Privacy

Foundry (working name). Interim notice, last updated September 13, 2026. This is a plain-language description of what happens today, written while our lawyer (Lexstart) prepares the full terms and privacy policy. It is not the final legal document and will be replaced before Foundry opens to paying customers.

Foundry is run from Canada by its founder. This page describes, in plain words, what we store, where it is held, and every outside company your information reaches. If anything is unclear, email us and a person will answer: richardsonjill93@gmail.com.

What we store about you, the owner

Your email. We keep your email so we can build and deliver your site, send your sign-in link and your receipt, and connect you to your control room.

What you type. Your idea and any later change requests are stored so we can build and rebuild your site.

Your phone number, if you add one. If you give a phone number, we store it so a contact or booking notice can reach you by text. If you choose to put it on your site, it also shows on your public page because you asked for that.

Payments. Payments are handled by Stripe on Stripe's own page. Your card details go to Stripe, not to us. We receive your billing email and whether the payment went through; we do not store your card number.

What we store about your customers

Contact form messages. When someone uses your site's contact form, we email their name, email, phone, and message to you. We do not keep the message; we keep only a monthly count of how many came in.

Bookings. When someone books and you have connected Google Calendar, their name and phone go into a calendar event on your calendar, and we send you a notice. We do not keep the booking ourselves; we keep only a daily count, using a one-way scrambled form of the phone number, to limit abuse.

Intake conversations and photos. If your site uses the intake conversation, we do store it: the full conversation, the answers, any photos, and the visitor's name and phone, in a private store for your site, so you can read them in your control room. These are kept and are not deleted today (see "Keeping and deleting" below).

Where your records are held

Everything Foundry stores about you and your customers is held in Netlify Blobs, the storage that comes with our host, Netlify. Our code does not choose a region, and Netlify's default is a region in the United States; the exact region is still to be confirmed with Netlify. So today your records are held in the United States, outside Canada.

Every company your information reaches, and why

To run Foundry we send information to these companies, and no others. Every one of them runs on servers outside Canada, including in the United States, so using Foundry means your information may be handled outside Canada.

Netlify hosts Foundry, stores your records, and publishes your finished site (which shows what you put on it, including your phone number if you added it).

Stripe takes the payment on its own page; we receive your billing email and the payment result.

Anthropic is the AI that writes and updates your site. It receives the text you type, your change requests, and, for the intake conversation, that conversation. Foundry keeps certain content because the product needs it to work: what you write, your change requests, and the intake conversations and photos your customers send. Foundry does not train any AI model on any of it. Content is sent to Anthropic's API to generate and operate the site, and what Anthropic does with content sent to its API is governed by Anthropic's own terms, which we have not independently verified.

Resend sends email: your sign-in link, your receipt, your "site is live" message, and the contact and intake messages we forward to your inbox. It handles your email address and the message content.

Twilio sends the text notice to your phone for a contact or booking. It handles your phone number and the notice.

Google is used only if you connect Google Calendar for bookings. It exchanges the sign-in tokens, reads your calendar's busy times, and writes booking events that carry the visitor's name and phone.

Unsplash supplies stock photos. It receives only the business-type words used to search for images, no personal information.

PostHog measures product usage. It receives only which step you are on and your language, plus a random, non-identifying id, no name, email, phone, or free text.

Formspree handles the waitlist form on our home page. If you leave your email there to get your link, that email goes to Formspree, which passes it to us so we can send your link. Your email is the only thing it receives.

Google Calendar, if you connect it

If you connect Google Calendar so visitors can book, the access tokens Google gives us are stored encrypted (AES-256-GCM), and that encrypted store is the only place we keep them. You can disconnect at any time from your control room; disconnecting asks Google to revoke the tokens and deletes our stored copy.

Keeping and deleting

We do not have a retention schedule yet. Today, records do not expire on their own, and there is no self-serve way to export or delete them.

To have your data exported or deleted, email richardsonjill93@gmail.com from the address you signed up with and ask. We do this by hand, so we cannot promise a fixed turnaround yet. Note that intake conversations and photos are currently kept and have no automatic deletion.

Signing out ends your current sign-in session. It does not delete your account or your records.

What we do not do

We do not sell your information. We do not show ads. We do not make up statistics about you.

Your rights under Quebec law

Quebec's Law 25 gives you the right to see the personal information we hold about you, correct it, and withdraw consent. Email us and we will handle it by hand; there is no automatic tool for it yet. If you are unsatisfied with our answer, you may contact the Commission d'accès à l'information du Québec.

Changes

When this notice changes, we will post the update here with a new date. The full policy from our lawyer will replace this page before we open to paying customers.

Who to contact

Foundry is run by its founder, who is personally accountable for what this page says. Contact: richardsonjill93@gmail.com.