Privacy Policy

Last updated: September 29, 2026

1. Summary

FoundNow is a reporting tool for marketing agencies. We collect the minimum data needed to run, sample and deliver reports: your email, the business locations you submit, the AI-generated answers we sample, and standard technical logs. We never ask for your or your clients' account credentials for any platform, and we never post, edit or manage anything on your behalf.

2. Data we collect

• Account data: the email address you use at checkout, and sign-in records for one-time magic links (no passwords).
• Billing data: handled by Creem as merchant of record. We receive your email and subscription status; we never see or store full card numbers.
• Report inputs: for each client slot — the business domain, industry, and city you submit, plus the question set used.
• Sampled data: the answers returned by AI providers for those questions, the citations they include, and derived statistics (mention rates, source categories).
• Technical logs: request logs (time, status) used to run and debug the service.

3. How we use data

• To build and deliver the reports you paid for, and to re-run monthly question sets for subscriptions.
• To send transactional email: magic links, report delivery, and service notices. Marketing email to you is separate and always carries an unsubscribe link.
• To detect abuse and enforce rate limits.

We do not sell personal data, and we do not use your clients' business data to advertise to anyone.

4. Third parties involved

• AI providers (OpenAI, Google, Perplexity): to sample answers we send them question text that may include the business name, industry and city. Their processing of that content is governed by their own terms and privacy policies.
• Creem: payments, invoicing and refunds, as merchant of record.
• Cloudflare: hosting, database and email infrastructure.
• Resend: transactional email delivery.

5. Cookies

We use a single first-party session cookie to keep you signed in after magic-link sign-in. We do not run advertising or cross-site tracking cookies.

6. Retention and deletion

Report inputs, samples and reports are kept while your account is active so trends can be shown across months. When you ask us to delete your data, we remove account data, report inputs and reports within 30 days, except records we must keep for tax or fraud purposes (billing records are retained by Creem as required by law).

7. Your choices

• Access, correct or delete your data: email us from the Contact page.
• Unsubscribe from any non-transactional email via the link in the email itself.
• Cancel a subscription any time from the payment overview linked in your receipt email; see the refund policy for the applicable refund terms.

8. Security

The service runs on Cloudflare's infrastructure with encryption in transit (HTTPS) and at rest. Access to production data is limited to the engineers who need it to run the service. We do not store platform credentials — by design, we never collect them.

9. International processing

Our service providers may process data in the countries where they operate. Where required, transfers rely on the provider's applicable safeguards.

10. Changes and contact

We will post any change to this policy on this page with a new "last updated" date, and email you about material changes. Questions: see the Contact page.