Found.ByAIAI Visibility

Privacy Policy

Last updated: 14 October 2026

1. Who we are

FoundByAI VOF is the data controller responsible for the processing of personal data as described in this privacy policy.

  • Company name: FoundByAI VOF
  • Chamber of Commerce (KvK): 42148136
  • VAT ID: NL869927358B01
  • Address: C.P. Tielestraat 23 B 02, 3023 TB Rotterdam, the Netherlands
  • Email: cas@foundbyai.nl
  • Website: foundbyai.nl

2. What data we collect

We process the following categories of personal data:

2.1 Account data

When you create an account for our client dashboard as a customer, we process your email address and any name or company name you provide. This data is used for authentication and access to the dashboard.

2.2 Usage data

When you visit our website, we collect limited technical data such as page views and session duration. We use this data to analyse and improve the functioning of the website.

2.3 AI platform data

To deliver our services, we query AI platforms such as ChatGPT, Gemini, Perplexity and Google AI Overview. The results of these queries do not contain personal data of our clients; they consist of aggregated visibility data about brands and source citations.

2.4 Contact data

When you contact us by email or through the contact form, we process the data you provide (name, email address, content of your message).

3. Why we collect this data

We process personal data for the following purposes:

  • Performing our contract with you (delivering AI visibility services and providing access to the client dashboard)
  • Managing your account and login credentials
  • Analysing and improving our website and services
  • Responding to your questions and requests
  • Complying with legal obligations

4. Legal basis

We process personal data on the following legal grounds under the GDPR:

  • Performance of a contract (Article 6(1)(b) GDPR): for delivering our services and providing access to the client dashboard.
  • Legitimate interest (Article 6(1)(f) GDPR): for analysing website usage and improving our services. Our interest in this processing outweighs the limited impact on your privacy, given the nature and scope of the data involved.
  • Consent (Article 6(1)(a) GDPR): when you give us consent for specific processing activities, for example to receive communications from us. You can withdraw your consent at any time.
  • Legal obligation (Article 6(1)(c) GDPR): when we are required to process data under applicable law, for example for our financial administration.

5. Data sharing

We never sell your personal data to third parties. We only share your data with the following parties, to the extent necessary for our services:

  • Netlify: our hosting provider for the website.
  • Supabase: our provider for authentication and database storage for the client dashboard.
  • AI platforms (OpenAI, Google, Perplexity): we query these platforms as part of our services. No personal data of clients is shared with these platforms in the process.

We enter into data processing agreements with all processors that handle personal data on our behalf, to ensure the protection of your data.

6. Cookies

Our website uses only functional and technically necessary cookies. These are session cookies and authentication cookies required for logging into the client dashboard. We do not place any tracking or marketing cookies.

7. Data retention

We do not retain your personal data longer than necessary for the purposes for which it was collected:

  • Account data: for the duration of the contract and up to 12 months after termination.
  • Contact data: up to 12 months after the last contact, unless a client relationship results from it.
  • Financial records: 7 years, in accordance with the statutory retention obligation under Dutch law.
  • Usage data: up to 26 months.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: you can request an overview of the data we process about you.
  • Right to rectification: you can request the correction of inaccurate data.
  • Right to erasure: you can request the deletion of your data.
  • Right to restriction of processing: you can request that we restrict the processing of your data.
  • Right to data portability: you can request to receive your data in a structured, commonly used and machine-readable format.
  • Right to object: you can object to the processing of your data based on legitimate interest.

To exercise your rights, please contact us at cas@foundbyai.nl. We will respond to your request within 30 days.

If you have a complaint about the processing of your personal data, you may file it with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). More information is available at autoriteitpersoonsgegevens.nl.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Access to the client dashboard is secured with HTTP Basic Authentication and is granted only to authorised users.

10. Changes

We reserve the right to amend this privacy policy. Changes will be published on this page with an updated date. We recommend that you review this privacy policy regularly.

11. Contact

For questions about this privacy policy or about the processing of your personal data, you can contact:

FoundByAI VOF
C.P. Tielestraat 23 B 02
3023 TB Rotterdam, the Netherlands
cas@foundbyai.nl