Skip to content

FoundUp Privacy Policy

Last updated: September 29, 2026

FoundUp provides an AI-assisted website, GEO audit, content and agreed AI visibility monitoring service that helps small service businesses publish clear, structured information online and keep that information up to date.

This Privacy Policy explains how FoundUp ("FoundUp," "we," "our," or "us") collects, uses, discloses, and protects personal information when you use our website, submit an enquiry or prepare a project brief, communicate with us, participate in an agreed project, or use related products and services (collectively, the "Services"). It also describes the choices and rights available to you.

This Privacy Policy applies to website visitors, prospective customers, pilot participants, customers, business contacts, and other people who interact with the Services. It does not apply to third-party websites, platforms, or services that have their own privacy policies.

1. Who We Are

The entity responsible for the processing described in this Privacy Policy is:

LIGHTHUNTER PTE. LTD.

73 UBI ROAD 1, #07-62 OXLEY BIZHUB, SINGAPORE 408733

Privacy contact: info@getfoundup.ai

Where applicable law uses the terms "controller," "business," or similar terms, LIGHTHUNTER PTE. LTD. is the controller or business responsible for your personal information, except where this Privacy Policy states otherwise.

2. The Personal Information We Collect

The information we collect depends on how you interact with the Services and which features you use.

2.1 Information You Provide to Us

  • Contact and identity information: your name, email address, phone number, organization, role, country or region, and other contact details you provide.
  • Business and website information: your business name, services, locations or service areas, opening hours, contact details, customer questions, existing website links, social links, brand materials, photographs, and other information you ask us to publish or use.
  • Pilot and project information: your goals, requirements, feedback, approvals, project scope, delivery records, and information needed to build, manage, or update a website.
  • Communications and support information: messages, meeting notes, support requests, feedback, survey responses, and other communications you send to us.
  • Transaction information: invoice amounts, currencies, receipts, refunds, billing contacts, and tax or accounting information where a paid service is agreed. The current FoundUp website does not collect payment-card or bank-account credentials.
  • AI-assisted project information: materials and instructions you authorize us to use for agreed AI-assisted drafting or analysis, together with generated suggestions, edits, and feedback.

When you submit the enquiry form, we receive and store your name, email address, optional business name, and description of your business or idea, together with a submission timestamp. Each email address can submit one enquiry. We use this information to review and respond to your enquiry. Submissions are stored using Cloudflare D1.

Please do not provide sensitive personal information unless it is necessary for the relevant service and you are permitted to provide it.

2.2 Information From Other Sources

At your direction, or where permitted by law, we may collect publicly available business information from sources such as your existing website, business listings, social-media profiles, public registers, reviews, and other online sources. This may include:

  • business names, descriptions, categories, locations, opening hours, and contact details;
  • public products, services, prices, photographs, posts, links, and customer-facing information;
  • public reviews, ratings, questions, and responses; and
  • information needed to verify accuracy, attribute a source, prevent fraud, or keep agreed website content current.

We may also receive information from hosting, content-delivery, security, and communications providers and, where part of an agreed project, AI or customer-selected service providers involved in delivering the Services.

2.3 Information Collected Automatically

When you visit the FoundUp website, our hosting, content-delivery, and security providers may automatically process:

  • IP address and approximate location derived from it;
  • browser, device, operating-system, language, and network information;
  • requested URLs, referral URLs, access times, and response information; and
  • diagnostic, performance, abuse-prevention, and security logs.

Unless you turn off website analytics, we use PostHog to understand page visits, content engagement, navigation and contact-button clicks, FAQ and example interactions, resource downloads, and enquiry progress and outcomes. For forms, we record which field was completed or failed validation, without its value. These events include the page path, referring website, browser and device information, and randomly generated visitor and session identifiers. We do not send your name, email, business name or enquiry text to PostHog, and we do not use session replay or identify visitors by their enquiry details.

