Founder Favors - Give-First Community for Founders

Last updated: February 2026

1. Introduction

SweetWater Holding UG (haftungsbeschränkt) (“we”, “us”, “our”) operates Founder Favors (“the Service”). We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

2. Data Controller

SweetWater Holding UG (haftungsbeschränkt)
Bunsenstrasse 1, 22765 Hamburg, Germany
Email: info@founder-favors.com

3. Information We Collect

Information you provide

Account information (name, email address, password), profile details, content you create such as give cards, asks, and messages, and any communications with our support team.

Information collected automatically

Usage data, device information, IP address, access times, pages viewed, and referring URLs.

Analytics

We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies, does not collect personal data, and is fully GDPR-compliant. No consent is required for Plausible Analytics.

4. Legal Basis for Processing (GDPR Art. 6)

Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service and manage your account.
Legitimate interests (Art. 6(1)(f)): Improving the Service, fraud prevention, and ensuring platform security.
Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities.
Legal obligation (Art. 6(1)(c)): Compliance with applicable laws, such as tax retention requirements.

5. How We Use Your Information

We use your information to provide, maintain, and improve the Service; facilitate connections and matches between founders; process transactions; provide customer support; analyse usage trends; prevent fraud; and personalise your experience.

6. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the operation of the Service and cannot be disabled. We do not use advertising or tracking cookies.

7. Data Sharing

We do not sell your personal information. Your profile information may be shared with other community members to facilitate matches and connections. We may share data with the following service providers who assist in operating our platform:

Firebase (authentication and infrastructure)
OpenRouter (AI processing)
Plausible Analytics (privacy-friendly analytics)

We may also disclose information where required by law or in connection with legal proceedings, or in the event of a business transfer.

8. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

9. Data Retention

Account data: Retained for 24 months after account deletion.
Transaction records: Retained for 10 years in accordance with German commercial and tax law (§257 HGB, §147 AO).
Analytics data: 26 months (anonymised, no personal data).

10. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15): Obtain a copy of your personal data.
Right to rectification (Art. 16): Correct inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your personal data.
Right to restriction (Art. 18): Restrict processing under certain circumstances.
Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing.

We will respond to your request within 30 days. To exercise your rights, contact us at info@founder-favors.com. You also have the right to lodge a complaint with the competent supervisory authority (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit).

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including TLS/SSL encryption, secure authentication mechanisms, access controls, and regular security assessments.

12. Children

The Service is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be posted on this page with a revised “last updated” date. For significant changes, we will notify you via email.

14. Contact