Privacy Policy

1. Scope and controller

This Privacy Policy applies to mountfounder.ai, mountfounder.com, mountfounder.co, and related applications, AI tools, digital products, communities, educational programs, consulting, coaching, marketing campaign buildouts, and other done-for-you services that link to this Policy (collectively, the “Services”).

Soul Temple Coaching FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, is the controller responsible for personal data covered by this Policy, unless an offer-specific notice identifies another role or controller. In some professional engagements, we may process personal data on a customer’s instructions; the applicable agreement will govern that processing.

2. Personal data we collect

The information we collect depends on how you interact with the Services and may include:

• Identity and contact data: name, email address, postal address, telephone number, company, role, country, and account identifiers.
• Account and profile data: login credentials, profile details, preferences, plan, entitlements, and account settings.
• Transaction data: products purchased, order status, billing address, tax details, payment status, refunds, and related records. Payment providers process full card or bank details; we generally receive only limited payment references and status information.
• User Content: prompts, instructions, documents, files, images, campaign assets, business information, course work, community posts, messages, feedback, and other material you submit.
• Professional-services data: business goals, operations, audiences, offers, marketing accounts, performance data, credentials or permissions you choose to provide, meeting recordings or notes where disclosed, and project deliverables.
• Usage and device data: IP address, browser and device type, operating system, identifiers, referring pages, pages and features used, clicks, timestamps, approximate location derived from IP, diagnostics, crash records, and security logs.
• Communications: support requests, survey responses, sales communications, call or meeting details, and records of your consent and communication preferences.
• Marketing data: campaign interactions, attribution information, event attendance, lead source, and interests or segments inferred from your activity.

Please do not provide sensitive personal data—such as health, biometric, government identification, financial-account, or highly confidential third-party information—unless it is necessary for a feature or engagement that expressly supports it and appropriate protections have been agreed.

3. How we collect data

We collect personal data directly from you when you create an account, join a waitlist, make a purchase, use a tool, attend a program, participate in a community, request support, or work with us. We also collect data automatically through cookies, logs, pixels, software development kits, and similar technologies.

We may receive data from payment processors, authentication providers, advertising and analytics partners, referral partners, publicly available sources, and third-party platforms you connect or authorize. If a business customer gives us data about another person, that customer is responsible for having a lawful basis and providing any required notice.

4. How and why we use personal data

We use personal data for the following purposes and, where applicable, legal bases:

• Provide and perform the Services: create accounts, process orders, deliver products, personalize features, provide consulting or coaching, build campaigns, administer communities, and respond to support. We do this to perform our contract with you or take steps at your request before entering one.
• Operate and improve: monitor performance, troubleshoot, conduct research, develop features, understand use, and improve content and customer experience. We rely on legitimate interests in operating and improving our business, or consent where required.
• Security and integrity: authenticate users, prevent fraud and abuse, enforce terms, protect users and systems, and investigate incidents. We rely on contractual necessity, legal obligations, and legitimate interests in keeping the Services secure.
• Communicate: send service notices, order information, support messages, policy updates, and responses. We do this to perform our contract and administer our relationship.
• Market: send newsletters and offers, measure campaigns, build audiences, and personalize marketing, subject to your choices and any consent required by law.
• Comply with law: maintain financial and tax records, answer lawful requests, exercise or defend legal claims, and meet regulatory obligations.
• Business operations: manage suppliers, forecasting, reporting, corporate transactions, and professional advice based on our legitimate interests and legal obligations.

Where we rely on legitimate interests, we consider whether those interests are proportionate and balanced against your rights. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.

5. AI-enabled features

When you use an AI-enabled feature, we process your prompts, uploads, instructions, generated output, and associated technical data to provide that feature, maintain safety, diagnose problems, and improve the Services. We may send relevant content to contracted AI model, hosting, moderation, or infrastructure providers acting for us or as separately disclosed.

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects about you unless we provide a specific notice, a lawful basis, and any rights required by applicable law. Product settings or notices may give you additional choices about whether content is used to improve a particular feature.

