Privacy Policy

1. Who Operates Founder OS

Founder OS is a private, internal startup workspace operated by its founding team under the VelOros brand.

VelOros is an early-stage startup collaboration and is currently not a registered company, Limited Liability Partnership (LLP), or incorporated legal entity. We do not have a registered corporate address, company registration number, or statutory legal representative. Founder OS is maintained solely for internal planning, coordination, and operations among its three founders. This policy is effective as of October 9, 2026, subject to formal mutual adoption by the founding team.

For any privacy inquiries or questions regarding this policy, you can contact the founders directly at veloros26@gmail.com.

2. Information We Handle

We believe in data minimization. Founder OS is designed to record and process only the information necessary for day-to-day startup operations. The categories of information handled in the application are limited to:

Founder OS does not collect payment card numbers, bank account numbers, biometric data, or consumer personal profiles. Operational vendor subscription costs and account identifiers are entered solely for internal budgeting.

3. How We Use and Share Information

Information stored in Founder OS is used exclusively for:

• Internal task coordination, strategic planning, and operational management among the three founders.
• Tracking ongoing client engagements, deliverables, and service commitments.
• Managing subscriptions, vendor renewals, and operational resources.
• Authenticating the founders and safeguarding workspace security.

We do not sell, rent, monetize, or distribute workspace data to advertisers, data brokers, or commercial marketing entities. We do not use this data for behavioral tracking, profiling, or automated decision-making.

Information is shared only with our infrastructure service provider, Supabase, which hosts our database, authentication engine, and object storage as strictly necessary to operate the application.

4. Infrastructure and Data Security

Founder OS relies on the following infrastructure:

• Supabase Cloud: Provides our PostgreSQL relational database, authentication services, and private object storage (for founder avatar photos). Communications between the application and Supabase use HTTPS/TLS encryption in transit, and Supabase maintains volume-level encryption at rest on its cloud storage infrastructure.
• Application Server Runtime: Next.js server runtime executes API Route Handlers and verifies authenticated sessions using cookies containing signed tokens transmitted over secure connections.

The workspace is deployed for internal access only. Production hosting details are maintained by the founders and are not distributed to the public.

5. Access and Security

Founder OS is an internal system with strict access controls:

• Closed Access: Public registration is disabled. Only the three recognized founder accounts can log in.
• Row Level Security (RLS): Database tables enforce PostgreSQL Row Level Security policies, ensuring only authenticated founders can query workspace data.
• Profile Ownership: Founders can only modify their own profile details; individual profile fields cannot be altered by another user.
• Private Storage: Avatar images are stored in a private storage bucket and require signed, short-lived URLs to view.

6. Retention, Access, Correction, and Deletion

Data is maintained for as long as needed to support ongoing startup initiatives and client operations.

Any founder or individual whose contact details appear in Founder OS may request access, correction, or deletion of their personal information by sending an email to veloros26@gmail.com.

Operational Note: As an early-stage startup workspace, automated self-service data deletion or statutory deletion workflows are not currently implemented. All deletion and retention requests are handled directly and manually by the founding team. A formal data retention schedule will be adopted upon incorporation.

7. Policy Updates

We may update this Privacy Policy as our workspace features develop or as VelOros transitions into a formalized legal structure. Any revisions will be posted directly on this page with an updated effective date.