Privacy policy

Who is responsible

The controller is Network Place S.L., which runs FounderFold. Tax ID (NIF): B40203689. Registered office: C/ Pablo Freire, 10, local 3, 28918 Leganés (Madrid, Spain). Registered in the Madrid Commercial Registry, sheet M-467773, section 8.

For anything about your data, write to privacy@founderfold.com.

• Legal notice

What we collect

When you send a form we store your name, your email, your organization (if you give it), the type of organization you choose, your message, the list you joined, whether you ticked the news box, the language and page of the form, the date and the version of this policy you accepted. Fields marked as required are needed to handle your request; without them we can’t process it. If you confirm your email, we also store the date of the confirmation.

We don’t store your IP address, your browser or any other technical data in our database. The site uses no cookies. In your browser’s local storage (localStorage) it keeps only what it needs to work the way you ask: the light or dark theme, if you choose one, and, in the free tools, what you type in them, so you don’t lose it. None of this is sent to us, and you can delete it with “Clear all” in each tool or in your browser settings.

Visit statistics

This website does not measure visits: it uses no analytics tools and no cookies.

What we use it for

Only for the purpose of the form you sent:

• Confirming your email: when you send the form we email you a link that lasts 72 hours. Until you confirm, your request does not count and we do not handle it, and we do not write to you again unless someone uses your email in the form again. If you do not confirm within 7 days, we delete it.
• Access requests: to review your request, reply and, if it fits, set up your organization and invite you.
• Founder waitlist: to tell you when the Founder membership opens and, if you reply, invite you to a few questions about pricing or a short interview.
• Deal analysis updates (a feature in development): to tell you when it is available and, if your message asks for it, contact you about your case.
• Launches and news, only if you ticked the optional box: occasional emails about FounderFold.
• In every case we count sign-ups in aggregate (for example, per list and week) to decide what to build. Those counts contain no personal data.

Legal basis

For the details in the forms, your consent (Article 6(1)(a) GDPR). The box to process your request is required; the box for launches and news is optional and separate. You can withdraw either at any time, without affecting what was done before.

How long we keep it

Unconfirmed requests are deleted after 7 days. 18 months from the day you sign up, or less if you ask us to delete it or the list closes (for example, once the Founder membership has launched). If an access request becomes a customer account, the details move to that account and the request is deleted.

Who can see it

Only the person at FounderFold who manages the lists. We don’t share or sell your details, and no automated decisions are made about you. When a request is confirmed, we receive an internal email notice without your name, email or message.

Supabase hosts the database where the forms are stored, as our data processor, in AWS region eu-west-1 (Ireland).

Railway hosts this website, as our data processor, on servers in the European Union (Netherlands).

Cloudflare manages the domain’s DNS and forwards the emails you send to our founderfold.com addresses to the mailbox where we handle them, as our data processor.

Resend (Plus Five Five, Inc., United States) sends the confirmation email and our internal notice, as our data processor. To do so it processes your email address and stores the data and logs of each message in the United States for the period it sets.

Supabase, Railway, Cloudflare and Resend belong to groups based outside the European Economic Area (in the United States and, for Supabase, also in Singapore). Supabase stores the form details in the European Union. Railway runs this website on servers in the European Union, but states in its agreement that its primary processing takes place in the United States, so you should expect the data Railway handles (access logs and, if enabled, the statistics) may be processed there. Cloudflare processes the emails it forwards on its global network, and Resend stores the data of the messages it sends in the United States. Because these providers may process or access the data from outside the EEA, their data processing agreements include the European Commission’s standard contractual clauses (Article 46 GDPR); Cloudflare and Resend are also certified under the EU-U.S. Data Privacy Framework. You can ask us for a copy of these safeguards at privacy@founderfold.com.

Like any website, Railway, Supabase, Cloudflare and Resend keep technical logs of requests and messages, including IP addresses: Railway for up to 30 days depending on the plan, and Supabase, Cloudflare and Resend for the period each of them sets. We don’t copy those logs into our database.

Your rights

You can ask to access, correct or delete your details, object to or restrict their use, get them in a portable format, or withdraw your consent (for news emails, also with the unsubscribe link in each one). Write to privacy@founderfold.com from the email you used; we reply within one month.

You can also complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the authority of the country where you live.

Changes

If this policy changes, we update the date above. Each sign-up keeps the version that was accepted.