Do not enter another person’s personal data into an AI feature unless you are authorized to do so. AI output may reproduce or infer personal information inaccurately; review it before relying on, sharing, or publishing it.

6. Cookies, analytics, and advertising

We and our partners may use cookies, local storage, pixels, and similar technologies to remember settings, keep accounts secure, understand performance, measure campaigns, and—where enabled—provide or measure interest-based advertising. Some technologies are necessary for the Services to function; others are optional.

Where required, we request consent before using non-essential technologies. You can manage available choices through any cookie controls we provide and through your browser or device settings. Blocking some technologies may affect functionality. Browser “do not track” signals are not interpreted consistently; where legally required and technically supported, we honor recognized opt-out preference signals.

7. How we disclose personal data

We do not sell personal data for money. We may disclose data as reasonably necessary to:

• hosting, cloud, security, authentication, database, communications, customer-support, analytics, AI, payment, accounting, and other providers that help us operate;
• advertising, attribution, and marketing partners, subject to applicable consent and opt-out rights;
• consultants, coaches, contractors, and professional advisers who support a program or engagement and are bound by appropriate obligations;
• third-party platforms or integrations you direct us to connect with;
• courts, regulators, tax authorities, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, and security; and
• a prospective or actual buyer, investor, lender, or successor in connection with a merger, financing, reorganization, insolvency, or sale of all or part of our business, subject to appropriate confidentiality protections.

Providers are authorized to process data only for the relevant services and under contractual, confidentiality, and security obligations appropriate to their role.

8. International data transfers

We serve customers worldwide and operate from the United Arab Emirates. Your personal data may be processed in the UAE and in other countries where our providers, contractors, or customers operate. Those countries may have privacy laws different from those in your country.

Where cross-border transfers require safeguards, we use legally recognized mechanisms appropriate to the transfer, such as adequacy decisions, approved contractual clauses, contractual protections, or another lawful basis. You may contact us for information about safeguards relevant to your data.

9. Retention and security

We retain personal data only as long as reasonably necessary for the purposes described in this Policy, including to provide access, maintain transaction and tax records, resolve disputes, enforce agreements, preserve security logs, and meet legal obligations. Retention periods depend on the type and sensitivity of data, the product lifecycle, legal requirements, and whether deletion would impair legitimate interests or the rights of others. We then delete or anonymize the data where feasible.

We use administrative, organizational, and technical measures designed to protect personal data against unauthorized access, alteration, loss, misuse, or disclosure. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. You are responsible for using a strong, unique password and protecting your devices and credentials.

10. Your privacy rights

Depending on where you live and subject to legal conditions and exceptions, you may have the right to:

• know whether and how we process your personal data and obtain access to it;
• correct incomplete or inaccurate data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable format;
• withdraw consent at any time;
• opt out of certain targeted advertising, sharing, or sales as those terms are defined by applicable law; and
• complain to the competent privacy or data-protection authority in your place of residence or work.

To exercise a right, email support@mountfounder.ai and describe your request. We may verify your identity and authority, ask for clarification, or retain limited information needed to document the request. You may use an authorized agent where local law permits. We will not discriminate against you for exercising a privacy right.

These rights are not absolute. We may decline or limit a request where permitted—for example, to protect another person, preserve legal claims, comply with law, or where we cannot verify the requester. We will explain our decision and any available appeal right.

11. Marketing choices

You may unsubscribe from marketing emails using the link in the message or by contacting us. You may still receive transactional and service communications, such as receipts, security alerts, access notices, and important policy changes. Cookie and advertising choices can be managed as described above.

12. Children

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

13. Third-party links and changes

The Services may link to third-party sites or platforms. Their privacy practices are governed by their own notices, not this Policy. Review those notices before providing information.

We may update this Policy to reflect changes in our Services, technology, law, or practices. We will post the revised Policy and update the date above. We will provide additional notice or seek consent if required for a material change.

14. Contact us

For privacy questions, rights requests, or concerns about our handling of personal data, contact:

If you are not satisfied with our response, you may contact the privacy or data-protection authority with jurisdiction over your complaint.