Privacy Policy

فاندرا ("ما") پلتفرم فاندرا را اداره می‌کند, available at studio.foundra.ir and venture.foundra.ir. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Please read this policy carefully. By using the Platform, you consent to the practices described here. For questions, contact us at privacy@foundra.ir.

2.1 Information You Provide

• Account data — name, email address, password (hashed), profile photo
• Payment data — billing address, payment method details (processed by our payment provider; we do not store full card numbers)
• Content you upload — documents, pitch decks, datasets, notes and any other User Content you submit to the Platform
• Communications — messages to our support team, feedback, survey responses

2.2 Information Collected Automatically

• Usage data — pages visited, features used, AI queries run, timestamps, session duration
• Device & browser data — IP address, browser type, OS, referring URL
• Cookies — authentication tokens, platform preference cookies (see Section 6)

2.3 Information from Third Parties

• Single sign-on providers (Google) if you choose to authenticate via them
• Public data sources used by AI agents to generate market analysis (not linked to your identity)

We use the information we collect to:

• Create and manage your account, authenticate your identity
• Provide, operate, and improve the Platform and its AI features
• Process transactions and send billing-related communications
• Send transactional emails (OTP codes, password resets, important notices)
• Respond to your support requests and communications
• Monitor and analyse usage to improve performance, detect abuse, and fix bugs
• Comply with legal obligations

We do not use your uploaded User Content to train AI models shared with other customers. Your data is processed in isolation within your workspace.

We do not sell your personal data. We share information only in the following circumstances:

• Service providers — cloud hosting (servers), email delivery, payment processing, analytics. All processors are bound by data processing agreements.
• Workspace collaborators — data, reports, and projects you share within a workspace are visible to other workspace members you invite.
• Legal requirements — we may disclose information if required by law, court order, or government authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction with advance notice.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., dispute resolution, fraud prevention).

AI analysis logs and query history are retained for 90 days by default. You can delete your run history at any time from your account settings.

We use the following types of cookies:

• Essential cookies — authentication session tokens, sullisos_platform cookie for subdomain routing. Required to use the Platform; cannot be disabled.
• Analytics cookies — anonymous usage statistics to understand how users interact with features. You may opt out via your browser settings.

We do not use advertising or cross-site tracking cookies.

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Hashed and salted password storage (bcrypt)
• OTP-based two-factor authentication
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to customer data

No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — request your data in a portable format
• Objection — object to processing based on legitimate interests
• Restriction — request restriction of processing in certain circumstances

To exercise any of these rights, email privacy@foundra.ir. We will respond within 30 days.

Our servers may be located outside your country of residence. By using the Platform, you consent to the transfer of your information to countries that may have different data protection laws. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) for transfers from the EEA.

The Platform is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, contact us at privacy@gtdev.ir and we will delete it promptly.

فاندرا ونچر

Market analysis queries and AI-generated investment reports are stored in your account history. Web search results used by AI agents are fetched from third-party search APIs and are not persisted beyond the session unless you explicitly save a report.

فاندرا استودیو

Portfolio company data and workspace content you enter may be processed by AI agents to generate summaries and analytics. This data is scoped to your workspace and is not used to train shared AI models.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a prominent notice on the Platform at least 14 days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised policy.

For privacy-related inquiries, data requests, or complaints:

Sullis — Data Privacy
Email: privacy@foundra.ir
General support: support@foundra.ir