Privacy policy
Who provides this extension
FounderScore provides this Chrome extension. Privacy and support contact: vitaliya.kirienko@gmail.com. This policy covers extension version 0.1.1 and its project-review service, separately from the marketing website and Telegram bot.
What you choose to share
We process the project title and text you enter, or a PDF, PPTX or TXT file you select and submit. Materials may contain names, contact details, business figures and other information you include. Submit only materials you are authorised to share. The service extracts text from the file for analysis; it does not use your files to train its own model or for advertising.
What stays in your browser
Chrome storage holds a random access token, your chosen language, the last opened report identifier and your unsent text draft. A draft is cleared after the server accepts the submission. The extension does not save the selected file in Chrome storage. It does not read your browsing history, other tabs, email, contacts or clipboard. No advertising or marketing analytics are included in the extension or this policy page.
How the review is produced
When you submit with consent, your material is sent over HTTPS to the FounderScore API. The server and a processing worker handle extracted text and the generated report. Text is sent to OpenRouter and the model provider used for that request. The report is based on your materials; there is no independent web research. The result identifies the provider/model when supplied by the provider. Automated conclusions can be wrong and are not investment advice.
Service providers and international processing
We use Railway for the API and report storage, and a separately hosted FounderScore worker for processing. The current API deployment is in the United States; processing can take place outside your country. OpenRouter routes model requests to its providers. Provider handling and retention depend on the selected endpoint and applicable terms: OpenRouter privacy policy, provider data policies and Railway privacy policy. We do not promise that deleting a FounderScore report deletes operational or legally required records held independently by those providers. We do not sell submitted data.
History and retention
FounderScore stores submitted text, titles, job status and reports to provide your History. The access session lasts 180 days from creation. Expired session materials are removed when server cleanup next runs on startup or new session issuance; expiration is not a guarantee of deletion at that exact second. Temporary worker files are removed when processing finishes or fails. Aggregated provider usage and cost counters do not include project text or session identifiers and may be retained for service accounting.
Network limits and technical logs
To limit abuse, the server derives a daily keyed identifier from your connection address: IPv4 or an IPv6 /64 network. The quota ledger stores counts, not raw IP addresses or project text. It survives deletion of the review session until cleanup on the next quota request after the UTC day changes. People on the same network share limits. Hosting and network providers can separately process IP addresses, request times, paths and error information in technical logs, subject to their retention policies. This is not a browsing-history collection feature.
Deleting data and keeping access
Use “Delete my data” in the extension to revoke its session and remove associated text, queued jobs and reports from active FounderScore storage. A late processing result cannot restore a deleted report. Uninstalling the extension alone does not send a server deletion request. Clearing browser storage or uninstalling loses the local token; this version has no cross-device account recovery. Download reports you wish to keep before removing access. If you contact support for access, correction or deletion, do not send passwords or your session token; we will explain what proof is needed and cannot disclose reports without verifying ownership.
Your choices and policy changes
You can read this policy before submitting, decline to send materials, and use deletion at any time. Where applicable, you may request access, correction, deletion or restriction and contact your local data-protection authority. Use the privacy contact above. Changes to handling will be described here with an updated date; this page does not replace any consent required for a new use.