GDPR Compliance Statement

One Unicorn, LLC, 2234 N. Federal Hwy #1317, Florida, USA, is the data controller for personal data processed through the FounderNotes Service. Contact: privacy@foundernotes.ai.

• Performance of a contract — to deliver the Service you signed up for.
• Legitimate interests — product analytics, fraud prevention, security, and improvement of the Service.
• Consent — non-essential cookies and marketing communications.
• Legal obligation — tax, accounting, and lawful requests by authorities.

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability in a machine-readable format.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time.
• Right to lodge a complaint with your local supervisory authority.

To exercise these rights, email privacy@foundernotes.ai. We respond within 30 days.

We have not formally appointed a Data Protection Officer as we are not currently required to under Article 37 GDPR. Privacy inquiries may be directed to privacy@foundernotes.ai. [If an EU/UK representative is appointed, list name and address here.]

Data processed in the United States is transferred under Standard Contractual Clauses or other lawful transfer mechanisms.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and notify affected users without undue delay where required by Article 34 GDPR.

A current list of sub-processors (including Stripe, our hosting provider, and email vendor) is available on request from privacy@foundernotes.ai.