Privacy Policy

This policy covers the Founder Signals website at founder-signals.com. It describes what we collect through this site, why, and what you can ask us to do about it. It is written to describe what the site actually does rather than to cover every eventuality.

Who we are

Founder Signals is the data controller for information collected through this website. You can reach us at hello@founder-signals.com about anything in this policy.

What we collect

The application form.If you apply for early access, we collect the four things you type: your email address, a one-sentence description of what you're building, a one-sentence description of what proof of demand you have, and which stage you selected. Nothing else on this site collects personal data.

Server logs. Our host records standard request information — including IP address, timestamp, and the page requested — as part of serving and securing the site. We also hold submitting IP addresses briefly in memory to rate-limit the application form against abuse; these are not written to a database.

No tracking. This site sets no analytics, advertising or cross-site tracking cookies. There is no advertising pixel, no session recording, and no third-party tag manager. If that changes we will update this policy and ask for consent where required.

Why we collect it, and on what basis

We use your application to assess whether the programme is a fit and to contact you about it. Under the GDPR our lawful basis is our legitimate interest in responding to an enquiry you initiated, and — where you go on to join — taking steps at your request prior to entering a contract. Server logs rest on our legitimate interest in operating a secure, working website.

We will not add you to a marketing list on the strength of an application, and we do not sell or share personal data for anyone else's marketing.

Who processes it for us

• Supabase — hosts the database that stores applications.
• Vercel — hosts and serves this website, and produces the request logs described above.
• Resend — delivers the notification email telling us an application arrived, and any reply we send you.
• Cloudflare — provides DNS and network routing for our domains.

Each acts as a processor on our instructions. Some operate infrastructure outside the European Economic Area; where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard in the provider's terms.

How long we keep it

Applications are kept for as long as they are commercially useful — while we assess them, and afterwards so we can recognise you if you apply again — and reviewed periodically. If you ask us to delete your application, we will. Server logs are retained on our host's standard schedule, which is short.

Your rights

If you are in the EU or UK you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Email hello@founder-signals.com and we will respond within one month.

If you think we have handled your data badly, you can complain to your local supervisory authority. In Ireland that is the Data Protection Commission, dataprotection.ie.

Children

This site is aimed at people building businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Changes

If this policy changes we will update the date at the top. Material changes to how we use data you have already given us will be notified directly where we hold an address for you.