Last updated October 7, 2026
Privacy policy
Who we are and how to reach us
Underground Founder provides guided business-direction assessments at undergroundfounder.com. This policy explains how we handle information when you use the website, generate a report, save progress, or contact us. For privacy questions or requests, email info@undergroundfounder.com.
Information you choose to provide
Assessment answers may describe your upbringing, work history, accomplishments, interests, motivations, financial constraints, customer access, and business preferences. Personal experiences are optional. Please do not provide Social Security numbers, card details, medical diagnoses, precise location information, passwords in assessment answers, or confidential information about an employer, customer, or another person. You may describe sensitive experiences in general terms or skip optional questions.
Report generation and AI processing
Unsaved answers are held in the current page memory. Refreshing or leaving the page may lose them. When you generate a preview or full report, the selected answers are transmitted to our server and OpenAI to create your result. Full reports can use web search for market context; related search queries may be processed by the AI provider and its search services. We do not use your answers to train our own AI models or submit them for model training. Our requests use OpenAI’s store:false setting; this is not a guarantee of zero provider retention. Provider processing, security logs, and retention are subject to the provider’s applicable terms and policies. For a full assessment, we securely store your completed answers and generated report in our database before checkout. We store a random report identifier, hashed browser-access token, checkout reference, generation status, payment status, Stripe Checkout Session identifier, and timestamps. If you save report access with your assessment login, we also link the report to that saved account. We release the full report to your browser only after verifying a signed payment confirmation from Stripe. Preview results are returned to your browser without being stored by this feature. Download the full report PDF after purchase to keep your own copy.
Optional saved progress
If you choose Save and finish later, we store your email, assessment answers, question position, update time, and authentication data in our database. Passwords are stored as salted hashes, rather than plain text. A session token is hashed in the database and a session cookie is used to keep you signed in for up to 30 days. Saving is manual; later edits require another save. Session expiration does not delete saved answers. Saved progress currently has no automatic deletion schedule and remains until deleted following a verified request or operational cleanup.
Technical information and cookies
Our hosting and infrastructure providers process technical information such as IP addresses, browser and device information, request times, and security or error logs to deliver and protect the site. Our application stores a salted, hashed network fingerprint and request count to limit repeated report requests. Entries older than approximately two days are removed when the rate-limit cleanup runs. The application uses a necessary sign-in cookie for saved progress and a separate, HttpOnly report-access cookie so you can return to a completed report in the same browser for up to one year. Saving report access with your assessment login supports access from other devices. We use first-party analytics to understand visits, assessment starts and valid submissions, checkout-link opens, and verified purchases. We store a random browser identifier in a first-party cookie for up to 90 days and a visit identifier for 30 minutes. Analytics records contain timestamps, a generalized landing-page path, referring website domain or campaign source, medium and campaign label, and event type. They do not contain assessment answers, email addresses, full referring URLs, card details or raw IP addresses. A completed full assessment is linked to its visit for purchase attribution. Analytics records remain until operational cleanup or a verified deletion request; there is currently no automatic deletion schedule. We honor Global Privacy Control and Do Not Track signals, and you can turn analytics off for this browser below. We do not include advertising pixels or third-party marketing analytics. Blocking cookies may prevent saved-progress sign-in from working.
How information is used and shared
We use information to provide assessments and reports, save and resume progress, respond to requests, troubleshoot failures, and prevent misuse. Service providers, including OpenAI for generation and Cloudflare and the hosting platform for infrastructure, process information as necessary to provide their services. If you contact us by email, your message and contact details are handled through our email service. We may disclose information when legally required, to investigate fraud or security incidents, to protect lawful rights, or in connection with a business transfer subject to applicable protections. We do not sell assessment answers or use them for targeted advertising. We do not publish your answers or report as a testimonial without your permission.
Retention, security, and international processing
We retain information for the purposes described above and as needed for legitimate security, support, dispute-resolution, or legal obligations. Provider logs and backup copies may follow separate retention schedules. We use measures such as password hashing, restricted database access, and secure session cookies on HTTPS, but no website or transmission is completely secure. Our providers may process data in the United States or other countries where their infrastructure operates. Privacy laws may differ from those where you live.
Your choices and privacy requests
You can use the assessment without saving, skip optional questions, and choose how much personal detail to share. To request access to, correction of, a copy of, or deletion of saved information, email info@undergroundfounder.com using the address associated with your saved progress. We may reasonably verify your identity before acting; never email your password. Depending on your location and applicable law, you may have additional rights concerning personal data, including portability and opting out of certain processing. We will respond within applicable legal deadlines and explain any lawful exception. If we decline a request, you may appeal by emailing the same address with “Privacy appeal” in the subject. Where available, you may also contact your state privacy regulator or attorney general. Our current application does not conduct sale or targeted-advertising activities requiring an opt-out. Deletion may not immediately remove provider backups or records retained for legal obligations.
Payments, children, and external websites
The short preview is free. Payment for a full report is processed on Stripe-hosted checkout after questionnaire completion. Stripe collects and processes payment details, billing information, and technical transaction information under its own privacy policy. Card numbers and Apple Pay credentials are not received or stored by our application. We receive verified payment status, a checkout reference, a Stripe session identifier, and transaction timestamps to unlock the correct report. Completed assessments, generated reports, and payment records have no automatic deletion schedule and remain until a verified deletion request or operational cleanup, subject to records we must retain for legitimate support, fraud prevention, dispute resolution, or legal obligations. The service is intended for adults aged 18 or older and is not directed to children. Contact us if you believe a child has submitted personal information. Links to report sources or other third-party sites are governed by those sites’ own policies.
Changes to this policy
We may update this policy as the service changes. The date above identifies the latest revision. Where applicable law requires notice or consent for a material change, we will provide it before applying that change. This policy does not waive your legal privacy or consumer rights.
Choose whether this browser participates in first-party website analytics.