Privacy Policy

Mutable Software Ltd ("we", "us" or "our") operates FounderGrid. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website or use our platform. We are committed to processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are the data controller for personal data collected through FounderGrid. Our contact details are provided at the bottom of this policy.

1. Data We Collect

Information you provide directly

• Account data: name, email address, company name, and password when you register.
• Profile data: any information you add to your public or private profile (e.g. bio, links, role).
• Listings and content: product or service listings, messages, reviews, and any other content you post.
• Waitlist / sign-up: name, email address and (optionally) business name if you join the waitlist on this site.
• Payment data: billing address and payment method details. Card details are processed by our payment provider and are not stored on our servers.
• Communications: the contents of emails or support messages you send us.

Information collected automatically

• Usage data: pages visited, features used, clicks, session duration, and referring URLs.
• Device and browser data: IP address, browser type and version, operating system, and device identifiers.
• Cookies and similar technologies: see Section 5 below.

Information from third parties

If you sign in via a third-party service (e.g. Google), we receive your name and email address from that provider. We may also receive limited data from payment processors to confirm transaction status.

2. How We Use Your Data

We use your personal data to:

• Create and manage your account and deliver the FounderGrid service.
• Process payments and send transaction receipts.
• Communicate with you about your account, including security notices.
• Send product updates, newsletters, and offers where you have opted in.
• Detect, prevent, and investigate fraud, abuse or violations of our Terms of Service.
• Analyse usage patterns to improve and develop the platform.
• Comply with our legal obligations.

3. Legal Bases for Processing

We rely on the following legal bases under UK GDPR:

• Contract performance: processing necessary to provide the service you have signed up for.
• Legitimate interests: improving the platform, fraud prevention, and direct marketing to existing users (where proportionate).
• Legal obligation: processing required to comply with applicable law.
• Consent: where we have obtained your explicit consent (e.g. marketing emails to waitlist subscribers). You may withdraw consent at any time.

4. Sharing Your Data

We do not sell your personal data. We share it only in the following circumstances:

• Service providers: trusted third parties who process data on our behalf (hosting, payments, analytics, email delivery). They are bound by data processing agreements. On this website these include Microsoft Azure (hosting), Formspree (receives waitlist sign-ups) and Google Analytics (site usage, only with your consent).
• Other members: profile information and listings you choose to make public are visible to other FounderGrid members.
• Legal requirements: where required by law, court order or to protect the rights and safety of Mutable Software Ltd or others.
• Business transfers: in the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Cookies

We use cookies and similar technologies on our website and platform:

• Essential: required for the platform to function (e.g. session management when you are signed in). These cannot be disabled.
• Analytics: help us understand how visitors use the site. These are only set if you accept them in our cookie banner.

On this website (foundergrid.io) specifically:

• fg-cookie-consent (local storage, essential): remembers whether you accepted or rejected analytics cookies, so we don't ask again on every visit. Kept until you clear your browser storage.
• _ga and _ga_K9QPPFLSYF (Google Analytics, analytics): distinguish visitors and sessions so we can measure site usage. Set by Google only after you accept, and kept for up to 2 years.

You can change your choice at any time using the Cookie settings link in the footer of every page. If you withdraw consent, we stop Google Analytics and delete its cookies. You can also block or delete cookies through your browser settings.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required to retain it longer to comply with a legal obligation or resolve a dispute.

Transaction records may be retained for up to 7 years for accounting and tax purposes.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data in certain circumstances ("right to be forgotten").
• Restriction: ask us to restrict processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at privacy@foundergrid.io. We will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. International Transfers

Some of our service providers are based outside the UK. Where we transfer personal data to countries without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

9. Children's Privacy

FounderGrid is not directed at, and we do not knowingly collect personal data from, anyone under the age of 18. If we become aware that we have collected personal data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date and, where changes are material, notify you by email or prominent notice on the platform. We encourage you to review this policy periodically.