Privacy Policy
Last updated: January 31, 2026
This Privacy Policy explains how Sandbox Group LLC ("we," "us," or "our") collects, uses, and protects your information when you use Founders Pulse.
1. Information We Collect
Information from Connected Accounts
When you authorize integrations, we access the following data in read-only mode:
| Service | Data Accessed | Scope |
|---|---|---|
| Gmail | Email subjects, senders, snippets | gmail.readonly |
| Calendar | Event titles, times, attendees | calendar.readonly |
| Slack | Messages from channels and DMs | Read-only scopes |
| Notion | Page titles, content snippets | Read-only access |
| GitHub | Repositories, issues, notifications | read:user, repo:status |
| Plaid | Accounts, balances, transactions | Read operations only |
Authentication Information
When you sign in with email-based verification:
- Email Address: Used to send one-time verification codes
- Verification Codes: 6-digit codes stored as secure hashes (never in plaintext), expire after 10 minutes
- Rate Limiting Data: Attempt counts and timestamps to prevent abuse
We use Resend to deliver verification emails. Your email address is shared with Resend solely for authentication purposes.
Market Pulse Data
If you enable Market Pulse, we search public news sources for information about your configured company name, competitors, and industry keywords.
2. How We Use Your Information
Your data is used to:
- Generate Daily Briefs: AI analyzes your data to create actionable summaries
- Provide Meeting Prep: Context about upcoming meetings and attendees
- Surface Insights: Patterns and metrics from your connected services
- Track History: Store processed insights for trend analysis
3. AI Processing
We use Anthropic's Claude models to:
- Extract structured information from your data
- Generate natural language summaries
- Classify confidence levels (HIGH, MEDIUM, LOW)
- Identify action items and priorities
Data sent to Anthropic is processed according to their Privacy Policy and API data usage policies.
4. Data Storage and Security
- OAuth Tokens: Encrypted and stored securely in our database
- Processed Insights: Stored to provide historical context and trends
- Infrastructure: Hosted on dedicated cloud infrastructure (DigitalOcean) with a managed PostgreSQL database (Neon)
We implement industry-standard security measures to protect your data.
5. Data Retention
- Brief Items: Retained until dismissed or account deletion
- OAuth Tokens: Retained until you disconnect the integration
- Market Pulse Items: Retained for trend analysis until dismissed
- Authentication Codes: Automatically deleted after verification or expiration (10 minutes)
6. Data Sharing
We do not sell your personal information. We share data only with:
- Anthropic: For AI processing of your briefs, insights, and Market Pulse news search
- Resend: For delivering email verification codes (email address only)
- Plaid: For secure bank account linking and read-only financial data access
7. Google API Services & Limited Use
Founders Pulse accesses Gmail and Google Calendar data through Google APIs using read-only scopes, solely to generate the daily briefs, insights, and meeting context you see in the app.
Founders Pulse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google user data is used only to provide user-facing features visible in your own account — never for advertising, and never sold.
- Email and calendar content is shared with our AI provider (Anthropic) only as necessary to generate your own summaries and insights; it is not used to train generalized AI or machine-learning models.
- Humans do not read this data except with your explicit consent, for security purposes, to comply with law, or in aggregated, anonymized form for internal operations.
8. Your Rights
You have the right to:
- Disconnect: Revoke access to any connected account at any time
- Delete: Request deletion of your stored data
- Access: Request a copy of your stored data
- Opt-out: Disable Market Pulse or specific integrations
9. Children's Privacy
Founders Pulse is not intended for users under 18 years of age. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through the app or email.
11. Contact Us
For privacy-related questions or requests:
Sandbox Group LLC
Email: admin@founders-pulse.app