3. How We Use Personal Information

We use personal information to:

  • provide, maintain, and improve the Services;
  • respond to pilot enquiries, review briefs you choose to send us, and determine whether FoundUp is a suitable fit;
  • research, write, design, build, publish, manage, and update customer websites;
  • organize business information and provide AI-assisted content, structure, and website suggestions;
  • publish information that a customer has approved for a public website;
  • communicate about projects, support, security, products, and services;
  • prepare invoices, record payments and refunds, and maintain related accounting records where applicable;
  • operate the website, troubleshoot problems, review hosting and security performance, and develop the Services;
  • maintain security, detect fraud or abuse, enforce our terms, and protect users and the Services;
  • comply with law, respond to valid legal requests, establish or defend legal claims, and protect rights, safety, and property; and
  • carry out other purposes described at the time information is collected, with consent where required.

If the laws of the European Economic Area, United Kingdom, Switzerland, or another jurisdiction require us to identify a legal basis, we rely on one or more of the following:

  • Performance of a contract: to evaluate an agreed pilot, deliver requested Services, manage a project, and process related transactions.
  • Legitimate interests: to operate and improve the Services, secure systems, prevent fraud, understand usage, maintain customer relationships, and communicate with users, provided those interests are not overridden by your rights and interests.
  • Consent: where you authorize an optional use, receive certain marketing, or where consent is otherwise required.
  • Legal obligations: to maintain records, respond to lawful requests, meet tax and financial obligations, and comply with applicable law.
  • Protection of vital interests or other lawful grounds: where permitted and appropriate under applicable law.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn, and some features may no longer be available if they depend on that consent.

5. AI-Assisted Features and Automated Processing

FoundUp may use AI-assisted systems to analyze information you provide or authorize and to generate suggestions such as business descriptions, website structures, page content, questions and answers, and recommendations. AI-generated output may be inaccurate or incomplete. Customers remain responsible for reviewing and approving business information before it is published.

Where AI-assisted work is part of an agreed project, we may process authorized source materials, instructions, and generated output to provide that work, maintain safety, troubleshoot problems, and evaluate quality. We may use AI service providers acting under their own terms or our service arrangements, and we will identify material project-specific handling where appropriate. We do not use customer materials to train a FoundUp model unless the customer expressly agrees.

We may also use automated tools to detect fraud, abuse, security threats, or violations of our terms. Where required by law, we will provide information about solely automated decisions that produce legal or similarly significant effects and offer applicable rights to request human review or challenge a decision.

6. Public Business Information

Websites built and managed through FoundUp are generally intended to be publicly accessible. Business information approved for publication—such as a business name, description, services, location, contact details, opening hours, photographs, prices, and answers to customer questions—may be viewed, copied, indexed, summarized, or shared by people, search engines, and AI services.

Customers must ensure they have the right to provide and publish the content they give us, including personal information relating to employees, contractors, customers, or other people.

7. How We Disclose Personal Information

We may disclose personal information to the following recipients:

  • Service providers: companies that provide cloud hosting, storage, content delivery, communications, customer support, security, and other operational services on our behalf, plus AI infrastructure where it is used for an agreed project.
  • Customer-selected services: domain registrars, hosting providers, analytics tools, booking systems, forms, maps, social platforms, and other services a customer asks us to connect to their website.
  • Professional advisers: auditors, lawyers, accountants, insurers, and other advisers where reasonably necessary.
  • Authorities and other parties for legal or safety reasons: where we reasonably believe disclosure is required by law or necessary to protect rights, safety, property, users, or the Services; investigate fraud or security incidents; or enforce agreements.
  • Parties to a corporate transaction: in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards.
  • Other parties at your direction or with your consent.

We may use and disclose aggregated or de-identified information that cannot reasonably be linked to an individual. We will not attempt to re-identify information we maintain as de-identified except as permitted by law.

FoundUp does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable California law.

8. Website Technologies and Logs

The website serves HTML pages and accepts enquiries through a server-side form endpoint. PostHog analytics is enabled by default when you visit the website, without an initial permission prompt. You can turn it off or back on using “Analytics settings” on any public page. We honor a previously saved choice to turn analytics off. Turning analytics off does not prevent you from reading content or submitting an enquiry. We also keep analytics off when your browser sends a Global Privacy Control or Do Not Track signal.

If you change the analytics setting, we remember your choice in browser local storage for up to 180 days. When analytics is on, PostHog also uses browser storage for randomly generated visitor and session identifiers. We remove analytics persistence when you turn it off; the preference recording your choice remains. Private browsing or clearing browser storage may reset these preferences.

