Privacy Notice.

1. Controller and contact

[OPERATOR FULL LEGAL NAME], trading as Founder Capital, is a sole trader and the controller for this service. Address: Plesostraat 245, Amsterdam, North Holland, Netherlands. Contact [email protected].

2. Information we collect

Founder account data can include email, authentication and session information, name, LinkedIn URL, city and country, current role or company, an optional project name, founder stage, category, building description, incorporation and traction state, Current Ask amount and purpose, the private exact equity percentage, funded Ask history, moderation records, legal acceptance, and privacy or export requests.

Initial public Interest contains a name, email, optional message, and the associated Ask context. Later manual review may collect professional background, investment experience, investor category or status declarations, and residency or jurisdiction. We do not currently request passports, bank statements, proof of wealth, or banking details through this flow.

Portraits are no longer collected in the active product. Legacy private portrait files may remain until the related account is deleted or a lawful retention need ends.

3. Why we use information and legal bases

We use data to provide accounts and profile tools, review and publish approved profiles, receive and review Interest, prevent abuse, assess whether a further discussion or private disclosure is appropriate, make a manual introduction where appropriate, keep records, respond to rights requests, and comply with applicable law.

Depending on the activity, the basis is performance of a contract or steps requested before one, our legitimate interests in operating and securing a curated introduction service, or compliance with a legal obligation. Consent is used only where a specific choice relies on it, such as a founder choosing public publication, and can be withdrawn without affecting earlier lawful processing.

4. What is public and what stays private

After approval and a founder's public choice, the open site may show approved identity, role, location, category, stage, building information, Current Ask amount and purpose, and permitted funded-history metadata. Exact proposed or funded equity is never published on the open site.

Account email and authentication identifiers, moderation notes, exact equity, Interest contact details and messages, prospective-backer review information, admin records, and legal acceptance records remain private. Interest is reviewed by Founder Capital and is not automatically shared with the founder; a later introduction is manual.

5. Providers and international processing

Supabase provides database, authentication, and storage; Cloudflare provides proxy, security, and Turnstile services; Railway provides hosting and runtime; and Resend supports transactional email. Providers may process data outside your country. Appropriate safeguards are intended to be used where required; the applicable mechanism depends on the provider and processing context.

6. Retention

• Active account and profile data: while the account remains active.
• Deleted accounts: delete or anonymise within 30 days, unless legal duties or legitimate records require continued retention.
• Unsuccessful or inactive Interest: up to 12 months.
• Meaningful introductions or backing conversations: up to 6 years where reasonably required for legal or business records.
• Security and authentication logs: provider-appropriate security periods, minimised where possible.
• Legal acceptance: account lifetime plus an appropriate legal-record period.
• Funded Ask history: retained as historical records unless deletion is legally required.

7. Your rights and complaints

Depending on the circumstances, EU and Netherlands law may give you rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent where consent is relied upon. Contact [email protected]. You may also complain to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) or seek a court remedy.

8. Necessary cookies and security technology

Supabase session technology supports authentication and session continuity. Cloudflare Turnstile and related security technology help prevent abuse. Founder Capital currently uses no analytics, marketing cookies, advertising pixels, or optional cookie categories. Your local notice acknowledgement stays on your device until site data is cleared or this notice version changes.

9. Age and changes

Founder Capital is for people aged 18 or older. Material notice changes receive a new version and may require founders to acknowledge the updated notice before continuing in the private founder environment.