Privacy Policy
Effective July 16, 2026
Foundinity ("we", "us") helps founders find co-founders. This policy explains what data we collect, how we use it, and how you can control it - including data accessed through Google.
Google user data
When you connect Google Calendar, we request the calendar.events scope, plus your Google account email for identity. We use this access solely to:
- Create a calendar event and Google Meet link when you and a matched co-founder book a call.
- Read the status of that event to keep it in sync.
Your Google refresh token is used only to make these API calls on your behalf. It is never sold, transferred, or disclosed to third parties, and never used for advertising. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
Other data we collect
Account & identity - your email, name, and avatar, via our authentication provider.
Founder profile - information you provide when building your profile, such as date of birth, location, and your onboarding questionnaire answers, used to match you with co-founders.
Activity - messages you send, matches, likes, and saved profiles, used to operate the product and improve matching.
Who we share data with
We do not sell your data.
We may share information:
- With service providers who help us operate Foundinity (e.g. authentication, hosting, email, analytics), bound to use it only to provide those services.
- If required by law or legal process.
- To protect rights, safety, or property.
How we protect your data
We use encryption to protect your data both in transit and at rest. All traffic between you, Foundinity, and Google's APIs is encrypted over HTTPS (TLS), and data stored in our database - including your Google refresh token - is encrypted at rest.
Your Google refresh token is never exposed to your browser. It is readable only by our server-side code, and used solely to create or delete the calendar events you request.
Data retention & deletion
We keep your data for as long as your account is active. Your Google refresh token is retained only while Google Calendar stays connected: disconnecting it in Settings deletes the stored token immediately, and it is also deleted automatically if Google reports it as revoked or invalid.
Deleting your account permanently removes your profile, messages, matches, and any stored Google data.
Your controls
From Settings you can, at any time, disconnect Google Calendar, update notification preferences, pause your account, or permanently delete your account - deleting your account erases your data as described above. You can also view and update your profile information at any time from Settings.
Contact
Questions about this policy or your data: uddipta@foundinity.com.