This Privacy Policy explains what personal data we collect when you use founderly.com, why we collect it, who we share it with, and the rights you have. We aim to keep this short and plain English.

1. Who we are

The controller of your personal data is Founderly OÜ (referred to as "Founderly", "we", "us"), Pärnu mnt 12, 10146 Tallinn, Estonia. You can reach us at mail@founderly.com.

2. What we collect

Depending on how you use the site, we may collect:

• Information you give us — name, email address, profession, company, country, profile picture, and anything else you submit through our forms, applications, or sign-ups.
• Payment information — if you pay for a product or membership, our payment processor collects your billing details. We don't store full card numbers ourselves.
• Usage data — pages you visit, approximate location based on IP, device and browser information, and similar technical data collected automatically.
• Communications — messages you send us by email, through our forms, or during video sessions you join.
• Cookies and similar technologies — see Section 8.

3. Why we use it (and the legal basis)

• To provide the service — running accounts, processing applications, delivering programs and events you sign up for. Legal basis: performance of a contract.
• To take payments — legal basis: performance of a contract.
• To communicate with you — transactional emails, replies, and (with your consent) newsletters. Legal basis: contract, consent, or legitimate interest in keeping you informed about our service.
• To improve and secure the site — analytics, debugging, fraud prevention. Legal basis: legitimate interest, and your consent where required.
• To comply with the law — accounting, tax, and legal obligations. Legal basis: legal obligation.

4. Who we share it with

We share personal data only with service providers (processors) that help us run the site, on our instructions and under written data processing terms. The main categories:

• Hosting and infrastructure — Amazon Web Services (AWS).
• Payments — Stripe (Stripe Technology Europe Ltd, Ireland).
• Email delivery and newsletters — Mailchimp, Postmark, Sendgrid, Mailgun.
• Analytics and tag management — Google Analytics, Google Tag Manager, Mixpanel, Segment.
• Embedded tools and forms — Typeform, Airtable, Vimeo, YouTube, Daily.co (video sessions), IpInfo (IP geolocation), Google Fonts, jsDelivr (CDN).

We do not sell your personal data. We may disclose data to authorities if required by law or to protect our or our users' rights.

5. International transfers

Some of the providers above are based outside the European Economic Area (EEA), including the United States. Where data is transferred outside the EEA, we rely on appropriate safeguards under the GDPR — typically the European Commission's Standard Contractual Clauses, or the EU–U.S. Data Privacy Framework where the recipient is certified.

6. How long we keep it

We keep personal data only as long as needed for the purpose we collected it, or as required by law (for example, accounting records are kept for seven years under Estonian law). When data is no longer needed, we delete or anonymise it. If you ask us to delete your data earlier, we will do so unless we have a legal reason to keep it.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

To exercise any of these rights, email mail@founderly.com. We will respond within one month.

8. Cookies and analytics

We use cookies and similar technologies to keep the site working, remember your preferences, and understand how the site is used. Non-essential cookies (such as analytics) are only set where required consent has been given. You can change or withdraw your consent at any time through your browser settings or our cookie banner.

9. Security

We take reasonable technical and organisational measures to protect your data, but no system is completely secure. If we become aware of a personal data breach affecting you, we will notify you and the supervisory authority where the law requires.

10. Children

founderly.com is not intended for children under 16. We do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated where required.

12. Contact

Questions or requests about your personal data: mail@founderly.com
Founderly OÜ, Pärnu mnt 12, 10146 Tallinn, Estonia.