Privacy Policy

Last Updated: October 1, 2025

1. Introduction

Found Opportunity ("we," "our," or "us") operates www.foundopportunity.com and provides email analysis services to identify business opportunities. This Privacy Policy explains how we collect, use, protect, and handle your information.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Email Connection: Email address and OAuth access tokens for Gmail or Outlook
• Profile Information: Optional company name, industry, preferences

2.2 Information We Access from Your Email

• Email Content: Subject lines, sender information, email body text, dates
• Email Metadata: Labels, folders, read/unread status
• Scope of Access: We only access emails in your Spam folder from the past 24 hours
• Data Retention: Opportunity details stored for 7 days maximum, then automatically deleted

2.3 Automatically Collected Information

• Usage Data: Features used, login times, interaction patterns
• Technical Data: IP address, browser type, device information, operating system
• Cookies: Session cookies for authentication and functionality

3. How We Use Your Information

3.1 Email Processing

• Analyze email content to identify business opportunities, partnership requests, sales leads, and networking opportunities
• Categorize and rank opportunities by relevance and priority
• Extract key information (sender details, opportunity type, urgency)
• Present filtered results in your dashboard

3.2 Service Operations

• Provide and maintain the Found Opportunity service
• Send service-related notifications (new opportunities found, system updates)
• Improve our AI detection algorithms
• Analyze detection accuracy during a 7-day quality control window before automatic deletion
• Provide customer support
• Detect and prevent fraud or abuse

3.3 AI Processing

We use Anthropic's Claude AI to analyze email content. Email data sent to Anthropic for processing:

• Is processed in real-time and not stored by Anthropic
• Is not used to train AI models
• Is transmitted securely via encrypted connections
• Complies with Anthropic's data processing terms

4. How We Share Your Information

We do NOT sell, rent, or trade your email data or personal information.

4.1 Service Providers

We share data with trusted third-party providers who help us operate our service:

• Anthropic (Claude AI): Email content analysis - data not stored or used for training
• Cloud Hosting: DigitalOcean - secure data storage
• Email Providers: Google and Microsoft for OAuth authentication

4.2 Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or security issues
• Protect user safety

4.3 Business Transfers

If Found Opportunity is acquired or merged, your information may be transferred to the new entity. We will notify you before this occurs.

5. Data Security

5.1 Security Measures

• Encryption: All data transmitted using TLS/SSL encryption
• Access Controls: Strict internal access policies and authentication
• OAuth Security: We never store your email password - only secure OAuth tokens
• Database Security: Encrypted database storage with access logging
• Regular Audits: Security reviews and vulnerability testing

5.2 Data Retention

• Email Content: Processed in real-time, not permanently stored in our systems
• Opportunity Data: Automatically deleted after 7 days for privacy protection
• Processed Email Tracking: Email identifiers retained to prevent duplicate processing
• Account Data: Retained while your account is active
• Deleted Data: Permanently removed within 30 days of deletion request

We automatically delete opportunity records (including sender information, subjects, and analysis) after 7 days. This ensures minimal data retention while allowing time for our team to improve detection accuracy.

6. Your Rights and Choices

6.1 Access and Control

• View Data: Access all detected opportunities in your dashboard
• Delete Opportunities: Remove individual opportunities anytime
• Disconnect Email: Revoke access to your email account instantly
• Export Data: Download your opportunity data
• Delete Account: Permanently delete your account and all associated data

6.2 Email Access Control

• You can revoke email access at any time through your account settings
• You can also revoke access through Google or Microsoft account settings
• Revoking access immediately stops all email scanning

6.3 Communication Preferences

• Opt out of marketing emails (service emails still required)
• Control notification frequency and types

6.4 GDPR Compliance (European Users)

• Legal Basis: We process email data based on legitimate interest (spam opportunity detection) and your explicit consent
• Data Minimization: We only store data necessary for a 7-day quality control period
• Right to Erasure: All opportunity data automatically deleted after 7 days
• Data Processing Agreement: Available upon request for business accounts
• Cross-Border Transfers: EU user data processed with appropriate safeguards

7. Google API Services User Data Policy

Found Opportunity's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the minimum Gmail API scopes necessary (gmail.readonly)
• Gmail data is used solely to provide opportunity detection services
• Gmail data is not transferred to third parties except as required for service operations
• Gmail data is not used for serving advertisements
• Human review of Gmail data occurs only with explicit user consent or for security/legal purposes

8. Microsoft Data Usage

For Outlook/Microsoft 365 accounts, we access only the permissions you explicitly grant. You can revoke access at any time through your Microsoft account settings.

9. Children's Privacy

Found Opportunity is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it immediately.

10. International Data Transfers

Your data may be processed in the United States of America. If you are located outside this region, your data may be transferred internationally. We ensure appropriate safeguards are in place for such transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR:

• Right of access to your personal data
• Right to rectification of incorrect data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Email notification to your registered address
• Prominent notice on our website
• In-app notification upon login

Continued use of Found Opportunity after changes constitutes acceptance of the updated policy.

14. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data:

• Found Opportunity
• Email: privacy@foundopportunity.com
• Address: PO Box 727, Wainscott, NY 11975
• Website: www.foundopportunity.com

We will respond to all requests within 30 days.