FNDRYx Privacy Policy

FNDRYx, Inc. ("FNDRYx," "we," "us," or "our") provides founder readiness assessments, founder reports, progress check-ins, and a platform that connects founders with startup ecosystem organizations and investors. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit https://fndryx.io (the "Site"), take a FNDRYx assessment, or otherwise use our services (together, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide to us

• Contact and account information, such as your name, email address, phone number (if you provide one), company name, and access and sign-in codes we issue to you.
• Assessment information, including your answers to the FNDRYx readiness assessment, information about your company (for example, its financials, team, market, business model, and funding strategy), and whether you are attending a particular event.
• Check-in and milestone information, such as your responses to periodic check-ins and updates you share about your company's progress.
• Your choices and preferences, including the sharing options and your communication preferences.
• Communications, such as messages you send us, introduction requests, and feedback.

Information we create

We use the information you provide to generate scores, readiness levels, founder reports, readiness records, and score movement over time (together, "Readiness Information"). Readiness Information is personal information when it is associated with you.

Information we receive from partners

If you are invited to the Services by an ecosystem partner (for example, an accelerator, event organizer, or startup community organization), that partner may provide us with limited information, such as your name, email address, and event registration status (which the partner may collect through its own registration or ticketing platform), so we can invite you to take the assessment. We send invitations and access codes to the email address the partner registered for you.

Information collected automatically

When you use the Site, we and our service providers may automatically collect device and usage information, such as IP address, browser type, device identifiers, pages viewed, links clicked, referring URLs, and approximate location derived from IP address. We collect this information using cookies, pixels, and similar technologies. You can control cookies through your browser settings; disabling cookies may affect how the Site functions.

2. How We Use Information

We use personal information to:

• Provide the Services, including administering assessments, generating your founder report and Readiness Information (which FNDRYx staff may review before release), and sending check-ins;
• Verify your identity and secure your access, including by issuing single-use or time-limited access and sign-in codes;
• Notify you when your founder report is ready;
• Help ecosystem partners design event programming, such as breakout sessions, using combined cohort results, and suggest sessions to you based on your own results;
• Share information as you direct or permit, as described in Section 3;
• Create combined, de-identified, or aggregated cohort results and ecosystem reports;
• Communicate with you about the Services, including service messages, check-ins, and changes to our policies;
• Operate, maintain, secure, and improve the Services, including developing and testing our assessment methodology;
• Detect, prevent, and respond to fraud, misuse, security incidents, and other harmful activity;
• Comply with legal obligations and enforce our agreements; and
• For any other purpose we describe to you when we collect the information or with your consent.

We do not:

• Sell your personal information to advertisers or data brokers.
• Share your name with investors unless you turn on "Visible to Capital."
• Give event service providers a lead list or your assessment answers.

3. How We Share Information

We share personal information only as described below.

Sharing that is part of using the Services

• Ecosystem partners and their program partners (combined results only). When you take an assessment through an ecosystem partner, your answers and scores are combined with those of other founders into cohort results that are provided to that ecosystem partner and the program partners it identifies. Cohort results do not include your name or company name, and we do not report any group smaller than five founders.
• Service providers. We use vendors that perform services on our behalf, such as hosting, technology platform, data storage, email delivery, analytics, and customer support providers. The current service providers include Vercel (hosting), Supabase (database), Google (email through Gmail), Amazon SES (email), and Anthropic (AI processing). Service providers are permitted to use personal information only to provide services to us.

Sharing you choose

• Event routing. If you are attending a partner event, we may share your readiness level with the event organizer so it can place you in investor meetings, office hours, or tailored sessions. Event organizers may pay FNDRYx, in cash or in kind, to offer our Services to event attendees.
• Visibility to capital. If you opt in, investors who are FNDRYx members (including paying members and investors given access to event-specific investor reports) may view your name and readiness record on the FNDRYx platform.
• Introductions to capital partners. If you opt in, an ecosystem partner may introduce you to its capital partners and share your name and readiness record with them for that purpose.
• Tracking by ecosystem organizations. If you opt in, an ecosystem partner and the ecosystem organizations it works with may follow your check-in results, Readiness Information changes, and milestone updates for the period disclosed to you. You will always be able to see who is following you. Ecosystem partners and organizations may pay FNDRYx, in cash or in kind, for access to tracking services.
• Introductions you request. If you ask to be introduced to a service provider partner (for example, a law firm, accounting firm, or other professional services provider affiliated with an ecosystem partner), we will share your name and email address with that partner, and nothing else. Service provider partners never receive lists of founders, your assessment, or your Readiness Information, and they cannot follow or track you.

Once we share information with an investor, ecosystem partner, or other third party at your direction, that recipient's use of the information is governed by its own privacy practices. We encourage you to review them.

Other sharing

• Legal and safety. We may disclose information if we believe in good faith it is required by law, subpoena, or legal process, or necessary to protect the rights, property, or safety of FNDRYx, our users, or others.
• Business transfers. We may transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to this Privacy Policy or a successor policy that provides comparable protection.
• With your consent. We may share information for other purposes with your consent or at your direction.

