Legal

Privacy Policy

Last updated 21 September 2026

Cofoundy runs on your company's memory, so how we handle data matters more than usual. This policy is written to be read: what we collect, why, how long we keep it, and what you can do about it.

01Who this covers

This policy explains how Cofoundy ("Cofoundy", "we", "us") collects, uses and shares personal data when you visit cofoundy.ai, join the waitlist, or use the Cofoundy product and its AI partners (the "Service"). It applies to founders and their team members, and to visitors to our website.

Where you use Cofoundy on behalf of a company, that company is the controller of the business data you put into the Service and we process it on their instructions. This policy describes our role for the data we control directly: your account, the waitlist, and website analytics.

02What we collect

We collect only what we need to run the Service and improve it.

  • Waitlist and account details: your name, company email address, country and role, and later your login credentials.
  • Company context you give your partners: the description of what you're building, documents you upload, decisions you record, and messages you exchange with partners. This becomes part of your company's memory (see the Memory page).
  • Files read through desktop sync: read in-session from your machine so partners can reason over them. They are not copied to our servers unless you upload them.
  • Usage data: pages visited, features used, browser type, approximate location from IP address, and diagnostic logs. We use privacy-respecting analytics and do not sell this data.
  • Support conversations: anything you send us by email or through the product.

03How we use it

  • To run the Service: give your partners the context they need, keep your company memory, deliver daily briefings and send transactional email (a seat opening, a security alert).
  • To improve the product: understand which features work, fix bugs, and measure performance in aggregate.
  • To keep the Service safe: detect abuse, enforce our terms, and protect accounts.
  • To contact you about the waitlist and the product. You can opt out of marketing email at any time; we will still send essential service messages.

We do not use your company data or the content of your conversations to train models that serve other customers. Your memory is yours.

05Who we share it with

We never sell personal data. We share it only with:

  • Sub-processors that host and run the Service — cloud infrastructure, model providers that power partners, email delivery and analytics. Each is bound by a data-processing agreement and processes data only on our instructions.
  • Your own team: people you invite to your company workspace see what you choose to share with them.
  • Authorities, when required by law, or to protect the rights and safety of Cofoundy, our users or others.
  • A successor, if Cofoundy is involved in a merger, acquisition or asset sale — with notice to you before your data becomes subject to a different policy.

A current list of sub-processors is available on request and will be published before general availability.

06International transfers

Cofoundy and its sub-processors may process data outside the country you live in. Where data leaves the EEA or UK, we rely on adequacy decisions or the Standard Contractual Clauses, plus the technical measures described on our Security page.

07How long we keep it

  • Waitlist data: until you are invited and create an account, or until you ask us to remove it — whichever is first.
  • Account and company memory: for as long as your account is active. Delete a file or a thread and it leaves active context on the next session and is purged from backups within 30 days.
  • Usage and diagnostic logs: up to 12 months, then aggregated or deleted.
  • Records we must keep by law: for the period the law requires.

08Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you, and receive a copy in a portable format.
  • Correct data that is inaccurate.
  • Delete your data, or ask us to restrict or object to how we use it.
  • Withdraw consent where we rely on it.
  • Complain to your local data-protection authority.

Email privacy@cofoundy.ai and we will respond within 30 days. We will need to verify that the request comes from you. California residents have the additional rights described in the CCPA/CPRA; we do not "sell" or "share" personal information as those laws define it.

09Cookies

We use strictly necessary cookies to keep you signed in and to protect forms, and — with your consent — analytics cookies to understand how the site is used. We do not use advertising cookies. You can clear or block cookies in your browser; the Service will still work, though you may need to sign in more often.

10Children

Cofoundy is built for founders and businesses. It is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a minor has given us data, contact us and we will delete it.

11Changes to this policy

We will update this page when our practices change and revise the date at the top. For material changes we will email account holders and waitlist members before they take effect.

12Contact

Questions, requests or concerns: privacy@cofoundy.ai.

Cofoundy, [registered company name], [registered address]. If you are in the EEA or UK and are not satisfied with our response, you may contact your supervisory authority.