Privacy Policy
Last Updated: January 28, 2026
1. Introduction
Welcome to FounderForge ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By using FounderForge services, you agree to the terms of this privacy policy. If you do not agree with this policy, please do not use our services.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number
- Professional Information: Company name, job title, business requirements
- Booking Information: Meeting details, scheduling preferences (via Cal.com)
- Communication Data: Messages, inquiries, and project details
2.2 Automatically Collected Information
We automatically collect certain information when you visit our website:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click patterns, referral sources
- Cookies and Similar Technologies: As described in Section 5 below
3. How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To provide MVP development services and respond to inquiries
- Communication: To communicate with you about services, projects, and meetings
- Booking Management: To schedule and manage discovery calls and meetings
- Analytics and Website Improvement: To understand how visitors use our website, track performance metrics, and improve our services. This includes analyzing user behavior, identifying popular content, detecting technical issues, and optimizing user experience through Google Analytics, PostHog, and Vercel Analytics
- Security: To detect, prevent, and address technical issues and fraud
- Legal Compliance: To comply with legal obligations and protect our rights
4. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing your personal data:
- Contractual Necessity: Processing necessary to fulfill our service agreement with you
- Legitimate Interests: Processing for our legitimate business interests (e.g., security, analytics)
- Consent: Processing based on your explicit consent (e.g., for contact form submission)
- Legal Obligation: Processing to comply with applicable laws and regulations
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information. You can manage your cookie preferences through our cookie consent banner.
5.1 Types of Cookies We Use
- Essential Cookies: Required for the website to function properly (e.g., authentication, security)
- Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics, Vercel Analytics, PostHog)
- Preferences Cookies: Remember your settings and preferences (e.g., theme, language)
5.2 Analytics and Tracking Services
We use the following third-party analytics services to collect anonymous usage data:
5.2.1 Google Analytics (GA4)
- Purpose: To analyze website traffic, user behavior, and improve our services
- Data Collected: IP addresses (anonymized), browser type, device type, operating system, referral sources, pages visited, time spent on pages, and click patterns
- Privacy Features: We enable IP anonymization to mask the last octet of IP addresses before storage
- Data Processing: Data is processed by Google LLC. For more information on how Google uses your data, please refer toGoogle's "How Google uses data when you use our partners' sites or apps"
- Your Rights: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your cookie preferences
- Data Retention: Google Analytics data is retained for 26 months by default. We do not share any personally identifiable information with Google
5.2.2 PostHog Analytics
- Purpose: To understand user interactions, track feature usage, and improve user experience
- Data Collected: Anonymous user sessions, page views, click events, custom events (e.g., button clicks, form submissions), and device information
- Privacy Features: PostHog allows us to capture analytics without storing personal data by default. We configure PostHog to exclude any personally identifiable information
- Data Processing: Data is processed by PostHog, Inc. For more information, please refer to the PostHog Privacy Policy
- Your Rights: You can opt out by disabling analytics cookies in your cookie preferences
- Data Retention: PostHog data retention is configured based on our analytics needs. We regularly review and delete unnecessary data
5.2.3 Vercel Analytics
- Purpose: To monitor website performance, page load times, and deployment metrics
- Data Collected: Anonymous page view counts, performance metrics, and web vitals (Core Web Vitals)
- Privacy Features: Vercel Analytics is privacy-focused and does not collect personally identifiable information
- Your Rights: You can opt out by disabling analytics cookies in your cookie preferences
5.3 Cookie Consent
Under the GDPR and ePrivacy Directive, we obtain your explicit consent before setting non-essential cookies. You can:
- Accept all cookies
- Reject all non-essential cookies
- Customize your cookie preferences by category (e.g., accept essential only, or essential + analytics)
- Withdraw your consent at any time through our cookie banner or by contacting us
We use a cookie consent banner that allows you to granularly control which cookies are set. When you reject analytics cookies, no data is sent to Google Analytics, PostHog, or Vercel Analytics.
For more information about our cookie practices, please visit our Cookie Policy.
