FounderWorld by Nuovus

Opening your FounderWorld account…

FounderWorld by Nuovus

Privacy

FounderWorld privacy notice

Last updated 10 October 2026

Who is responsible

FounderWorld is a product by Nuovus. Nuovus is responsible for the personal information processed through the service. Contact us at contact@nuovus.ai.

Information we use

We process your account email, selected roles, profile details, profile media, contact-card settings, and records needed to create and manage connections. We also process security and operational data needed to protect and run the service.

If you join the waitlist, we process your email, selected role, and any name, company, or intended use you choose to provide. We also record the request IP address, country code, browser user agent, locale, and time zone to operate and protect the waitlist.

If you contact us through the site, we process your name, email address, message, and any company link you provide. We also record the request IP address, country code, browser user agent, locale, and time zone to operate and protect the contact form.

Business-card scanning starts the camera, captures a steady card and reads it automatically. Uploading a photo also starts reading. Reading starts on your device when available, with online processing if needed to suggest contact details. Camera preview frames are checked only on your device. You can stop scanning, use manual entry, and review and change every detail before saving. Only reviewed details and an approved company-logo crop enter your private Network; scanning does not publish them. Manual entry remains available.

Public-site analytics use a random page-scoped identifier without cookies. We keep first-touch attribution and an internal testing marker in session storage for the lifetime of your browser tab; the analytics identifier is not stored there. On public marketing and waitlist pages, we record the landing path, standard UTM campaign parameters, the external referrer domain, and a broad acquisition channel so we can understand how people found FounderWorld without retaining the referring page URL. We do not use that attribution to identify returning visitors across tabs or devices. We also send the browser user agent and an estimated country to PostHog. Your browser contacts Country.is to estimate your country from its IP address. We discard the IP returned by that service and do not send visitor IP addresses to PostHog. If you join the waitlist, we save the first-touch attribution with your entry. We do not use the page-scoped identifier to create a person profile, emit analytics from localhost, or send your email, profile content, URL hash, IP address, exception text, or stack traces with those analytics captures. We do not collect campaign or referrer data inside authenticated, callback, profile, connection, or request routes.

Signed-in product reporting counts saves, searches and other confirmed activity without sending names, queries or Contact contents as usage events. On our backend, we analyse allowlisted connection reasons, notes, introductions, work descriptions and current asks with local PII redaction and fixed English topic rules. This covers all members. We retain only predefined aggregate counts and daily observations for 12 calendar months; no raw or redacted passages are retained in reporting. Text categories with fewer than five contributing owners or profiles, and revealing complements, are withheld. Authorised admins can view and export these protected aggregate reports. Redaction has limits; it does not itself guarantee anonymity. Your private Network contents remain owner-only in the app.

Why we use it

  • Create and secure your account.
  • Manage the FounderWorld waitlist and contact you about access.
  • Receive and reply to messages you send through the contact form.
  • Build and share the role profiles you choose.
  • Create and maintain connections you request or accept.
  • Diagnose failures and improve the service.

We rely on contract where processing is needed to provide your account, and on legitimate interests for service security, reliability, and limited product analysis. Where consent is required, we will ask before processing.

Who processes it

We use service providers for authentication, data storage, abuse prevention, email delivery, hosting, and privacy-restricted analytics. Current providers include Supabase, Cloudflare, Country.is, PostHog, and Resend. We do not sell personal information.

Online business-card reading uses OpenRouter and a compatible model processor. We request processing without training or data collection, through endpoints that support zero data retention. Online reading is unavailable when those requirements cannot be met. Limited safety or legally required retention may still apply under the processor's terms.

Providers may process information outside the UK. Where required, we use recognised transfer safeguards and contractual protections.

How long we keep it

Original business-card photos remain only in the current scanning session and are discarded after review or closing. FounderWorld does not store them in your Network or include their contents in usage events. Reviewed contact details and the approved logo follow your private Network records' retention and deletion rules.

We keep account information while your account is active. If you ask us to delete your account, we delete or anonymise its information unless we need a limited record for security, dispute, or legal reasons.

Account deletion permanently removes your live account, Network, profiles, uploaded media, invite access and sharing intents. Other owners keep their independently saved details and private notes as unlinked people. A private receipt containing account and operation IDs, a hashed retry secret, status and timestamps remains so interrupted deletion can finish. Deletion receipts have no automatic expiry.

As checked on 6 October 2026, no database backups are available for account recovery, point-in-time recovery is disabled, and there are no separate database or storage backups. There is no recovery period after account deletion.

We keep a waitlist submission, including its request IP address, until we no longer need the waitlist or you ask us to delete it. Deleting a waitlist submission removes the whole record.

We keep a contact submission, including its request metadata and email-send record, until we manually delete the whole row, including when we no longer need it or you ask us to delete it. The send record shows whether Resend accepted our notification request; it does not confirm inbox delivery.

Your rights

Depending on the circumstances, you can ask to access, correct, delete, restrict, or receive a copy of your information, and you can object to some processing. You can also complain to the UK Information Commissioner's Office.

Send a request to contact@nuovus.ai. We may need to verify your identity before acting on it.