Legal

Privacy Policy

Last updated: June 21, 2026

We built Found for small business owners, and we know you don't have time to read a document written by lawyers for lawyers. This policy is plain language. It tells you what data we collect, what we do with it, and what you can do about it.

01

Who We Are

Found Co. LLC ("Found," "we," "us," or "our") operates the Found website platform at foundco.app. We build professional websites for local small businesses and provide the tools for managing leads, bookings, photos, and client communication.

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@foundco.app.

02

What Data We Collect

Account data

When you create a Found account, we collect your name, email address, business name, business type, city and state, and the phone number you provide. We also collect information you share during onboarding — your services, hours, and the details you give us to build your website.

Payment data

We use Stripe to process all payments. When you subscribe, Stripe collects your payment card information directly. Found never sees or stores your full card number, CVV, or billing address — only a tokenized reference provided by Stripe.

Photos and content

If you upload photos through Found, we store them on your behalf to display on your website and social exports. You retain ownership of photos you took yourself.

Lead and contact data

When someone fills out a contact form on your Found-powered website, their name, phone number, email address, and message are stored in your Found account. This data belongs to you — we store it on your behalf and use it only to deliver it to you and to send the automated reply you have configured.

Usage data

We collect basic information about how you use Found — pages visited in the dashboard, features used, and actions taken. This helps us improve the product. We do not sell this data.

03

How We Use Your Data

We use the data we collect to:

  • Build and operate your Found website and dashboard.
  • Process your subscription payments through Stripe.
  • Send you transactional emails: account confirmation, billing receipts, and support replies.
  • Deliver leads and form submissions from your website to you in real time.
  • Send automated replies on your behalf when a lead fills out your contact form.
  • Provide customer support when you contact us.
  • Improve the Found platform based on how users interact with it.
  • Comply with our legal obligations.

We do not use your data for advertising. We do not sell your personal information to third parties.

04

Who We Share Your Data With

We share your data only with the service providers we need to operate Found. These are:

  • Supabase — our database and authentication provider. Your account data, website content, and lead data are stored in Supabase.
  • Stripe — payment processing. Stripe handles all card data under their own privacy policy and PCI compliance.
  • Resend — transactional email delivery. Resend sends account emails and automated lead replies on our behalf.

Each of these providers processes your data only as necessary to deliver their service to us, under their own privacy policies and our data processing agreements with them.

We may disclose your data if required by law, a court order, or a government authority with jurisdiction over us. We will notify you of such a request to the extent permitted by law.

If Found is acquired by or merged with another company, your data may be transferred to the successor entity. We will notify you before that happens and explain what choices you have.

05

Your Lead and Contact Data

When a consumer submits a form on your Found-powered website, they are submitting their information to you — the business owner. Found stores that submission and delivers it to you. Found uses the data only to facilitate that delivery and to send the automated reply you configure.

If a consumer wants to know what data a Found-powered business has about them, they should contact that business directly. Found is not the controller of that consumer relationship — you are.

If a consumer contacts us to remove their data from a specific Found-powered business's account, we will relay that request to the business owner and assist with deletion if needed.

06

Cookies and Analytics

Found uses cookies and similar technologies to keep you logged into your account and to understand how the platform is used. We do not use third-party advertising cookies or sell behavioral data to ad networks.

The cookies we set are:

  • Authentication cookies — to keep you logged in to your Found dashboard.
  • Session cookies — to maintain your state as you navigate the dashboard.

Your Found-powered public website (the site your customers see) does not set tracking cookies on your customers unless you have added third-party tracking scripts.

07

Data Retention

We retain your account data for as long as your subscription is active, plus 90 days after cancellation. During that 90-day window, you can request an export of your content by emailing hello@foundco.app. After 90 days, your data may be permanently deleted.

Lead and contact data submitted through your website is retained as long as your account is active. You can delete individual contacts or your full lead history from your Found dashboard at any time.

We keep payment records (billing history, invoices) as required by applicable law, generally for a minimum of seven years.

08

Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate data in your account.
  • Delete your account and the data associated with it (subject to legal retention requirements).
  • Export your content within 90 days of cancellation.
  • Object to certain processing of your data.

To exercise any of these rights, email us at hello@foundco.app. We will respond within 30 days.

You can also delete your account at any time from your dashboard settings, which will begin the 90-day data retention window.

09

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights regarding your personal information.

You have the right to:

  • Know what personal information we collect, use, disclose, and sell.
  • Delete personal information we have collected about you, subject to certain exceptions.
  • Opt out of the sale of your personal information — though we do not sell personal information.
  • Non-discrimination for exercising your CCPA rights.

Found does not sell personal information as defined under CCPA. We do not share personal information with third parties for cross-context behavioral advertising.

To exercise your CCPA rights, contact us at hello@foundco.app with the subject line "CCPA Request."

10

Children's Privacy

Found is a business platform and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13 years of age. If you believe we have inadvertently collected such information, contact us at hello@foundco.app and we will delete it promptly.

11

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will send a notice to the email address on your account. Continuing to use Found after an update takes effect means you accept the revised policy.

12

Contact Us

For any privacy-related questions or requests:

Found Co. LLC

Tucson, Arizona, USA

hello@foundco.app

© 2026 Found Co. LLC. All rights reserved. Terms of Service