Privacy Notice

1. Who we are

This Privacy Notice is issued by Founder Pilot AI ("Founder Pilot AI", "we", "us", "our"), the operator of the Founder Pilot AI service (the "Service"). Founder Pilot AI is the data controller responsible for personal data processed in connection with the Service.

2. Personal data we collect

• Account data: name, email address, login credentials.
• Profile and content data: business ideas, plans, tasks, drafts, and other content you create in the Service.
• Support data: messages and attachments you send to us.
• Usage and telemetry data: pages viewed, features used, AI runs, timestamps.
• Device and technical data: IP address, browser type, device identifiers, log data.
• Cookies and similar technologies: as described in Section 9.

Payment data (card details, billing address, tax identifiers) is collected directly by our Merchant of Record, Paddle, and is not stored by us.

3. Purposes and legal bases

• Creating and managing your account — performance of contract.
• Providing, operating, and improving the Service — performance of contract and legitimate interests.
• Security, fraud prevention, and abuse detection — legitimate interests and legal obligation.
• Customer support — performance of contract and legitimate interests.
• Service communications and, where permitted, marketing — legitimate interests or consent.
• Compliance with legal obligations — legal obligation.

4. How we share personal data

We share personal data with:

• Service providers and subprocessors (hosting, database, analytics, customer support tooling, AI model providers) acting on our instructions.
• Paddle.com Market Ltd, our Merchant of Record, for the sale of the Service, subscription management, payments, tax compliance, invoicing, and refund handling.
• Professional advisers such as lawyers and accountants where reasonably necessary.
• Authorities and third parties where required by law or to protect our rights.

5. Data retention

We retain personal data for as long as needed to provide the Service and to comply with legal, accounting, and reporting obligations. When data is no longer needed, we delete or anonymise it.

6. International transfers

Personal data may be transferred to and processed in countries outside your country of residence, including the United States. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, to withdraw consent, and to lodge a complaint with a supervisory authority. We will respond to verified requests within the period required by applicable law (typically one month under the UK/EU GDPR).

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and regular review — designed to protect personal data against unauthorised access, alteration, disclosure, or destruction.

9. Cookies

We use strictly necessary cookies to operate the Service (for example, to keep you signed in) and may use analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

10. Contact

For privacy questions or to exercise your rights, contact us through the in-app support channel or via the contact details published on our website.