Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Your name (first and last)
• Email address
• Password (encrypted and securely stored using bcrypt)

Assessment Data

When you complete the SPS Assessment, we collect:

• Your responses to all assessment questions
• Your calculated scores across Strategy, Persuasion, and Systems
• Your generated diagnostic report and archetype profile
• Timestamps of assessment completion

Payment Data

If you purchase an assessment, payment information is collected and processed securely by Stripe. We do not store your credit card details. Stripe handles all payment processing in compliance with PCI-DSS security standards.

Technical Data

To improve performance and user experience, we automatically collect:

• Device type and browser information
• IP address and general location data
• Usage analytics to understand platform interaction

2. How We Use Your Information

We use your data exclusively to provide and improve the SPS Assessment experience:

Report Generation

Your assessment responses are processed using AI (via OpenAI's API) to create a customized diagnostic report identifying your strengths and weaknesses across the SPS Triad.

Service Improvement

We analyze aggregate, anonymized data to refine question quality, scoring accuracy, and report relevance. Individual responses are never shared publicly or sold to third parties.

Communications

With your consent, we may send you email updates about improvements to the SPS Framework, new features, or insights relevant to your archetype. You can opt out at any time.

Security & Integrity

We use technical data to detect and prevent fraud, unauthorized access, and technical issues that could affect your experience.

3. Data Storage & Security

We take multiple measures to protect your information:

Secure Cloud Storage

All data is stored securely in Replit's cloud environment with industry-standard encryption for data at rest and in transit.

AI Processing via OpenAI

Your assessment data is processed through OpenAI's API to generate personalized insights. OpenAI does not use your data to train their models or share it with third parties.

Encryption

We use HTTPS encryption to protect data transmitted between your browser and our servers. Passwords are hashed using bcrypt encryption.

Limited Access

Only authorized team members have access to user data, and only for technical maintenance, customer support, or security purposes. We never sell or share your personal information for marketing.

4. Data Retention

We retain your assessment data so you can access your reports and track your progress over time:

• Account information (until you request deletion)
• Assessment responses and reports (until you request deletion)
• Anonymized analytics data (retained indefinitely for platform improvement)

You may request deletion of your account and all associated data at any time by emailing support@ifounder.io. We will process your request within 30 days.

5. Cookies & Analytics

We use simple session cookies to:

• Keep you logged in during your session
• Remember your assessment progress if you pause and return
• Ensure a smooth user experience

We do not use third-party advertising cookies or tracking pixels. Our analytics are solely for improving the platform, not for targeted advertising.

6. Your Rights

You have full control over your personal data:

Access Your Data

You can view your assessment history and reports anytime from your dashboard.

Correct Your Data

If you need to update your name, email, or other account information, contact us at support@ifounder.io.

Export Your Data

You can request a copy of your assessment data. Contact us at support@ifounder.io with subject line "Data Export Request."

Delete Your Data

You can request complete deletion of your account and all associated data. We will process deletion requests within 30 days. Email support@ifounder.io with subject line "Data Deletion Request."

Opt Out of Communications

Unsubscribe from promotional emails at any time using the link in any email we send.

We respond to all rights-related requests within 30 days.

7. Third-Party Services

We use the following trusted third-party services to operate Ifounder:

Stripe

Purpose: Payment processing for paid assessments.
Stripe complies with PCI-DSS standards and handles all credit card data securely. We never see or store your full payment details.

OpenAI API

Purpose: AI processing to generate your personalized SPS diagnostic report.
OpenAI does not retain or use your data for model training.

Replit

Purpose: Cloud hosting and data storage.
Replit provides secure infrastructure with encryption and access controls.

All third-party services comply with GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act) where applicable.

8. International Users & Compliance

Ifounder is operated from the United States. If you access our service from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States.

We comply with applicable data protection laws, including GDPR for European users and CCPA for California residents. If you have specific privacy rights under these laws, please contact us to exercise them.

Note: This is not legal advice. For specific guidance on international data transfer laws, consult a qualified attorney.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page.

If we make significant changes affecting how we use your data, we will notify you via email or through a prominent notice on our website.

By continuing to use Ifounder after changes take effect, you acknowledge and agree to the updated Privacy Policy.

10. Contact Us

If you have any questions, concerns, or requests regarding your privacy or this policy, please contact us:

Email: support@ifounder.io
Subject Line: "Privacy Request"

We will respond to all privacy-related inquiries within 30 days.