Privacy Policy

ENIKIA Property Management Pty Ltd trading as Focas Property, ABN 83 631 458 761, is the operator of Founder Launch Studio and is the controller of personal information handled for the platform, except where another organisation acts as an independent controller. In particular, Lemon Squeezy acts as merchant of record and independently handles checkout, payment, tax, fraud and related transaction information under its own privacy notice.

We are based in Queensland, Australia. Our privacy contact is info@founderlaunchstudio.com.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles to the extent they apply to us, and with other applicable privacy laws, including the EU GDPR and UK GDPR where their territorial requirements are met.

This Policy applies to founderlaunchstudio.com, the Founder Launch Studio application, LaunchOS, the Founder Coach, Idea Vault, First Look, waitlists, support and related communications. It does not govern a third party’s independent service or website, including Lemon Squeezy’s checkout, except to explain that we use it.

Most of what we hold is your own venture work or data our systems generate or need — not identifying details we ask you for. Beyond your name and email address, we don't ask you for details that identify you personally — but information linked to your account is still personal information in law, so we protect it and you can ask us to delete it at any time. Depending on how you use the Service, the categories we may collect are:

• Account and identity information, including your name, email address, account identifier and age-eligibility confirmation.
• Referral information, including a code identifying the partner or affiliate whose link brought you to us, stored on your member record so they can be credited if you subscribe.
• Authentication and security information, including hashed credentials managed by our authentication provider, session records, login events and security signals.
• Founder profile and onboarding information, including answers about your experience, working style, venture and goals.
• Venture content, including briefs, assignments, submissions, notes, Idea Vault entries and questions you ask the Founder Coach.
• Generated information, including feedback, scores, pass results, capability indicators, progress, stage history and other AI-assisted output.
• First Look information, including the idea text entered before account creation and the generated reflection.
• Subscription and transaction information received from Lemon Squeezy, such as customer and order identifiers, plan, subscription status, billing dates, currency, tax location and limited payment status. We do not receive or store full payment-card details.
• Communications, including waitlist or founding-rate reservations, service emails, support requests, complaints, refund requests and any information you provide in them.
• Technical and usage information, including IP address, device and browser information, timestamps, requested pages, error and diagnostic information, and security logs reasonably needed to operate and protect the Service.
• Analytics information, including pages viewed, how you arrived at the Service, device and browser type, and an approximate location (country or city level) derived from your network, collected through Google Analytics.

We collect information directly from you when you create an account, use a feature, submit work, reserve a founding rate, contact us or request a refund. We generate progress and feedback information through your use of the Service. We receive limited transaction and subscription information from Lemon Squeezy and technical information automatically from our systems and service providers.

We use personal information only where we have a lawful reason. Where EU or UK data-protection law applies, the principal legal bases are:

• Performance of our contract with you — to create and secure your account, deliver lessons, generate your feedback and scores, and administer your subscription.
• Our legitimate interests — to operate, secure, maintain, understand and improve the Service, prevent misuse, and credit a referring partner — balanced against your rights and interests.
• Your consent — for optional marketing, and for use of First Look before you create an account — which you may withdraw at any time without affecting processing already carried out.
• Compliance with a legal obligation — to keep transaction, tax, complaint and security records, and to respond to lawful requests.

AI-generated feedback is central to the Service. When you use First Look, submit an assignment or ask the Founder Coach about an Idea Vault entry, we send the relevant text and limited contextual information to Anthropic through its commercial API so that a response can be generated.

We configure and use commercial AI services on the basis that submitted API content is not used to train the provider’s general models except where separately agreed. Provider terms and technical practices may change, so we review them periodically.

The Service uses automated processing to produce educational scores, feedback and stage progression. It does not use that processing to make decisions about employment, credit, insurance, healthcare, legal rights or access to an essential service. If an applicable law gives you a right concerning automated decision-making, you may contact us for information or review.

