1. Introduction
CoFounderBot ("we", "our", or "the Platform") is committed to protecting the privacy of your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our AI agent platform for software development and project management.
By using CoFounderBot, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our platform.
2. Information We Collect
2.1 Information provided directly
- Account information: name, email address, encrypted password
- Profile information: username, profile picture, contact information
- Generated content: missions, projects, code, documentation, and other materials created on the platform
- Communications: messages sent to our support team
2.2 Information collected automatically
- Usage data: interactions with the platform, features used, time of use
- Device information: device type, operating system, browser
- Log data: IP addresses, access dates and times, pages visited
- Cookies and similar technologies: to improve user experience and analyze platform usage
2.3 Integration information
- Connected service data: GitHub, Slack, Jira, or other integrations you authorize
- API tokens: stored securely and encrypted to facilitate integrations
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the CoFounderBot platform
- Process and complete transactions
- Send technical information, updates, and administrative messages
- Respond to your comments, questions, and requests
- Personalize your experience and provide content tailored to your interests
- Monitor and analyze trends, usage, and activities related to our services
- Detect, investigate, and prevent fraudulent and unauthorized activities
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- Performance of a contract: When necessary to fulfill our terms of service
- Consent: When you have given explicit consent for specific purposes
- Legitimate interests: When necessary for our legitimate interests (such as improving our services), provided your rights and freedoms do not prevail
- Legal obligation: When necessary to comply with a legal obligation
5. Information Sharing
We may share your information with:
- Service providers: Companies that perform services on our behalf (payment processing, data analytics, hosting)
- Business partners: With your consent, to offer certain products or services
- Legal compliance: When we believe in good faith that disclosure is necessary to comply with the law, protect our rights, or safety
- Corporate transactions: In connection with a merger, asset sale, or acquisition
We do not sell your personal data to third parties.
6. Data Security
We implement technical, administrative, and physical security measures designed to protect your personal data, including:
- Encryption of sensitive data in transit and at rest
- Multi-factor authentication for account access
- Regular security monitoring and penetration testing
- Restricted access to personal data only to authorized employees
- Internal security policies and procedures
Although we strive to protect your personal information, no method of Internet transmission or electronic storage is 100% secure.
7. Data Retention
We retain your personal data for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
- How long you have an active account with us
- Legal obligations we may have
- Whether retention is advisable considering our legal position (such as in relation to applicable statutes of limitations, litigation, or regulatory investigations)
8. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal data:
For EEA, UK, and Switzerland residents (GDPR):
- Access: Right to request copies of your personal data
- Rectification: Right to request correction of inaccurate information
- Erasure: Right to request deletion of your personal data
- Restriction: Right to request restriction of processing of your data
- Data portability: Right to receive your data in a structured and transferable format
- Objection: Right to object to the processing of your data
- Withdrawal of consent: Right to withdraw consent at any time
For California residents (CCPA/CPRA):
- Knowledge: Right to know what personal information we collect, use, share, or sell
- Deletion: Right to request deletion of personal information
- Correction: Right to correct inaccurate personal information
- Opt-out: Right to opt out of the sale or sharing of personal information
- Non-discrimination: Right not to be discriminated against for exercising these rights
To exercise these rights, contact us at privacy@cofounderbot.com. We will respond to all requests within applicable legal timeframes.
9. International Data Transfers
CoFounderBot operates globally and may transfer your data to countries other than where you reside. When we transfer data outside the EEA, UK, or Switzerland, we ensure adequate protections are in place, such as standard contractual clauses approved by the European Commission.
10. HIPAA Compliance
For healthcare sector clients in the United States, CoFounderBot may act as a "business associate" as defined by the Health Insurance Portability and Accountability Act (HIPAA). In such cases:
- We sign Business Associate Agreements (BAA) with covered entities
- We implement administrative, physical, and technical safeguards to protect protected health information (PHI)
- We maintain records of PHI disclosures
- We notify clients in the event of a data breach involving PHI
- We return or destroy PHI upon service termination, where applicable
If your organization requires a BAA, contact us at hipaa@cofounderbot.com.
11. Children's Privacy
CoFounderBot is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under 16, we will take steps to delete that information.
12. Changes to This Policy
We may update this Privacy Policy periodically. The updated version will be indicated by a revised "Last updated" date and the updated version will be effective as soon as it is accessible. We will notify you of material changes through a prominent notice on our platform.
13. Contact
If you have questions about this Privacy Policy, contact us at:
CoFounderBot
Email: privacy@cofounderbot.com
For EEA residents: You have the right to file a complaint with a data protection authority regarding our collection and use of your personal information.