Privacy Policy

This Privacy Policy explains how FounderOS ("we", "us", "the Service") collects, uses and protects personal data when you use our web application and website. We are committed to compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is the operator named in our Impressum. You can reach us at support@founderos.app.

2. Data We Collect

• Account data: email address, display name and authentication credentials.
• Business data you enter: clients, invoices, expenses, documents and appointments.
• Billing data: subscription plan and payment status. Card details are processed directly by our payment processor (Stripe) and are never stored on our servers.
• Usage data: technical logs, device and browser information used to operate and secure the Service.

3. How We Use Your Data

• To provide, maintain and improve the Service.
• To process subscriptions and payments.
• To provide AI-assisted insights based on the business data you submit.
• To communicate with you about your account, security and support.
• To comply with legal and accounting obligations.

4. Legal Bases

We process data to perform our contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c)), and based on our legitimate interests in operating and securing the Service (Art. 6(1)(f)).

5. Sub-Processors

We use trusted third parties to deliver the Service, including cloud hosting and database providers, and Stripe for payment processing. These providers process data on our behalf under data processing agreements.

6. Data Retention

We retain your data while your account is active and as required to meet legal obligations. You may request deletion of your account and associated data at any time.

7. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. To exercise these rights, contact support@founderos.app. You also have the right to lodge a complaint with a supervisory authority.

8. International Transfers

Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Changes

We may update this policy from time to time. Material changes will be communicated through the Service.