4. De-identified and Aggregated Information

We may create information that is combined, de-identified, or aggregated so that it does not reasonably identify you or your company. We may use, share, publish, and commercially provide this information for any lawful purpose, including cohort results, ecosystem and research reports, benchmarking, and improving our assessment methodology, whether or not you have turned on any optional sharing choice. We do not report groups smaller than five founders, we do not attempt to re-identify de-identified information, and we require recipients to agree not to attempt to re-identify it.

5. Your Choices

• Sharing choices. You can adjust sharing at any time by emailing privacy@fndryx.io. Once notified of your choice, we will remove you from investor visibility and future investor reports, and we will notify any ecosystem partner or organization following you to stop using your information going forward. The choice update cannot recall information that was already shared.
• Check-ins. You can stop check-ins at any time by following the unsubscribe instructions in any message. We may still send you transactional or service-related messages. If you don't complete a check-in for 90 days, your record will be set aside and used only in combined, unnamed results. If you complete a check-in or submit a new assessment, your record becomes active again.
• Access, correction, and deletion. You may request access to, correction of, or deletion of your founder report and identifiable information by emailing privacy@fndryx.io or replying to any FNDRYx email. We will process your request within 30 days. When we delete your personally identifiable information, we may retain combined, de-identified results already reported and information we must keep to comply with law, resolve disputes, or enforce our agreements.
• Do Not Track. Some browsers send "Do Not Track" signals. Because there is no common standard for these signals, the Site does not currently respond to them.

6. Your Privacy Rights (United States)

Depending on your state of residence, you may have certain rights under applicable state privacy laws which may include:

• Right to Know (Specific Pieces of Personal Information). You have the right to know the specific pieces of your personal information that we have collected about you.
• Right to Know (Categories of Personal Information). You have the right to know (i) the categories of personal information we have collected from you; (ii) the categories of sources from which the personal information is collected; (iii) the categories of your personal information we have sold or disclosed for a business purpose; (iv) the categories of third parties to whom your personal information was sold or disclosed for a business purpose; and (v) the business or commercial purpose for collecting or selling your personal information.
• Right to Delete. You have the right to request that we delete your personal information that we have collected and retain.
• Right to Correct. You have the right to request that we correct inaccurate personal information that we have collected and retain.
• Nondiscrimination. You have the right not to be subject to discrimination for asserting your rights.

Submit a Privacy Request. To submit a privacy request, you (or your authorized agent) may contact us in accordance with the "Contact Us" section listed below. However, any such authorized agent may have to be registered.

Privacy Request Verification Process. If you (or your authorized agent) make any request related to your personal information, we will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, we will, to the extent required or permitted by law, require you (or your authorized agent) to verify your request via email, request certain contact information or government identifiers, and we will match at least two pieces of such personal information with data that we have previously collected from you before granting you access to, erasing, or correcting, specific pieces or categories of personal information, or otherwise responding to your request. We may require written documentation that demonstrates that a third party is authorized to serve as your agent for the purposes of submitting the requests set forth herein, unless you have provided the authorized agent with power of attorney pursuant to applicable law. None of the privacy rights are absolute, and such rights are subject to legal and regulatory exceptions and exemptions.

7. Data Retention

We keep personal information for as long as reasonably necessary to provide the Services and for the purposes described in this Privacy Policy, including any tracking period you have opted into, unless a longer period is required or permitted by law. When we no longer need personal information, we delete or de-identify it.

8. Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect personal information collected through the Services against unauthorized access, disclosure, alteration, destruction, and loss. While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

9. Children's Privacy

The Services are intended only for individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

10. United States Operation

FNDRYx is based in, and the Services are operated from, the United States, and are intended for use by individuals in the United States. Information we collect is stored and processed in the United States.

11. Investor Platform Notice

FNDRYx is not a broker-dealer or investment adviser. Founder reports and Readiness Information are not recommendations to buy or sell any security and are not an offer or solicitation of securities. FNDRYx does not arrange investments and does not take compensation on any financing.

12. Third-Party Sites / Social Media

The Services may contain links to third-party websites or services that we do not control. This Privacy Policy does not apply to them. We may engage with you on various social media platforms (e.g., LinkedIn). If you contact us on a social media platform for customer support or for other reasons, we may contact you via the social media's direct message tools. Those communications to and from us are governed by this Privacy Policy. However, your use of a social media platform is also subject to the policies and terms of the relevant social media platform. Certain social media platforms may also automatically provide us with your personal information, and the information we receive will depend on the terms that govern your use of the social media platform(s) and any privacy settings you may have set. The Site includes social media widgets and these widgets may collect your IP address and which Site page you are accessing and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on the Site. Your interactions with these features are governed by the privacy statement of the relevant social media platform that provides them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and change the "Last Updated" date. If we make material changes, including any change that would expand how we share your identifiable information, we may notify you by email or through the Services before the change takes effect and, where appropriate, ask for your consent.

14. Contact Us

If you have questions about this Privacy Policy or our practices, contact us at:

FNDRYx, Inc.
Attn: Legal
727 Madison Ave, Suite 45, Covington, KY 41011
Email: privacy@fndryx.io