Privacy Policy

Last updated: June 2026

Template for reference only — not legal advice. Have a qualified lawyer review and adapt this for your jurisdiction before relying on it.

This policy explains what we collect and why. We aim to align with the EU GDPR; if you are in the EU/EEA, you have rights described below.

1. What we collect

Account data: name, email, profile details you provide.
Usage data: pitches, reviews, waitlist activity, and analytics events.
Payment data: handled by Stripe. We store only identifiers (customer/account/transfer IDs) — never card numbers.

2. How we use it

To run the marketplace (matching, feedback, payouts), to send transactional emails and digests (which you can turn off in Profile), to prevent fraud, and to improve the product. We do not sell your personal data.

3. Processors we use

Supabase — database & authentication.
Stripe — payments, subscriptions, and reviewer payouts (Connect).
An AI provider — to generate pitch/feedback summaries from content you submit.
An email provider — to deliver notifications and digests.

4. Your rights

You can access, correct, export, or delete your data, and object to certain processing. Email privacy@cofound.si to exercise these rights. You may also unpublish your profile or delete your account at any time.

5. Retention & security

We keep data for as long as your account is active or as needed for legal/financial obligations (e.g. payout records). Access is protected with row-level security and least-privilege server access.

6. Contact

Questions or requests: privacy@cofound.si.