We use PostHog's US cloud service to process these optional analytics events. We remove URL queries and fragments from analytics page addresses, limit referrer information to the referring website, and disable automatic form capture, session replay, error capture, and browser log capture. Our hosting, content-delivery, and security providers may separately maintain essential request and security logs needed to deliver and protect the website. See PostHog's Privacy Policy for information about its handling of data.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain security, comply with legal, tax, accounting, and reporting obligations, resolve disputes, and enforce agreements.

Retention periods depend on factors such as the type and sensitivity of the information, the project involved, whether a customer relationship remains active, legal requirements, applicable limitation periods, and security needs. When information is no longer required, we delete or de-identify it, subject to technical limitations in backups and lawful retention requirements.

Ending a project or asking us to delete information may not immediately remove information that:

  • appears in completed transaction, tax, fraud-prevention, or dispute records;
  • another party is independently entitled or required to retain;
  • has already been made public or copied outside the Services; or
  • remains temporarily in protected backups before scheduled deletion.

10. International Data Transfers

FoundUp and its service providers may process personal information in countries other than the country where you live. Those countries may have different data-protection laws.

Where required, we use recognized safeguards for international transfers, such as adequacy decisions, approved contractual clauses, or other lawful transfer mechanisms. You may contact us to request more information about safeguards relevant to your personal information.

11. Security

The canonical public website uses HTTPS. Enquiry records are stored in Cloudflare D1 and are not included in the publicly served website files. Protecting that information also depends on controlling access to the service accounts and systems used to handle it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You are responsible for protecting any credentials or accounts used with third-party services connected to a website and for promptly notifying us if you suspect unauthorized access affecting the Services.

12. Your Privacy Rights and Choices

Depending on where you live, you may have the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal information;
  • request restriction of or object to certain processing;
  • receive a portable copy of certain information;
  • withdraw consent where processing is based on consent;
  • opt out of marketing communications;
  • opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
  • appeal our response to a privacy request where applicable; and
  • lodge a complaint with a data-protection or privacy authority.

To exercise a privacy right, contact us at info@getfoundup.ai. Please describe your request and the account, project, or information involved. We may need to verify your identity and authority before completing the request. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising a privacy right.

Rights are subject to applicable exceptions. If we cannot fulfill a request, we will explain the reason where required by law.

13. Additional Information for California Residents

If the California Consumer Privacy Act, as amended ("CCPA"), applies to our processing, California residents may request information about the categories and specific pieces of personal information we collect, the sources and purposes of collection, and the categories of recipients to whom information is disclosed. They may also request correction or deletion and exercise applicable rights to opt out of sale, sharing, or certain uses of sensitive personal information.

The categories described in Section 2 may correspond to the following CCPA categories: identifiers; customer records; commercial information; internet or other electronic-network activity; approximate geolocation; visual or similar information where provided for a project; professional information; and inferences drawn from other information.

We use and disclose these categories for the business and commercial purposes described in Sections 3 and 7 and retain them according to the criteria described in Section 9. We do not sell these categories or share them for cross-context behavioral advertising as those terms are defined by the CCPA.

California residents may submit requests using the method in Section 12.

14. Children and Young People

The Services are intended for businesses and are not directed to children below the minimum age required by applicable law to consent to the processing of personal information. We do not knowingly collect personal information from children who cannot lawfully provide that consent.

If you believe a child has provided personal information contrary to this section, contact us at info@getfoundup.ai. We will investigate and take appropriate action, including deletion where required.

15. Third-Party Services

The Services may link to or integrate with third-party services, including domain registrars, hosting and analytics providers, social platforms, payment providers, booking systems, maps, communication tools, and customer websites. Their handling of personal information is governed by their own terms and privacy policies. FoundUp is not responsible for independent third-party privacy practices.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. We will update the "Last updated" date when we make changes. If a change materially affects your rights or how we use personal information, we will provide additional notice where required, such as through the Services or by email.

17. Contact Us

For privacy questions, requests, or complaints, contact:

LIGHTHUNTER PTE. LTD.

Privacy and data-protection contact: info@getfoundup.ai

Address: 73 UBI ROAD 1, #07-62 OXLEY BIZHUB, SINGAPORE 408733

If you are in a jurisdiction that permits complaints to a supervisory authority, you may also contact the relevant authority in your place of residence or work.