Privacy notice

Who is responsible?

Founder Stack is operated by LUXVIBEWEB LIMITED. Contact hello@luxvibeweb.co.uk or write to our registered office about privacy, support or a data request. Our ICO registration reference is ZC211919. Registration is not a certification of the product.

We act as controller for our own account administration, support, security and business communications. Where a customer business decides why workforce or customer information is entered into its workspace, that business is normally the controller and we process that information on its instructions. Its own privacy information also applies. The precise allocation is recorded in the customer agreement.

Information and its sources

You provide account details, contact information, company branding, preferences, messages and any content you enter. A workspace administrator or colleague may provide your name, work email, role, invitation details, assigned work or review information. Connected services may supply account identifiers and the records you authorise them to share.

Workspace content may include plans, metrics, actions, comments, meeting notes, processes, roles, check-ins and development conversations. Authentication and hosting services also process technical information such as session identifiers, IP addresses and service logs. Optional AI features process the prompts and context submitted to them.

Why we use information

For an individual contracting with us in a business capacity, necessary account and service administration is based on that contract or requested pre-contract steps. When you act for a company, our account and support processing generally supports our legitimate interests in supplying the company with a usable service and communicating with its representatives.

We rely on legitimate interests for proportionate security, abuse prevention, troubleshooting and defending claims, subject to assessing the impact on individuals. We process information where necessary to comply with applicable legal obligations. Optional marketing and non-exempt tracking require their own appropriate permissions; joining a workspace does not opt you into marketing.

Customer-controlled workspace processing follows the customer’s instructions. The customer determines its applicable lawful bases, including for employee information. A company subscription is not automatically a contract with every employee.

What is required and what is optional

An account identifier and authentication information are needed to provide an account. Workspace membership is needed to access company records. Without this information we cannot provide the relevant access. Company branding, optional integrations, AI requests and optional reminder emails are choices. Do not submit information about others unless your business is entitled to do so.

Who can see workspace information?

Your administrator controls membership and tool permissions. Check-ins and survey responses are identified and available to authorised workspace administrators; recognition is shared within the workspace. Development records have separate permissions. Platform administration and support access must be limited to authorised purposes.

Do not use the service for passwords, payment-card details, health records or other specially regulated sensitive information unless we have expressly agreed an appropriate arrangement in writing. Ordinary business discussion can still contain personal information: include only what is necessary.

Suppliers and integrations

Base44 provides the application platform, hosting, authentication and AI capabilities. Resend handles application emails where enabled. These suppliers may use subprocessors. Google or Microsoft may process sign-in information if you choose their authentication service. Authorised integrations exchange the data required for the chosen workflow with the relevant provider.

We may also disclose information to professional advisers or authorities where justified or required by law. Your business administrator may receive information needed to administer your account and workspace. Contact us for information about the suppliers relevant to your workspace.

AI assistance

When you request coaching or drafting, the submitted prompt and relevant permitted workspace context are sent through the AI service. Other AI tools may use the information you enter into that tool. Avoid including unnecessary personal or confidential material.

Outputs can be incomplete, inaccurate or biased. Review them before use. Founder Stack’s coaching and manager counts are not designed to make employment, credit or other legally significant decisions about individuals. Do not use them as the sole basis for such decisions.

International processing

Suppliers operate internationally, so information may be processed outside the United Kingdom, including in the United States. Applicable supplier arrangements must provide a lawful transfer mechanism, such as adequacy or approved contractual safeguards with the required UK provisions. Contact us to request information about the safeguards relevant to your data. No UK-only hosting promise is made.

How long information is kept

Workspace information is retained to provide the service under the customer’s instructions, subject to agreed deletion arrangements and legal obligations. Account and support information is assessed by reference to whether the account or enquiry remains active, operational necessity and any continuing dispute or legal requirement.

Security and delivery records should be kept only for a proportionate operational or evidential purpose. Backup copies can remain until the supplier’s backup cycle expires. Contact us about deletion or retrieval before closing a workspace. We do not promise immediate removal from every backup.

Some meeting drafts and account preferences are stored on your device. Browser storage can persist after a session; see the cookie and storage notice and take care on shared devices.

Your choices and rights

Depending on the processing and applicable law, you may request access, correction, erasure, restriction or portability of your information. You can withdraw consent where processing relies on it, without affecting earlier lawful processing. Rights are subject to applicable conditions and exceptions.

You have the right to object to processing based on legitimate interests and to direct marketing. Email hello@luxvibeweb.co.uk to raise an objection or request. Use the reminder settings to turn off optional reminder emails.

We may need to verify identity and clarify the scope of a request. For information controlled by your business, we will help identify the responsible organisation and assist it as appropriate. Please do not email passwords or unnecessary identity documents.

Complaints and changes

Contact hello@luxvibeweb.co.uk if you are concerned about how information is handled. You can also complain to the Information Commissioner’s Office at ico.org.uk. You do not have to contact us first to exercise that right.

We will date and version this notice when it changes and bring material changes to users’ attention where appropriate.