Privacy Policy

FounderTLDR ("we", "us") operates the website foundertldr.com and the related application that monitors YouTube channels and produces AI-generated summaries and a personalized email digest. This policy explains what personal data we process and why. If you have any questions, contact us at hello@foundertldr.com.

• Account data: your email address and, if you sign in with Google, your basic profile (name, profile image) provided by Google OAuth.
• YouTube data: when you connect your Google account, the list of channels you are subscribed to (read-only, via the YouTube Data API), used only to set up the channels you choose to monitor.
• Profile & preferences: the answers you give during the onboarding profile interview, your chosen digest style, and your monitored channels.
• Usage data: the videos analyzed for you and their scores, which are part of delivering the service.
• Product analytics: only if you accept cookies, aggregate measurement of how the site is used — page views and a few newsletter signup events, via Vercel Web Analytics. It sets no cookies, stores no identifier in your browser and does not follow you across sites. If you decline — or before you choose — the measurement script is never loaded and nothing is sent.
• Campaign attribution: only if you accept cookies, the campaign parameters of the link that brought you to the site (utm_source, utm_medium, utm_campaign), kept in your browser for the session and saved with a newsletter signup so we know which channels work. If you decline — or before you choose — none of it is stored or sent.
• Billing data: if you subscribe, your subscription status and a Stripe customer reference. Card details are handled entirely by Stripe — we never see or store them.

We process your data to:

• provide the core service (monitor channels, analyze videos, send your digest);
• personalize summaries and scoring based on your profile;
• manage your account, subscription, and trial;
• communicate service-related messages (e.g. your digest, trial reminders);
• maintain security and improve the product.

The legal bases under the GDPR are the performance of our contract with you, your consent (where required), and our legitimate interest in running and improving the service.

We share the minimum data necessary with the following processors, who act on our behalf:

• Supabase — database, authentication, and storage.
• Vercel — application hosting.
• Anthropic (Claude) — AI analysis of video transcripts and digest generation.
• Resend — delivery of the email digest and transactional emails.
• Stripe — subscription billing and payment processing.
• Google — sign-in and read-only access to your YouTube subscriptions.

We do not sell your personal data.

We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations (e.g. billing records).

If you are in the EU/EEA, you have the right to access, rectify, delete, restrict, and port your personal data, and to object to certain processing. You can exercise these rights — or withdraw consent at any time — by emailing hello@foundertldr.com. You also have the right to lodge a complaint with your local data protection authority.

We use cookies and similar technologies — including browser storage — that are strictly necessary to run the service (for example, to keep you signed in). Anything non-essential waits for your consent via the cookie banner. Product analytics is only loaded after you accept, and it stores nothing in your browser, so declining simply means it never runs. Campaign attribution is only stored in your browser, and only sent with a newsletter signup, after you accept; declining removes anything previously stored. Neither one ever blocks subscribing.

The banner asks once. To change a choice you already made, clear this site's cookies and browser storage — the banner then asks again — or email us at hello@foundertldr.com. A cookie-preferences control is on our list.

Your choice itself is recorded in a strictly necessary cookie (ftldr_cookie_consent) that holds nothing but "accepted" or "declined" and identifies no one. It exists so our servers can enforce the choice as well: a newsletter signup that does not carry an accepted choice has its campaign parameters discarded before anything is stored.

We may update this policy from time to time. We will update the "last updated" date above and, for material changes, notify you by email or in the app.