Privacy Policy
Last updated: October 14, 2026
Your trust matters. FoundersROI is the property of, and is owned and operated by, MAFSAN GLOBAL SOLUTIONS FZC LLC (the data controller, “we”, “us”). This Privacy Policy explains what information FoundersROI collects, how we use it, and the choices you have. We wrote it in plain language.
Who we are
FoundersROI (foundersroi.com) is owned and operated by MAFSAN GLOBAL SOLUTIONS FZC LLC, CWS-2V-226580, 26th Floor, Amber Gem Tower, Ajman, UAE. We are the data controller for the personal data described here. You can reach us about privacy at privacy@foundersroi.com. We have not appointed a data protection officer; privacy questions go to that address.
What we collect
Account: your name, email address, project or business name, and a password (kept by Supabase as a one-way hash; we never see it) or your Google sign-in details (name, email, avatar). Your answers: quiz answers, business details, goals, quests and progress that you enter or that Ashar generates for you, and anything you type to Ashar or into the Feedback box. Billing: your plan status and Stripe customer and subscription identifiers; card details go straight to Stripe and are never stored by us. Email: whether you asked for tips, and a record of the emails we sent you. Agreement record: the date, and which version of the Terms and Privacy Policy you accepted, and that you confirmed you are 18 or older. Technical: your IP address is used briefly for abuse limits and appears in our hosting provider's logs, and error reports are sent to Sentry. We do not ask for anything we do not use, and we do not collect payment card numbers, government IDs, health data or data about children.
Why we use it, and our legal bases
To run your account and give you the service you asked for (contract). To send the tips email you opted in to, and to set the optional campaign cookie if you click Allow (consent, which you can withdraw at any time). To keep the product secure, prevent abuse, fix errors and understand where people get stuck (our legitimate interests, which we balance against your rights). To keep payment, tax and accounting records (legal obligation). We do not use your data for advertising, profiling that has legal effects on you, or sale.
Authentication & Provider Usage
FoundersROI uses Supabase Auth for authentication. You may sign in with an email and password, or with Google. When you use Google, we receive your name, email address and profile avatar URL. We do not receive access to your Google Drive, Gmail, contacts or any other Google data.
Analytics & Telemetry
We collect minimal usage events to understand how the product is used and to find problems. Events are linked to your account ID so we can see where people get stuck. They include which pages you used, key actions (for example finishing the quiz, starting checkout, completing a quest) and error events. Some events carry short labels such as a quest or milestone title, and anything you type into the Feedback box is stored with your account. When you click a tool link we count the click and the page it came from (the path only, no query details). We use this to run and improve the product, never for advertising or sale. Error reports are sent to Sentry; we have turned off Sentry's collection of personal data by default and do not use session replay.
AI Processing Disclosure
FoundersROI includes AI features: Ashar (chat), your quiz plan, quest suggestions and the free check. To answer, the text you type and the business details you give us (what you sell, goals, tasks) are sent to AI providers we use, currently DeepSeek and, where enabled, Google Gemini, which may process it outside your country. We send only what is needed for the answer, and we do not use your data to train our own models. We cannot promise how each provider handles data on its side, so please do not type passwords, card numbers or other sensitive personal data into Ashar. AI answers can be wrong; check anything important before acting on it.
Who receives your data
We do not sell your personal data and we do not share it for cross-context behavioural advertising. Service providers process data for us under their own terms: Supabase (database and sign-in), Vercel (hosting, and cookie-free visit counts that record the page, referring site, campaign tags, country and device type but no cookie or personal identifier), Resend (email), Sentry (error reports), Stripe (payments), Google (only if you choose Google sign-in), and the AI providers above. If an administrator has set a logo for a recommended tool, your browser loads it from that tool's own website. Tool links may be affiliate links; clicking one takes you to that company's site, which has its own privacy policy. We may disclose information if the law requires it or to protect the safety and security of the platform and its users.
If, and only if, you tick the box when creating your account, we email you a short series about your verdict and, if you start checkout and leave, one reminder. Every email has a working one-click unsubscribe link and shows our postal address. Service emails (such as password resets) are not marketing and are sent as needed.
International transfers
We are based in the United Arab Emirates. Our providers store and process data in other countries, including the United States and Japan (our database is hosted in Tokyo). Where the law requires safeguards for transfers out of the UK or EEA, we rely on the safeguards our providers offer, such as standard contractual clauses.
Data Retention
We keep your account data (profile, goals, milestones, tasks, preferences and AI-generated guidance) while your account is active. When you delete your account, your account data is removed straight away, apart from what we must keep by law (for example payment records held by Stripe) and routine backups, which expire on their normal cycle. We email you a confirmation, and your email address is not kept on any list. A weekly clean-up job deletes usage events after 180 days and unfinished brain-dump leads after 365 days.
Your rights
You can ask to access, correct, export, restrict or delete your personal data, to object to how we use it, and to withdraw any consent you gave. Two of these you can do yourself in Settings: Download my data and Delete my account. For anything else, email privacy@foundersroi.com; we reply within one month. If you are in the UK or EEA you can also complain to your data protection authority (in the UK, the Information Commissioner's Office). If you are a California resident you have the rights to know, delete and correct personal information, and to opt out of its sale or sharing; we do not sell or share it, and we will not treat you worse for using these rights.
Age
FoundersROI is for people aged 18 or older. You confirm this when you create an account. We do not knowingly collect data from anyone under 18. If you think a child has given us data, email privacy@foundersroi.com and we will delete it.
Cookies
We use essential cookies to keep you signed in and a small cookie for your time zone. Only if you click Allow on our cookie notice do we also keep the campaign tags of the link you arrived from for up to 30 days. We use no advertising or cross-site tracking cookies. Full list and durations: see the Cookie Policy at foundersroi.com/cookies.
Security
We protect data with encrypted connections, access rules in the database that limit each account to its own rows, and limited staff access. No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.
Changes to this policy
When we make a material change we will update the date above and, for changes that affect your rights, tell you by email or in the product before they apply.
Contact
Privacy questions or requests: privacy@foundersroi.com. Post: MAFSAN GLOBAL SOLUTIONS FZC LLC, CWS-2V-226580, 26th Floor, Amber Gem Tower, Ajman, UAE.
© 2026 MAFSAN GLOBAL SOLUTIONS FZC LLC. FoundersROI, foundersroi.com, Ashar (including its name, character and personality), and all related software, designs, text, graphics and brand names are the property of MAFSAN GLOBAL SOLUTIONS FZC LLC. All rights reserved. CWS-2V-226580, 26th Floor, Amber Gem Tower, Ajman, UAE.