Privacy Policy

Last updated: 2026-11-08

This page is maintained by Coexecute OÜ to explain how personal data is handled in the Founder Accelerator program (the "Service"). This page is app-owner editable content, not an independent certification.

1. Data controller

Coexecute OÜ (registered in Estonia) is the data controller for personal data processed through the Service. Contact: privacy@everydayfounders.co.

2. What we collect

Account data: name, email, authentication identifiers.
Program data: founder group membership, module drafts and final deliverables, operator feedback, showcase bookings.
Sensitive program artefacts: founders' agreements, cap-table drafts, legal-readiness materials that founders choose to upload.
Usage data: activity log entries generated as founders and operators move through modules.
Pre-launch testing data: before launch, we show visitors different versions of our homepage and founding prices to learn what works best. Your browser stores a random visitor ID and the version you were shown, so you see the same version each visit. We record page views, plans viewed and waitlist signups against that ID. It is first-party only, never shared with ad networks, and not used to profile you across other sites.

Prices shown before launch are founding prices we are testing. Nobody is charged while on the waitlist, and you keep the founding price you were shown when membership opens.

3. Legal basis

For the free AI read, we process the website address, notes and documents you choose to provide to generate an AI assessment. We do not save those source files as uploads in the free-read flow. We keep the generated read for up to 24 hours so we can email it to you; it may repeat details from your material. The email is sent once, immediately when you request it, to the address you enter and handled by our email delivery service. Free-read material is not sent to experts or investors by this flow.

Processing is based on (a) performance of the program contract with the founder group, and (b) our legitimate interest in operating and improving the Service, including pre-launch testing of page versions and prices. Sensitive artefacts are processed only because founders upload them to receive operator feedback. You can clear the testing ID at any time by clearing your browser's site data.

4. Sharing

Program data is visible to the founders in the same founder group, to operators assigned to that group, and to Coexecute OÜ administrators. We do not sell personal data. We use the following processors:

Lovable (application hosting and backend platform).
Supabase (managed database, authentication, storage, provisioned via Lovable Cloud).
Calendly (showcase scheduling embeds).
Email delivery via the Lovable Emails infrastructure, sending from notify.everydayfounders.co.

5. Data location

Personal data is stored in the European Union, in the Stockholm, Sweden(AWS eu-north-1) region operated by our backend processor. Because both Coexecute OÜ (Estonia) and the storage region are within the EEA, no Standard Contractual Clauses or additional international transfer safeguards are required for EU/EEA-based founders. Some processors (e.g. Calendly, email delivery) may process limited operational metadata outside the EEA under their own GDPR-compliant transfer mechanisms.

6. Retention

Program data is retained for the duration of the founder group's participation and for a reasonable period afterwards to support alumni and legal record-keeping. When a founder deletes their account, their personal profile is removed from live systems immediately; backup copies held by our hosting processor may persist for up to 90 days before being overwritten in the normal course of backup rotation.

7. Your rights

Under the GDPR, founders may request access, correction, export, restriction, objection, or deletion of their personal data. Signed-in founders can self-serve export and deletion at Settings → Privacy. All other requests: privacy@everydayfounders.co. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

8. Security and workspace isolation

Row-level authorisation: every database table enforces row-level security, so program data can only be read by verified members of your own founder group, the operators assigned to it, and Coexecute OÜ administrators.
Encryption: data in transit is encrypted with TLS; databases and stored documents are encrypted at rest with AES-256.
Access controls: operators only see the deliverables, tools and work you choose to share with them for review.
Document protection: decks, cap tables and spreadsheets sit in private storage and open only through short-lived signed links tied to your session.

We do not claim any specific certification on this page. More detail: Trust and security.

9. AI coaching and data processing

Your inputs, uploaded excerpts and goals are sent through secure server-side calls to enterprise AI providers.
Neither we nor our AI providers use your company data, pitch materials or prompts to train public AI models.
Processing happens only on request, to produce feedback, roadmaps and diagnostics for your own workspace.

10. Changes

We will update this page when practices change. Material changes will be communicated to active founders by email.