Privacy & cookies
We collect what we need to run a safe network for founders and investors, and nothing to sell. Here is exactly what, why and for how long.
Last updated 3 November 2026
Who is responsible
Young Mav is the data controller for Foundhall. Questions or requests go to the support channel in our Discord, or reply to any email from us.
What we collect
- Account: name, email, password (stored only as a secure hash), role and the date you joined.
- Profile: what you choose to add, such as photo, headline, location, experience, skills and links.
- Content: projects, pitch decks, updates, comments, likes, follows, connections and messages.
- Activity: who viewed or requested your project and deck, notifications and reports.
- Payments: plan status and purchase history. Card details stay with Stripe.
- AI use: which AI tool you used and when, plus saved results such as an investor brief. For visitors without an account we store a scrambled version of the IP address to limit free tries.
ID verification
The ID check is done by Stripe Identity. You photograph your ID card, passport or driving licence and take a live selfie inside Stripe's flow. Foundhall never stores the photos of your document or your face. We only receive the result: verified or not, your name and, where available, whether you are over 18. Stripe keeps the verification data under its own privacy policy and the retention rules for identity checks.
Why we use it (legal basis)
- To provide Foundhall (contract): your account, profile, projects, messages, payments and AI tools.
- To keep the network safe (legitimate interest and, for the ID check, your consent): verifying members, stopping spam and abuse, and filtering hateful language.
- To meet legal duties: bookkeeping for payments.
We don't sell your data, and we don't use it for advertising.
Who processes it for us
| Service | Used for | Where |
|---|---|---|
| Supabase | Database, accounts and file storage | EU (Ireland) |
| Vercel | Hosting and privacy-friendly visit statistics | EU (Ireland), with US backup |
| Stripe | Payments and ID verification | EU and US |
| Anthropic | AI tools (idea tester, coach, drafts) | US |
| Resend | Account and notification emails | EU and US |
Transfers outside the EU are covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. Our AI provider does not use your text to train its models.
How long we keep it
- Account, profile and content: until you delete them or your account.
- Payment records: up to 7 years, as bookkeeping laws require.
- Visitor AI limits and logs: up to 30 days.
Your rights
You can ask for a copy of your data, have it corrected or deleted, object to how we use it, or move it elsewhere. Most of it you can edit or delete yourself in the app. If you think we handle your data wrongly you can complain to the data protection authority in your country.
Cookies
We use only the cookies Foundhall needs to work, so there is no cookie banner:
- Login cookies keep you signed in securely.
- Payment and ID-check pages run by Stripe set their own cookies to prevent fraud.
Our visit statistics are cookieless and don't identify you. We use no advertising or tracking cookies.