Where the wellbeing safeguard described in our Terms of Service operates, we record only your account identifier, the stage you were working on, the fact that the message was shown, and the date and time. We do not copy the text that caused it to appear, and we do not create any record that would let us retrieve it.

A person at Founder Launch Studio may contact you once by email to point you towards independent support. We do not monitor accounts and do not undertake to do so.

First Look can be used without an account. We store the idea text without attaching your name or member account, and we do not deliberately re-identify it or connect it to a later account. Separate technical and security logs may contain an IP address or similar identifier for a limited period.

Do not include sensitive personal information or confidential information belonging to someone else unless you are authorised and it is necessary. We may use de-identified First Look content and aggregated statistics to understand venture themes and improve the Service. We do not sell First Look ideas.

Lemon Squeezy is the merchant of record for paid subscriptions. You provide payment details directly to Lemon Squeezy or its payment partners. Lemon Squeezy independently determines how it processes checkout, payment, tax, fraud, refund and chargeback information under its privacy notice and applicable law.

We receive only the transaction and subscription information reasonably needed to activate and administer your access, reconcile payments, provide support and process requests. We do not store full card numbers or card security codes.

We do not sell your personal information or venture ideas. We may disclose information to the following recipients where reasonably necessary to operate the Service:

• Hosting and application infrastructure (Vercel).
• Database and authentication (Supabase).
• AI processing (Anthropic, through its commercial API).
• Email delivery (Resend).
• Analytics (Google, through Google Analytics).
• Payments and merchant of record (Lemon Squeezy).
• Our professional advisers, and a purchaser or successor in a genuine sale or restructure of the business, in each case under confidentiality.
• Courts, regulators or law-enforcement bodies where required or permitted by law, or where reasonably necessary to protect rights, property or someone’s safety.

We are based in Australia and use providers that may store or process information in the United States and other countries in which they or their subprocessors operate. Those countries may have privacy laws different from the laws where you live.

Where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances to ensure overseas recipients handle personal information consistently with applicable requirements. We do not rely solely on a blanket consent to remove accountability.

Where EU or UK data-protection law applies to a restricted transfer, we use an available lawful transfer mechanism, such as an adequacy decision, approved standard contractual clauses, the UK international data transfer addendum or another permitted safeguard, together with supplementary measures where appropriate. You may contact us for information about the relevant safeguard.

We use cookies and similar storage to keep you signed in, maintain your session, protect the Service, and manage free use of First Look before you create an account.

We use Google Analytics to understand how people find and use the Service — which pages are viewed, where visitors arrive from, and where they stop. It sets cookies on your device and sends usage information to Google. Google Analytics does not store your IP address. We do not use it for advertising, we do not share its data with advertising products, and we do not use it to identify you. You can opt out at any time using Google’s browser add-on at tools.google.com/dlpage/gaoptout, or by blocking analytics cookies in your browser — the Service works normally without them.

We also use a referral cookie. If you arrive through a link shared by one of our partners or affiliates, we store a code identifying that partner for up to 60 days so that they can be credited if you later subscribe. It records where you came from. It does not track you across unrelated websites and we do not use it for advertising. We use a second, similar code to record which of our own links or campaigns you arrived through. It is used the same way, for the same period, and is not used for advertising.

We do not use advertising or cross-site tracking technologies. If that ever changes we will update this Policy and obtain consent where the law requires it before any such technology loads. You can control cookies in your browser, though blocking essential ones will prevent the Service from working.

We may send marketing or founding-rate communications where you have requested them or where applicable law otherwise permits. Marketing messages will identify the sender and provide a functional unsubscribe method. You can withdraw marketing consent or opt out at any time. We may still send non-marketing messages needed for your account, subscription, security or legal notices.

We keep your work for as long as your account exists.

Cancelling a paid subscription does not delete anything. Your account, brief, submissions, feedback, Idea Vault and progress all remain, and if you come back you pick up where you left off.

You can ask us to delete your account and the personal information we hold about you, at info@founderlaunchstudio.com. We will do so within a reasonable period, except where we are required or permitted by law to retain particular records — for example transaction, tax and complaint records. Residual copies may persist in protected backups until they are overwritten in the ordinary cycle, and will not be used for any other purpose.

