Privacy Policy

Found Revenue ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with our website at foundrevenue.co and our AI automation services. We operate out of Kelowna, British Columbia, Canada.

This policy is written in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

1. What Personal Information We Collect

We collect personal information in the following categories:

2. Why We Collect It

We collect personal information for the following purposes:

• To set up, configure, and deliver the automation services you have purchased
• To process payments and manage your subscription via Stripe
• To communicate with you about your account, service updates, and support requests
• To conduct outreach campaigns (calls, emails, SMS) on your behalf to your customers and prospects
• To monitor, maintain, and improve the quality and performance of our platform
• To comply with legal and regulatory obligations under Canadian law

We collect only the information that is reasonably necessary to fulfil these purposes. We do not sell your personal information to third parties.

3. How We Use Your Information

• Service Delivery: Your business information and contact lists are used to configure and run your automation workflows.
• Billing: Your payment information is passed to Stripe to process setup fees and monthly subscription charges.
• Automated Outreach: Contact information from your provided lists is used to send calls, emails, and SMS messages on your behalf, per your campaign instructions.
• Analytics & Improvement: Aggregated and anonymized usage data helps us improve our platform and services. We do not use individual personal data for profiling or advertising.
• Legal Compliance: We may use or disclose information as required by applicable law, court order, or government authority.

4. Who We Share Your Information With

We share personal information only with trusted third-party service providers ("processors") that are necessary to operate our platform. Each processor receives only the data needed to perform their function.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

5. Call Recordings

All calls placed or received through the Found Revenue AI voice agent platform are recorded by Retell AI for quality assurance, compliance monitoring, and service improvement purposes. Call recordings may also be made available to you through your client dashboard for review.

Where required by applicable Canadian law (including CRTC regulations), parties receiving calls from our AI voice agents are notified at the start of the call that the conversation is being handled by an automated system. Consent to recording is obtained in accordance with applicable law.

Call recordings are retained for 90 days from the date of the call, after which they are permanently deleted.

6. Data Retention

• Active subscription data (account information, workflow configurations, campaign data) is retained for the duration of your subscription plus 2 years afterward, to comply with legal and business record-keeping requirements.
• Call recordings are retained for 90 days and then permanently deleted.
• Payment records are retained for 7 years as required by Canadian tax and financial regulations.
• Usage logs are retained for up to 12 months for security monitoring and service improvement.

After applicable retention periods, personal information is securely deleted or anonymized.

7. Your Rights Under PIPEDA & BC PIPA

Under Canadian privacy law, you have the following rights regarding your personal information:

• Right of Access: You may request access to the personal information we hold about you. We will respond within 30 days.
• Right to Correction: If your personal information is inaccurate or incomplete, you may request a correction.
• Withdrawal of Consent: You may withdraw consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Note that withdrawal of consent may affect our ability to provide services to you.
• Right to Complain: If you believe we have not handled your personal information appropriately, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca, or the Office of the Information and Privacy Commissioner for BC (OIPC) at oipc.bc.ca.

To exercise any of these rights, contact us at ayden.t@foundrevenue.co.

8. CASL Compliance

When Found Revenue sends commercial electronic messages (emails, SMS, automated voice calls) on your behalf, we do so in a manner designed to comply with Canada's Anti-Spam Legislation (CASL). This includes:

• Including your business name and contact information in all outgoing messages
• Providing a functional unsubscribe mechanism in every commercial electronic message
• Honoring all unsubscribe requests within 10 business days of receipt
• Maintaining suppression lists to prevent re-contacting opted-out individuals

You are responsible for ensuring that the contact lists you provide have the required express or implied consent under CASL. Found Revenue is not liable for CASL violations resulting from non-consensual contact data you supply.

9. Security

We implement reasonable and appropriate technical and organizational safeguards to protect your personal information against unauthorized access, loss, alteration, or disclosure:

• TLS Encryption: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
• Access Controls: Access to personal data is restricted to authorized Found Revenue personnel and service providers on a need-to-know basis.
• PCI Compliance: Payment card data is handled exclusively by Stripe, which maintains PCI-DSS Level 1 certification — the highest level of payment security certification.
• Secure Infrastructure: Our platform is hosted on Vercel with industry-standard security configurations.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. Cross-Border Data Transfers

Found Revenue is based in British Columbia, Canada. However, some of our service providers (including Stripe, Twilio, Retell AI, Resend, Upstash, n8n, Vercel, and Anthropic) may process your data on servers located in the United States or other countries.

When data is transferred outside Canada, it may be subject to the laws of the country where it is processed, including access by foreign government authorities. We mitigate this risk by selecting processors with strong privacy commitments and appropriate data processing agreements in place. By using our services, you consent to these cross-border transfers as described herein.

11. Cookies

Our website uses cookies to ensure proper functionality and improve your experience. For full details on what cookies we use and how to control them, please see our Cookie Policy.

12. Children's Privacy

Found Revenue's services are intended solely for businesses and individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at ayden.t@foundrevenue.co and we will promptly delete such information.

13. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (at the address on file) and update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of our services after an updated Privacy Policy has been posted constitutes your acceptance of those changes.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact: