legitimate interest, to improve the service, fix bugs, prevent fraud, and understand how people discover FoundComp (including aggregated AI-referral hosts); (c) Consent, for optional communications such as product updates. You can withdraw consent at any time.

4. How we use your data

Your data is used to: generate personalised recommendations and plans, display your business dashboard and reports, send transactional emails (login, password reset, billing), improve the service through aggregated, anonymised analytics, and measure AI-search discovery channels. We never use your data to train public AI models.

5. Who we share it with

We do not sell your data. We share data only with: infrastructure providers who process data on our behalf (hosting, email delivery), optional first-party logging destinations we operate for referral measurement, and law enforcement if legally required. All processors are bound by data processing agreements and UK GDPR-equivalent protections.

6. International transfers

Where data is transferred outside the UK, we ensure adequate protections are in place, such as UK International Data Transfer Agreements or processing in jurisdictions with an adequacy decision from the UK Government.

7. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we remove all personal data within 30 days, except where we have a legal obligation to retain it (e.g. billing records for 7 years under HMRC requirements). Aggregated AI-referral host counts may be kept longer without identifying you.

8. Your rights

Under UK GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability (export your data), object to processing based on legitimate interest, and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any right, email hello@foundcomp.com.

9. Cookies and local storage

We use essential cookies only, for authentication and remembering your preferences (e.g. sidebar state, theme). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. For AI-referral measurement we may use first-party session storage briefly so the same page is not recorded twice in one browser session. No cookie consent banner is required for strictly necessary cookies under UK PECR.

10. Children

FoundComp is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email at least 14 days before they take effect.

12. Contact and complaints

Data controller: FoundComp. Email: hello@foundcomp.com. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.