Accounts with no sign-in for 24 months are purged. We will give notice to the registered email address before that happens.

We use reasonable technical and organisational measures appropriate to the nature and risk of the information, including access controls, authentication controls, encryption in transit, provider security measures, logging and restricted administrative access. No online system is completely secure, and we cannot guarantee absolute security.

You are responsible for using a strong, unique password and protecting your account. Contact us promptly if you believe your account or information has been compromised.

Our administrative tools are designed so that we can see your progress, activity and the health of the Service without displaying the substance of your submissions, Idea Vault entries or First Look ideas. Automated systems and the service providers listed above necessarily process that content to provide the Service.

A person may read your content only where it is reasonably necessary to: (a) respond to a request for help that you have made; (b) investigate a security incident or suspected misuse of the Service; (c) repair a fault; or (d) comply with a legal obligation or protect someone’s safety. Access of this kind is limited to what the purpose requires, logged where appropriate and subject to confidentiality obligations.

Checking the Service works. From time to time we review a small number of submissions and the feedback they received, to confirm the Service is assessing work correctly and that the coaching is useful. We do this to find faults, not to evaluate you or your idea, and we do not use what we see for marketing or to build anything of our own.

You may ask for access to personal information we hold about you, ask us to correct inaccurate or out-of-date information, or make a privacy complaint. You may also request deletion, although deletion is not absolute and may be limited by legal retention, security and legitimate record-keeping requirements.

Send a request to info@founderlaunchstudio.com. We may take reasonable steps to verify your identity. We will respond within a reasonable time and explain any lawful reason for refusing or limiting a request. We do not charge for making a request, although a permitted reasonable access charge may apply in unusual circumstances after notice.

If the EU GDPR or UK GDPR applies, you may have rights to access, correct or erase personal data; restrict processing; receive portable data; object to processing based on legitimate interests; object at any time to direct marketing; and withdraw consent without affecting earlier lawful processing. These rights are subject to legal conditions and exceptions.

You may lodge a complaint with the data-protection authority where you live or work, or where you believe an infringement occurred. We generally respond to a valid request within one month, subject to a legally permitted extension. We may request proportionate information to verify identity.

Where applicable law requires us to appoint an EEA or UK representative, the representative’s details will be published in this section before we actively market paid subscriptions in that jurisdiction. You may always contact us directly at info@founderlaunchstudio.com.

Residents of certain US states may have rights, where the relevant law applies to us, to know, access, correct, delete or obtain a copy of personal information and to appeal a refusal. Some laws also provide rights to opt out of sale, targeted advertising or certain profiling.

We do not sell personal information for money and do not use personal information for cross-context behavioural advertising. We will not unlawfully discriminate against you for exercising an applicable privacy right. Submit a request or appeal to info@founderlaunchstudio.com. We will apply the law that governs the request and may verify your identity or an authorised agent’s authority.

The Service is intended only for people aged 18 years or older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so that we can investigate and take appropriate action.

We investigate suspected data breaches and take remedial action appropriate to the risk. Where required, we will notify affected individuals and relevant regulators, including under Australia’s Notifiable Data Breaches scheme.

We may update this Policy to reflect changes to law, providers or the Service. We will post the updated Policy with a new effective date. If a change materially affects how we use personal information, we will provide additional notice and obtain consent where required.

Privacy contact:

ENIKIA Property Management Pty Ltd trading as Focas Property

ABN 83 631 458 761

Queensland 4152, Australia

Email: info@founderlaunchstudio.com

Please describe the issue and the outcome you seek. We aim to acknowledge a privacy complaint promptly and provide a substantive response within 30 days where reasonably practicable. If you are not satisfied and the Australian Privacy Act applies, you may contact the Office of the Australian Information Commissioner at oaic.gov.au. Overseas residents may also contact their applicable privacy or data-protection authority.