Privacy Policy

1. Who is responsible

The controller for this website and the waitlist is:

2. Visiting this website

The website is hosted by Vercel. When you open a page, Vercel automatically processes technical data that your browser sends: IP address, date and time of the request, the page requested, referrer, browser type and operating system. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Log data is deleted by Vercel after a short period.

To understand how the site is used, we use Vercel Web Analytics. It works without cookies and does not identify you: it records anonymised page views (page, referrer, country, browser and device type) and does not store IP addresses. The legal basis is our legitimate interest in improving the site (Art. 6(1)(f) GDPR). We do not use cookies, tracking pixels or advertising tools. Fonts are served from our own domain, so no data is sent to Google Fonts. If you switch between light and dark mode, that choice is saved in your browser's local storage and never leaves your device.

3. Waitlist

If you join the waitlist, we store your email address and the time you signed up so we can contact you about access to Founders Intelligence. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by emailing roheberatung@gmail.com, and we will delete your address. Otherwise we delete it once the waitlist is closed or you become a customer.

4. Customer data in the service

Founders Intelligence builds a knowledge base for each customer and produces weekly briefings from it. Depending on what the customer connects, this includes:

• Gmail and Google Drive (read-only): emails and documents, used to identify clients, partners, projects and leads. We do not send email, change or delete documents, or process the content of photos and videos.
• Instagram (read-only, where connected): account insights and post performance.
• Public sources: news articles, trade press, event and company websites and public social media profiles relevant to the customer's market.

For data from a customer's own accounts, the customer is the controller and we process it on their behalf under a data processing agreement (Art. 28 GDPR). This data may include personal data of third parties, such as the names and contact details of people the customer corresponds with. We process it only to deliver the service to that customer.

Each customer's data is kept in a separate workspace, is never shared with other customers, and is not used by us to train AI models. The service suggests actions but does not contact anyone or publish anything on a customer's behalf.

5. Google user data

Founders Intelligence's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features the customer has enabled, do not sell it, do not use it for advertising, and do not let humans read it except with the customer's permission, for security reasons, or where the law requires it.

6. Service providers

We use the following providers to run the website and the service. Each processes data only on our instructions under a data processing agreement.

Where data is transferred outside the EU/EEA, we rely on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or on the EU Standard Contractual Clauses (Art. 45–46 GDPR). Anthropic does not use data received through its business API to train its models.

7. How long we keep data

We keep customer data for as long as the customer uses the service. After the contract ends, or on request, we revoke all access tokens and delete the customer's workspace within 30 days, unless the law requires us to keep certain records longer. Customers can also revoke our access at any time in their Google or Meta account settings.

8. Your rights

You have the right to:

• access the personal data we hold about you (Art. 15 GDPR),
• have it corrected or deleted (Art. 16 and 17),
• restrict its processing (Art. 18),
• receive it in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21), and
• withdraw consent at any time, without affecting processing before the withdrawal (Art. 7(3)).

To exercise these rights, email roheberatung@gmail.com. If your data was processed for one of our customers, we will forward your request to that customer. You can also complain to a data protection authority, for example the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

9. Changes

We will update this policy when our service or the law changes. The date at the top shows the latest version.