Privacy Policy

Last updated: April 4, 2026

Summary

This Privacy Policy explains how The Foundry ("we," "us," or "our") collects, uses, and protects your personal information when you use our trading analytics platform at the-foundry.ai (the "Service"). We are committed to protecting your privacy and handling your data transparently.

Key points:

  • We collect only what we need to operate the Service
  • We do not sell your personal data to third parties
  • Authentication and payments are handled through Whop, which has its own privacy practices
  • We use analytics tools to understand how the platform is used so we can improve it
  • You can request deletion of your data at any time

1. Information We Collect

Information you provide directly

  • Account information: When you sign up through Whop, we receive your name, email address, and Whop user ID. We do not receive or store your payment details as these are handled entirely by Whop.
  • Preferences and settings: Any notification preferences, watchlists, or dashboard configurations you set within the platform.
  • Communications: If you contact us for support, we retain the content of those communications.

Information collected automatically

  • Usage data: Pages viewed, features used, interactions with the platform, timestamps, and session duration.
  • Device information: Browser type and version, operating system, screen resolution, and device type.
  • IP address: Used for security, fraud prevention, and approximate geographic location.

2. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service
  • Authenticate your identity and manage your subscription access
  • Send you service related communications (account confirmations, security alerts, subscription updates)
  • Analyze usage patterns to improve the platform and fix issues
  • Detect and prevent fraud, abuse, or security threats
  • Send you product updates and feature announcements (you can opt out at any time)
  • Respond to your support requests

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: Processing necessary to provide the Service you subscribed to.
  • Legitimate interests: Analytics and product improvement, fraud prevention, and security.
  • Consent: Marketing communications and non essential cookies.
  • Legal obligation: Where we are required by law to retain or disclose information.

4. Third Party Services

We use the following third party services that may process your data:

  • Whop: Authentication, subscription management, and payment processing. See Whop's Privacy Policy.
  • Supabase: Database hosting and real time data delivery. Data is stored in Supabase's infrastructure with row level security enabled.
  • PostHog: Product analytics to understand feature usage and improve the platform. See PostHog's Privacy Policy.
  • Vercel: Website hosting and content delivery.
  • Discord: Community channels included with your subscription. Discord has its own privacy practices.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Cookies and Tracking

We use cookies and similar tracking technologies to operate the Service and analyze usage. For detailed information about what cookies we use and how to manage them, see our Cookie Policy.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After you cancel your subscription:

  • Account data is retained for up to 12 months in case you resubscribe
  • Usage analytics data is retained in anonymized form
  • You can request immediate deletion of your data at any time (see section 8)

We may retain certain data longer if required by law or to resolve disputes.

7. Data Security

We take reasonable measures to protect your personal data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Row level security on our database
  • Authentication handled by Whop's OAuth system with PKCE
  • Regular security reviews of our codebase and infrastructure

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we update or correct inaccurate data.
  • Deletion: Request that we delete your personal data.
  • Portability: Request your data in a machine readable format.
  • Opt out: Unsubscribe from marketing communications at any time.
  • Restrict processing: Request that we limit how we use your data.

To exercise any of these rights, email us at privacy@the-foundry.ai. We will respond within 30 days.

9. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from someone under 18, we will delete that information promptly.

10. Do Not Track

Some browsers include a "Do Not Track" (DNT) signal. There is currently no uniform standard for how websites should respond to DNT signals. At this time, we do not respond to DNT signals but we do provide cookie controls as described in our Cookie Policy.

11. U.S. State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Virginia, or other U.S. states with consumer privacy laws, you may have additional rights including:

  • The right to know what personal data we collect and how it is used
  • The right to delete your personal data
  • The right to opt out of the sale of personal data (we do not sell your data)
  • The right to non discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@the-foundry.ai.

12. International Data Transfers

Your data may be processed and stored in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure appropriate safeguards are in place for international data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page and may notify you via email or through the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@the-foundry.ai.