founde.cc
Sign in

Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how Founde LLC, a Delaware limited liability company with its registered office at 1201 N Market St, Ste 111, Wilmington, DE 19801, United States ("Founde", "we", "us"), processes personal data in connection with the founde.cc website and related services (the "Service"). It is designed to satisfy the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR"), the UK GDPR and the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA").

1. Data controller

Founde LLC is the "controller" of your personal data under GDPR and the "business" under CCPA/CPRA. You can reach us at founde.cc@gmail.com.

2. Personal data we collect

  • Account data: email address, display name, handle, avatar, authentication provider identifiers (e.g. Google).
  • Profile & content: posts, comments, votes, follows, channels, bio and any content you choose to publish.
  • Usage data: IP address (truncated where possible), user-agent, pages viewed, timestamps, referrer, approximate location derived from IP.
  • Device & cookies: cookie / local-storage identifiers set for authentication, security and (with your consent) analytics — see our Cookie Policy.
  • Communications: messages you send us by email or in-app.

3. Purposes and legal bases (GDPR Art. 6)

  • Providing the Service, account and features — performance of a contract (Art. 6(1)(b)).
  • Security, fraud prevention, abuse detection, logs — legitimate interests (Art. 6(1)(f)) in operating a safe service.
  • Analytics and product improvement (optional cookies) — your consent (Art. 6(1)(a)); you can withdraw it at any time.
  • Legal compliance and responding to legal requests — legal obligation (Art. 6(1)(c)).
  • Enforcing our Terms and defending legal claims — legitimate interests (Art. 6(1)(f)).

4. Recipients and processors

We share personal data only with providers that process it on our behalf under written data-processing agreements. Our current subprocessors and their role are:

  • Lovable (Lovable AB, Sweden) — application hosting, build and deployment pipeline for the founde.cc app.
  • Supabase (Supabase Inc., USA / EU regions we select) — managed PostgreSQL database, authentication, storage and server-side functions. Data is processed in the AWS region Lovable Cloud provisions for this project.
  • Cloudflare (Cloudflare Inc., USA) — CDN, DNS and edge network in front of founde.cc.
  • Google (Google LLC, USA) — Google OAuth as an optional sign-in provider you choose to use; Google Fonts to serve typography.
  • Google Analytics (Google LLC, USA) — aggregated usage analytics, loaded only if you consent to the "Analytics" category and configured in consent-mode with IP anonymisation.
  • Unsplash (Unsplash Inc., Canada) — the CDN that serves some link-preview images embedded in user posts.

We do not currently use dedicated error-monitoring or marketing subprocessors. If we add any, this list and the change log below will be updated before we start using them.

We do not sell your personal data and we do not "share" it for cross-context behavioural advertising as defined by CCPA/CPRA.

5. International transfers

Founde LLC is established in the United States, and some of our service providers process data outside the EU / EEA / UK. Where we transfer personal data from the EU / EEA / UK to a country not recognised as offering an adequate level of protection, we rely on the European Commission's Standard Contractual Clauses (2021/914) together with supplementary safeguards where appropriate. A copy is available on request.

6. Retention

We keep personal data only for as long as necessary for the purposes set out above and to comply with legal obligations. Account and content data are retained while your account is active; when you delete your account, personal data are deleted or anonymised within a reasonable period, except where retention is required for legal reasons.

7. Your rights (EU / EEA / UK)

You have the right to:

  • access your personal data (Art. 15 GDPR);
  • rectify inaccurate data (Art. 16);
  • erase your data ("right to be forgotten", Art. 17);
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interests (Art. 21);
  • withdraw consent at any time, without affecting past processing.

To exercise these rights, email founde.cc@gmail.com. You also have the right to lodge a complaint with the data-protection authority in your EU / EEA / UK member state.

8. Your rights (California residents)

Under the CCPA/CPRA, California residents have the right to know what personal information we collect, to request deletion, correction and access, to opt out of any "sale" or "sharing" of personal information, and to be free from discrimination for exercising these rights. As stated above, we do not sell or share personal information for cross-context behavioural advertising. To submit a verifiable consumer request, email founde.cc@gmail.com.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, row-level security for user data, and provider-side encryption at rest. No system is 100% secure; please use a strong password and notify us of any suspected compromise.

11. Changes

We may update this Policy from time to time. Material changes will be announced through the Service. The "Last updated" date at the top reflects the latest revision.

12. Contact

Founde LLC, 1201 N Market St, Ste 111, Wilmington, DE 19801, USA — founde.cc@gmail.com.

Change log

A summary of material changes to this document. For older versions or a diff of any revision, contact founde.cc@gmail.com.

  • July 16, 2026 — Actual subprocessor list, granular consent, change log.
    • Replaced generic references to 'error monitoring and analytics providers' with the exact subprocessors we currently use and their role.
    • Clarified that optional cookies are gated by category-level consent.
    • Added a change log section for future policy revisions.
  • July 16, 2026 — Initial publication of the Privacy Policy.