Privacy Policy

1. Introduction and scope

This policy applies to:

• Visitors browsing the public index
• Users who create an account (email code or Google sign-in)
• Paid subscribers (Starter / Growing)
• People who contact us by email

We are the controller for account, usage, billing, and support data. Public billionaire and founder data in the index comes from public sources and curated research; it is not private medical or patient data.

This policy should be read together with the GDPR (EU) 2016/679 and, where applicable, the Swedish Data Protection Act (2018:218). Contact: foundersofequity@gmail.com.

2. What personal data we process and why

Account users (we are controller)

Data: email address, sign-in method, optional Google account identifiers, subscription tier, Stripe customer/subscription IDs, Pattern Engine chat threads and prompts, daily usage counters, and security logs.

Purpose: create and secure your account, deliver the service, enforce plan limits, and provide support.

Legal basis: performance of a contract (art. 6.1 b GDPR) and, for security logs, legitimate interest (art. 6.1 f).

Website visitors (we are controller)

Data: technical logs (IP address, user agent, timestamps, paths) and anonymized analytics via Vercel Analytics.

Purpose: operate, secure, and improve the site.

Legal basis: legitimate interest (art. 6.1 f) for strictly necessary technical processing.

Contact email (we are controller)

Data: name/email and message content you send us.

Purpose: answer inquiries.

Legal basis: legitimate interest (art. 6.1 f).

Billing (we are controller)

Data: billing email, subscription status, and payment metadata processed by Stripe. We do not store full card numbers.

Purpose: subscriptions, invoicing, and accounting.

Legal basis: contract (art. 6.1 b) and legal obligation for bookkeeping where applicable (art. 6.1 c), including retention under Swedish bookkeeping rules for at least 7 years when those rules apply.

3. Pattern Engine and AI

Pattern Engine sends your prompts and a structured briefing built from our founder index to AI providers (for example Groq and/or Anthropic) to generate answers. Optional web search (for example Tavily) may run to supplement tactics.

We do not use your prompts to train our own foundation models. Provider terms govern whether they retain API inputs for abuse monitoring. Prefer not to paste secrets, passwords, or unrelated personal data into Pattern Engine.

Automated decision-making (arts. 13.2 f and 22 GDPR): Pattern Engine produces research-style text. It does not make decisions with legal or similarly significant effects about you. You remain responsible for how you use the output.

4. Retention and deletion

• Account data: kept while the account is active; deleted or anonymized within 30 days after a verified deletion request, except data we must keep for law.
• Pattern Engine threads: kept while your account is active so you can reopen chats; deleted with the account or on request.
• Usage counters: daily counters for plan limits; older aggregates may be kept in anonymized form.
• Billing records: retained as required for accounting (often at least 7 years where Swedish bookkeeping law applies).
• Security and application logs: up to 12 months.
• Contact emails: up to 12 months unless a longer conversation is needed.

5. Processors and transfers

We use a limited set of processors to run the service. Transfers outside the EU/EEA, if any, rely on appropriate safeguards under GDPR Chapter V (for example Standard Contractual Clauses).

• Vercel — hosting and analytics
• Supabase — authentication and database
• Stripe — payments and billing portal
• Resend (when configured) — transactional sign-in emails
• Groq / Anthropic — Pattern Engine model inference
• Tavily (when configured) — optional web research for Pattern Engine

6. Where data is stored

Application hosting and databases are provided by our processors above. Data in transit is protected with TLS. Access to production secrets and admin tools is restricted.

7. Your rights

Under GDPR you may have the right to:

• Access your personal data (art. 15)
• Rectify inaccurate data (art. 16)
• Erase data (art. 17), subject to legal exceptions
• Restrict processing (art. 18)
• Object to processing based on legitimate interest (art. 21)
• Data portability (art. 20)
• Withdraw consent where processing is based on consent (art. 7.3)

We aim to respond within one month (art. 12.3). We may need to verify your identity. Email foundersofequity@gmail.com.

You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se, or your local supervisory authority.

8. Cookies

Strictly necessary cookies/session storage keep you signed in and protect the service. These do not require consent.

Vercel Analytics may collect aggregated traffic metrics. We do not use third-party advertising cookies.

9. Security measures

• TLS encryption in transit
• Access control for accounts and paid features (tier gating)
• Curated deep-profile fields are withheld unless your plan allows them
• Rate limiting on sign-in and Pattern Engine endpoints
• Security headers (CSP, frame denial, HSTS where HTTPS is used)
• Secrets stored in the host environment, not in client code
• Signed Stripe webhooks for subscription changes

No system is perfectly secure. If you discover a vulnerability, contact foundersofequity@gmail.com.

10. Children

The service is not directed at children under 16. Do not create an account if you are under 16.

11. External links

The site may link to external sites (for example Forbes or company pages). We are not responsible for their content or privacy practices.

12. Changes

We may update this policy when the product or law changes. The "Last updated" date below will change. Material changes may also be noted on the site or by email when appropriate.