Founder OS Privacy Policy

This policy applies to Founder OS and its provider integrations operated by Virzy Guns Production, operated by Virzy Guns. It covers information processed in the workspace and does not replace a provider's own privacy policy or a product-specific notice for another Virzy Guns service.

Depending on the connection and features you use, Founder OS may process:

• Provider account ID, display name, username, account type, profile URL, connection status, granted scopes or capabilities, and verification timestamps.
• OAuth state and PKCE metadata used to protect an authorization flow, together with access and refresh tokens needed for an authorized connection.
• Drafts, captions, media references, workspace settings, approval records and content hashes, action results, provider references, and failure or reconciliation records.
• Provider analytics and webhook or inbound interaction data that Founder OS actually receives and processes for the connected features.
• Audit, security, error, and operational records used to investigate activity and maintain the service.
• Public profile or public-content signals requested for internal prospect research.

Access and refresh tokens are stored server-side in a credential record encrypted with AES-256-GCM. This statement describes the credential record; it does not mean that every database field or every stored item is encrypted with that method.

Founder OS uses provider and workspace information to establish and verify connections, display analytics, support research and drafting, execute actions that have received the required approval, protect the service, maintain audit and compliance records, reconcile provider results, and investigate errors. Connecting an account does not by itself cause an automatic post, email, or direct message.

External or publishable actions retain a draft, exact-content approval, and an approval-gated execution step. Cold direct messages are blocked and outreach suggestions remain manual-only. Founder OS shares information with a provider only as needed for a requested, authorized feature or action, and with infrastructure or service providers that support hosting, storage, security, or delivery.

TikTok, Meta, and other providers operate independently and apply their own terms, API requirements, review processes, and privacy practices. Founder OS does not control those provider policies or the information a provider separately collects.

Reasonable safeguards are used for credentials and operational access. Security, audit, error, approval, and reconciliation records may be retained when reasonably needed to protect the service, investigate activity, resolve disputes, meet legal obligations, or demonstrate compliance. No security method or transmission channel can be guaranteed completely secure.

When you disconnect a provider connection, Founder OS requests provider revocation when supported, deletes the encrypted credential row, marks the grants and connection as revoked, and records the event in the audit history. Revocation stops subsequent access through that connection, but it does not automatically delete drafts, approvals, analytics, or audit history that are retained for operational or compliance purposes.

Verified access, correction, or deletion requests may be sent to founder@virzyguns.com. We may verify the requester and the relevant connection before acting. This policy does not promise a fixed retention period or deletion deadline.

Founder OS and its infrastructure or provider partners may process information in countries other than yours, subject to applicable safeguards and law. Founder OS is a business tool and is not directed to children. Provider availability, capabilities, and data handling can change independently of this workspace.

This policy may be updated when Founder OS, an integration, or applicable requirements change. Material updates will be posted on this page with a revised effective date.