Found Privacy Notice

Found is operated by Maja Ninkovic Shapera, its founder, based in Pennsylvania, United States. In this notice, "Found", "we" and "us" refer to her as the operator of Found. For any privacy question or request, contact maja@getfound.tech.

This notice applies to everyone who uses getfound.tech, wherever they are: visitors, account holders, people who submit or manage tool listings, people who request access to a tool, and People Leaders who subscribe to Found updates. Visitors from outside the United States are covered too.

• Account and sign-in details: your name, email address, password (stored only in protected form by our authentication service), email-verification status and the roles linked to your account.
• Listings: listing submissions, company and tool information, offer details, logos you upload, review notes and decisions, and which accounts may manage which tool.
• Access requests: your name, the email address you confirm, your organisation, optional team size and message, the tool and offer you selected, timestamps, and the privacy-notice version you acknowledged.
• People Leader updates: your email address, subscription status, and when you signed up, confirmed or unsubscribed.
• Communications: what you send us, for example by email.
• Security and technical information: limited information used to keep the site working and prevent abuse, such as protected (hashed) email and network identifiers for rate limiting and block lists, and the result of an anti-spam check on the access-request form.

• To run accounts and the tool directory.
• To review, publish and manage listings.
• To pass confirmed access requests to the managers of the tool that was requested.
• To send transactional emails, such as confirmation links and listing decisions, and subscription-confirmation emails.
• To send People Leader updates, only to people who have confirmed their subscription.
• To protect Found, its users and providers, and to prevent spam, fraud and abuse.
• To comply with legal obligations.

Where laws such as the GDPR apply, we rely on: providing the service you ask for; our legitimate interests in operating and securing Found; your consent, for People Leader updates; and legal obligations.

• Tool managers: approved managers of a tool receive confirmed access requests for their own tool only. They then handle your information under their own privacy practices.
• Service providers: our hosting, database, authentication, email and security providers receive only what they need to provide their services to us. These include Lovable (hosting, backend and email delivery) and Cloudflare (site security and the anti-spam check on the access-request form).
• Legal requirements: we may disclose information where required by law or to protect rights and safety.

Found does not sell personal information and does not use personal information for targeted advertising.

Found is based in the United States and uses service providers that operate internationally, so your information may be processed in the United States and other countries where those providers work. Where the law requires it, we rely on appropriate safeguards offered by those providers for such transfers.

• Unconfirmed access requests: up to 48 hours.
• Confirmed access requests: up to 180 days.
• Access-request rate-limit records: up to 48 hours.
• Unconfirmed People Leader subscriptions: up to 48 hours.
• Confirmed subscriptions: until you unsubscribe or ask us to delete them. We may keep limited information where needed to make sure we respect your unsubscribe.
• Account, listing and submission information: while needed to run your account, listing and the review process, and for a reasonable period afterwards where required for security, disputes or legal obligations.

We use reasonable technical and organisational measures to protect information, such as access controls, verified email confirmation and protected storage of security identifiers. No system is completely secure, so we cannot guarantee absolute security.

Depending on where you live and the law that applies, you may have the right to access, correct or delete your personal information, object to or restrict how we use it, receive a portable copy, and withdraw consent at any time where we rely on consent. To use these rights, email maja@getfound.tech. We may need to confirm your identity before acting on a request.

EEA and UK users can also complain to their local data-protection authority.

Pennsylvania and other US residents have the rights given by the privacy laws that apply to them, and we will respond to requests in line with those laws.

Found is a professional service intended for adults. It is not directed to children under 18, and we do not knowingly collect their information.

We may update this notice. We will post the new version here with a new version number and effective date, and where changes are significant we will take reasonable steps to let affected people know.

Questions or requests about privacy: maja@getfound.tech.

• Access-request Privacy Notice, version 2026-10-03-v1
• People Leader Privacy Notice, version 2026-10-16-pl-v1