6. Information Sharing and Disclosure
We may share your personal information with the following third parties:
6.1 Service Providers
We share information with third-party service providers who perform services on our behalf:
- Cal.com: Meeting scheduling and booking management. Data is processed under our agreement with Cal.com
- Vercel Inc.: Website hosting and performance analytics. Vercel Analytics collects anonymous performance metrics. See Vercel Privacy Policy for details
- Google LLC: Analytics and website tracking through Google Analytics. Data is processed under Google's Data Processing Agreement. See Section 5.2.1 for details on data collection and your rights
- PostHog, Inc.: Product analytics and user behavior tracking. Data is processed under PostHog's Data Processing Agreement. See Section 5.2.2 for details on data collection and your rights
- Email Service Providers: Email delivery and management
We require these service providers to protect your personal information and only use it for purposes specified in our agreements. We have entered into data processing agreements with each provider that processes personal data on our behalf, ensuring appropriate safeguards for data protection and privacy.
6.2 Legal Requirements
We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government requests).
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the new owner. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
7. International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.
When we transfer your personal information to other countries, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- EU-US Data Privacy Framework (where applicable)
- Adequacy decisions for countries with robust data protection laws
If you would like more information about our international data transfer practices, please contact us.
8. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
- Inquiries and Communications: Retained for 2 years after last interaction or until you request deletion
- Booking Data: Retained for 1 year after the meeting or as required for business records
- Google Analytics Data: Retained for 26 months by default (Google's standard retention period). Data older than 26 months is automatically deleted from Google servers
- PostHog Analytics Data: Retained based on our analytics configuration. We regularly review and delete unnecessary data. User sessions are typically retained for analysis purposes
- Vercel Analytics Data: Retained for performance monitoring purposes. Aggregated metrics may be kept longer for trend analysis
After the retention period expires, we securely delete or anonymize your personal information. You may request earlier deletion of your analytics data by exercising your rights in Section 9.
9. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
9.1 GDPR Rights (EU/EEA Residents)
- Right to Access: Request access to and a copy of your personal information
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure (Right to be Forgotten): Request deletion of your personal information
- Right to Restrict Processing: Request restriction of how we use your data
- Right to Data Portability: Request transfer of your data to another organization
- Right to Object: Object to certain types of processing
- Right to Withdraw Consent: Withdraw consent at any time (where processing based on consent)
- Right to Lodge a Complaint: File a complaint with a supervisory authority
9.2 CCPA Rights (California Residents)
If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request information about the categories of personal information we collect, use, and share, including specific pieces of information
- Right to Delete: Request deletion of your personal information, subject to certain exceptions
- Right to Opt-Out of Sale: Request that we not sell your personal information. Note: We do not sell personal information to third parties
- Right to Non-Discrimination: Receive equal service and pricing even if you exercise your privacy rights
- Right to Limit Use and Disclosure of Sensitive Personal Information: Request that we limit our use and disclosure of your sensitive personal information
Analytics Data and CCPA: For California residents, you can exercise your rights regarding analytics data collected by Google Analytics and PostHog by contacting us. Additionally, Google provides tools for managing your privacy preferences at Google Ads Settings
9.3 How to Exercise Your Rights
To exercise your privacy rights, please contact us at:
- Email: founderforgedxb@gmail.com
- Address: Dubai, UAE
We will respond to your request within 30 days of receipt, unless extended as permitted by law.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS 1.2/1.3)
- Secure storage and access controls
- Regular security assessments and updates
- Employee training on data protection
- Data processing agreements with third parties
Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
11. Children's Privacy
Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending you an email notification (if you have provided consent)
Your continued use of our services after the effective date of the revised policy constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our privacy practices, please contact us:
- Email: founderforgedxb@gmail.com
- Website: https://founderforge.dev
- Address: Dubai, UAE
We will respond to your inquiry within 30 days of receipt.
13. Additional Information
13.1 European Economic Area (EEA) Residents
If you are located in the EEA, you have additional rights under the GDPR. Please see Section 9.1 above for details.
13.2 UK Residents
UK residents have rights under the UK GDPR and Data Protection Act 2018. These rights are similar to those outlined in Section 9.1.