Legal
Privacy Policy
Last updated 21 September 2026
Cofoundy runs on your company's memory, so how we handle data matters more than usual. This policy is written to be read: what we collect, why, how long we keep it, and what you can do about it.
01Who this covers
This policy explains how Cofoundy ("Cofoundy", "we", "us") collects, uses and shares personal data when you visit cofoundy.ai, join the waitlist, or use the Cofoundy product and its AI partners (the "Service"). It applies to founders and their team members, and to visitors to our website.
Where you use Cofoundy on behalf of a company, that company is the controller of the business data you put into the Service and we process it on their instructions. This policy describes our role for the data we control directly: your account, the waitlist, and website analytics.
02What we collect
We collect only what we need to run the Service and improve it.
- Waitlist and account details: your name, company email address, country and role, and later your login credentials.
- Company context you give your partners: the description of what you're building, documents you upload, decisions you record, and messages you exchange with partners. This becomes part of your company's memory (see the Memory page).
- Files read through desktop sync: read in-session from your machine so partners can reason over them. They are not copied to our servers unless you upload them.
- Usage data: pages visited, features used, browser type, approximate location from IP address, and diagnostic logs. We use privacy-respecting analytics and do not sell this data.
- Support conversations: anything you send us by email or through the product.
03How we use it
- To run the Service: give your partners the context they need, keep your company memory, deliver daily briefings and send transactional email (a seat opening, a security alert).
- To improve the product: understand which features work, fix bugs, and measure performance in aggregate.
- To keep the Service safe: detect abuse, enforce our terms, and protect accounts.
- To contact you about the waitlist and the product. You can opt out of marketing email at any time; we will still send essential service messages.
We do not use your company data or the content of your conversations to train models that serve other customers. Your memory is yours.
04Legal basis (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following bases:
- Performance of a contract, to provide the Service you signed up for.
- Legitimate interests, to secure and improve the Service, and to contact waitlist members about launch — balanced against your rights.
- Consent, for optional analytics cookies and marketing email, which you can withdraw at any time.
- Legal obligation, where we must keep records or respond to lawful requests.
06International transfers
Cofoundy and its sub-processors may process data outside the country you live in. Where data leaves the EEA or UK, we rely on adequacy decisions or the Standard Contractual Clauses, plus the technical measures described on our Security page.
07How long we keep it
- Waitlist data: until you are invited and create an account, or until you ask us to remove it — whichever is first.
- Account and company memory: for as long as your account is active. Delete a file or a thread and it leaves active context on the next session and is purged from backups within 30 days.
- Usage and diagnostic logs: up to 12 months, then aggregated or deleted.
- Records we must keep by law: for the period the law requires.
08Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and receive a copy in a portable format.
- Correct data that is inaccurate.
- Delete your data, or ask us to restrict or object to how we use it.
- Withdraw consent where we rely on it.
- Complain to your local data-protection authority.
Email privacy@cofoundy.ai and we will respond within 30 days. We will need to verify that the request comes from you. California residents have the additional rights described in the CCPA/CPRA; we do not "sell" or "share" personal information as those laws define it.
10Children
Cofoundy is built for founders and businesses. It is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a minor has given us data, contact us and we will delete it.
11Changes to this policy
We will update this page when our practices change and revise the date at the top. For material changes we will email account holders and waitlist members before they take effect.
12Contact
Questions, requests or concerns: privacy@cofoundy.ai.
Cofoundy, [registered company name], [registered address]. If you are in the EEA or UK and are not satisfied with our response, you may contact your supervisory authority.