Privacy notice
Content requirement rendered as published text. Every section describes an adopted practice or names what is still to be adopted; nothing here claims a certification, entity, or practice that does not exist. The contracting entity, governing terms, and any jurisdiction-specific disclosures are inserted after legal review and before payments are accepted.
Who we are and how to contact us
FoundingSite operates foundingsite.com, the customer workspace, and the customer websites it hosts. Contact routes for privacy questions are the privacy request form and the contact page; the seller's postal address appears here once adopted.
Two data relationships
For visitors to foundingsite.com and for contractor customers, FoundingSite decides the purposes and is responsible. For a contractor's clients whose inquiries and correspondence FoundingSite processes on the contractor's behalf, the contractor defines the relationship and FoundingSite processes the agreed data to deliver the service under its terms.
Information collected
Account details (name, email, password hash, two-step secrets), company details, billing identifiers from the payment provider (never card numbers), inquiry submissions, connected-mailbox correspondence within the scope the customer authorized, uploaded media and their permissions, support requests, first-party analytics events only with consent, and security logs.
Purposes
Delivering the website and workspace, sending transactional mail, processing payments, connecting authorized mailboxes, routing and answering inquiries for the contractor, support and service delivery, security, and legal obligations. Homeowner inquiry data is never sold, used for cross-customer advertising, or enrolled in FoundingSite marketing.
Sharing and service providers
Hosting, database, payment, email delivery, DNS and certificate, mailbox (Google, Microsoft) and storage providers as listed in the current service-provider list, which is published before real customer data flows. Connected construction software receives only the fields the customer previews and confirms.
Retention
Operational content for the life of the subscription, then 30 days of owner export, removal from active systems by day 60, and expiry of routine backups by day 90 after service ends, with documented limited exceptions for billing, consent, suppression, dispute, and legal-hold records. Raw consented analytics for 13 months. Audit logs for 24 months.
Your choices
Marketing permission is separate and optional. Optional analytics is off until chosen and honors browser opt-out signals. Recipients of a contractor's automated marketing email can unsubscribe instantly through the link in every message.
Privacy requests
Use the privacy request form for access, correction, deletion, or opt-out. FoundingSite verifies authority proportionately, determines whether it or the contractor is responsible, logs receipt and the applicable deadline, and assists the responsible business.
Security
Encryption in transit and at rest, two-step sign-in for privileged roles, hashed session tokens, encrypted mailbox tokens, tenant isolation checks, and an incident process with a named lead. No practice here is a guarantee against every risk.
Children
The services are directed at businesses. FoundingSite does not knowingly collect information from children.
Questions: contact FoundingSite or make a privacy request.