- Who we are
- Information we collect
- How we use information
- Legal bases (GDPR)
- How we share information
- Cookies & analytics
- Marketing communications
- Artificial intelligence
- Data retention
- Data security
- International transfers
- Your rights
- Client & financial data
- Children's privacy
- Third-party links
- Changes to this policy
- Contact us
FounderFirst Inc ("FounderFirst," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit founderfirstpartners.co (the "Site"), contact us, apply to work with us, or engage our fractional CFO services (together, the "Services").
1. Who we are
FounderFirst is a fractional CFO firm serving founder-led B2B companies. For the purposes of applicable data protection law, the data controller is FounderFirst Inc, 195 Plymouth Street, Brooklyn, NY 11201. You can reach us at team@founderfirstpartners.co.
2. Information we collect
Information you provide to us
- Contact and inquiry details you submit through forms, email, or our scheduling tool (name, email, company, role, and anything you choose to tell us).
- Application information when you apply to work with us (company stage, ARR range, and context about your finance function).
- Newsletter sign-up details if you subscribe to Tiny Margins.
- Engagement information you share once we work together, which may include financial statements, models, and other business records governed by your engagement agreement.
Information collected automatically
- Device and usage data such as IP address, browser type, operating system, pages viewed, referring URLs, and approximate location, collected through cookies set by our analytics provider (Google Analytics). Our email tools also record whether marketing emails are opened and which links are clicked.
Information from third parties
- Scheduling and calendar data from our booking provider when you book a call, and limited data from referrals or publicly available business sources (such as LinkedIn or company websites).
3. How we use your information
- Respond to inquiries and evaluate applications to work together.
- Provide, operate, and improve the Services and the Site.
- Send the newsletter and service-related communications you have requested.
- Send occasional marketing communications, event invitations, and service updates (see Marketing communications below).
- Measure the performance of our Site, content, and marketing.
- Maintain security, prevent fraud, and comply with legal, tax, accounting, and contractual obligations.
- Enforce our agreements and protect our rights.
4. Legal bases for processing (EEA/UK)
Where the GDPR or UK GDPR applies, we process personal data on the bases of your consent, performance of a contract, our legitimate interests in operating and growing the business, and compliance with legal obligations. You may withdraw consent at any time.
5. How we share information
We do not sell your personal information for money. We share it only:
- With service providers who process data on our behalf (for example, website hosting, scheduling, email, newsletter, CRM, document, and analytics providers) under appropriate confidentiality and data-processing terms.
- With professional advisors (legal, accounting, insurance) as needed.
- With our analytics provider. We use Google Analytics to understand how the Site is used; it sets cookies and processes usage data on our behalf. We do not use advertising pixels and do not share personal information with advertising platforms for targeted advertising.
- Where required by law, or to protect our rights, safety, and property.
- In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
6. Cookies & analytics
The Site uses Google Analytics 4 to understand how visitors use it (pages viewed, approximate location, device type). Google Analytics sets a small number of cookies for this measurement; we use the data in aggregate and do not use it to identify you. You can control or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout. Disabling cookies does not affect your ability to use the Site.
The Site sets no advertising cookies and does not share personal information with advertising platforms. Where a U.S. state privacy law treats any of our practices as “sharing,” we honor opt-out preference signals such as the Global Privacy Control (GPC).
Two integrations also process limited data: our pages load fonts from Google Fonts, which transmits your IP address to Google when a page loads, and scheduling runs on Calendly, which applies its own privacy terms when you book a call.
7. Marketing communications
We may send newsletters (including Tiny Margins), event invitations, and other promotional emails. You can opt out at any time by using the unsubscribe link in any marketing email or by emailing team@founderfirstpartners.co.
Even if you opt out of marketing, we may still send non-promotional messages, such as service-related, transactional, legal, or administrative communications.
8. Artificial intelligence
We may use AI-powered tools (such as transcription, drafting, or analysis assistants) to support our internal operations and service delivery, subject to confidentiality obligations.
We do not sell personal information to AI developers, and we do not use personal information to train large language models or other AI models. Where we use third-party AI tools, we use configurations designed so that client and personal information is not used for model training.
9. Data retention
We keep personal information only as long as necessary for the purposes described here, to comply with legal, tax, and accounting obligations, and to resolve disputes. Engagement records are retained per your engagement agreement and applicable professional standards.
10. Data security
We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International data transfers
We may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
12. Your privacy rights
Depending on where you live, you may have rights to:
- Access the personal information we hold about you and request a copy.
- Correct inaccurate information.
- Delete certain information.
- Port your data to another provider.
- Restrict or object to certain processing.
- Opt out of targeted advertising or the "sharing" of personal information, where applicable.
- Not be discriminated or retaliated against for exercising any of these rights.
California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "selling" or "sharing." We do not sell personal information, and we do not share it for cross-context behavioral advertising; our analytics provider processes usage data only as our service provider. Where required, we honor opt-out requests and applicable opt-out preference signals such as GPC.
To exercise any right, email team@founderfirstpartners.co. We may need to verify your identity before fulfilling a request, and we will respond as required by law. If we decline to act on your request and applicable law provides a right to appeal, you may appeal by replying to our response or emailing us with the subject line "Privacy Request Appeal."
13. Client and financial information
Financial and business information you share during an engagement is treated as confidential and handled under the terms of your engagement agreement and applicable confidentiality obligations, in addition to this policy. If there is a conflict between this policy and a written engagement agreement, the engagement agreement governs with respect to client confidential information.
Some engagement information may include personal information about your employees, contractors, customers, vendors, or investors. Clients are responsible for ensuring they have the right to share such information with us.
14. Children's privacy
The Site and Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18.
15. Third-party links
The Site may link to third-party sites and tools (for example, our scheduling provider and newsletter). Their privacy practices are governed by their own policies, not this one.
16. Changes to this policy
We may update this policy from time to time. The "Last updated" date reflects the latest version, and material changes will be posted on this page.
17. Contact us
Questions about this policy or your information? Email team@founderfirstpartners.co or submit a privacy request to:
FounderFirst195 Plymouth St.
Brooklyn, NY 11201