Privacy Policy

Last Updated: June 9, 2026

1. Introduction

This Privacy Policy applies to BUILDPAD S.R.L., a company incorporated under the laws of Romania ("ai cofounder", "aicofounder.com", "we," "us," or "our"). This policy explains how we collect, use, and share your personal information when you use our services.

2. Information Collection

We collect information you provide directly to us when you:

  • Create an account
  • Use our service
  • Communicate with us

This may include your name, email address, and any other information you choose to provide.

3. Use of Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Communicate with you about our services
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities in connection with our services
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations

4. Information Sharing and Disclosure

We may share personal information as follows:

  • With your consent
  • With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf
  • In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process
  • If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property, and safety of ai cofounder, our users, or others

Our service providers include:

  • Hetzner (Germany, EU) - for hosting services
  • Mailgun (EU) - for email processing and delivery
  • US-based AI providers - large language model providers for AI-powered features, and a voice provider for speech transcription and text-to-speech in interviews
  • Meta (Ireland/US) - for advertising and conversion measurement

These providers process your data under strict data processing agreements with appropriate safeguards for international data transfers where applicable.

4.1 Legal Bases for Processing

We process your personal data under the following legal bases:

  • Contract fulfillment: To provide our services to you
  • Legitimate interests: For analytics and service improvement
  • Legal obligation: To comply with legal requirements
  • Consent: Where specifically required by law

4.2 Email Processing

We use Mailgun to handle our email communications. When processing emails, we share:

  • Email addresses
  • Email content and subject lines
  • Metadata (timestamps, delivery status, open rates)

Mailgun processes this data on EU-based servers, keeping your email data within the European Union. You have the right to request information about your email data, opt-out of non-essential emails, and request deletion of your email data.

4.3 AI Processing

We use AI providers located in the United States to power features of our service, including large language models and a voice service for transcription and text-to-speech in interviews. Processing your content may take place outside the EU. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses. These providers do not use data submitted through our service to train their models.

4.4 Interviews

Some users create interviews and share a public link inviting others ("respondents") to take part. If you respond to an interview:

  • Your spoken answers are captured by your microphone and sent to our voice provider to be transcribed into text. We do not store the audio recording — only the text transcript.
  • The interview is conducted by an AI conversation model that asks follow-up questions.
  • If you choose to provide your email address you may do so, or decline.
  • The transcript, and your email if you provide it, are shared with the user who created the interview.

We process this data on the basis of our legitimate interest in operating the interview feature. A notice linking to this policy is shown before the interview begins.

4.5 Advertising and Conversion Measurement

We use the Meta Pixel and Meta's Conversions API to measure the effectiveness of our advertising and to show our ads to relevant audiences. This involves sharing certain information with Meta Platforms Ireland Limited and Meta Platforms, Inc., such as a hashed version of your email address, your IP address, browser information, and events like signing up or starting a trial. Email addresses are hashed before they are sent so they cannot be read by Meta in plain text. This data is transferred to the United States under Meta's certification to the EU-US Data Privacy Framework, and Meta retains it for up to two years. We do not load the Meta Pixel for visitors in the European Economic Area.

5. Data Security

We take reasonable measures to help protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

6. Data Retention

We store the information we collect about you for as long as is necessary for the purpose(s) for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request that your personal information be corrected or deleted
  • Object to or restrict our processing of your personal information
  • Request a copy of your personal information in a structured, commonly used, and machine-readable format
  • Withdraw consent where processing is based on consent

To exercise these rights, please contact us at hi@aicofounder.com.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date at the top of this policy.

9. Contact Us

If you have any questions about this privacy policy, please contact us at hi@aicofounder.com.

BUILDPAD S.R.L.
Intrarea Poltava 24, Anexa C2
060635 București RO

10. Data Location and International Transfers

We primarily store and process your data on servers located in the European Union (Germany) through our service provider Hetzner. However, some data processing may occur outside the EU, particularly when using our email service provider (Mailgun) and AI service providers. When we transfer your personal data outside of the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) with our service providers. These transfers are necessary for the performance of our contract with you and to provide our services effectively.

11. Supervisory Authority

If you are located in the European Union and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).