Privacy Policy

Effective 2026-08-22. This policy covers hr.foundryir.com and the services Foundry HR provides, for visitors and client personnel worldwide, including the United States, the EU/EEA, the UK and Canada.

1. Who we are (the data controller)

Foundry HR ("Foundry HR", "we", "us") is a trade name of 9GG LLC, a Wyoming limited liability company, and a Foundry IR company. For personal data collected through this site and our services, 9GG LLC is the data controller. We have not appointed a separate EU or UK representative; for GDPR/UK GDPR purposes, contact us directly using the details in §9 — we will respond as controller.

2. What we collect

• Exposure-read inputs — company name, employee headcount, the states you employ people in, and your industry, when you run the free instant exposure read. This is processed in your browser to compute the read; it is stored in your browser's local storage, not on our servers, unless you submit the lead-capture form below.
• Lead / contact information — name, work email, and phone number, plus your role, hiring pace, current HR setup and budget, when you request the full findings from the free HR compliance assessment or otherwise contact us. We ask for a phone number because the assessment findings are prepared for your specific facts and we offer a walkthrough call; you control whether we may call by the "OK to call me" checkbox.
• Engagement / service data — information client companies provide during a paid engagement (headcount and payroll facts, job descriptions, handbooks, policies, and other materials Gene and our HR team need to do the work).
• Payment information — if and when you purchase a plan, checkout is handled by Stripe. Card details go directly to Stripe and are never seen, transmitted or stored by us; we receive only the fact of payment, amount, currency, billing email and an order reference. See Stripe's privacy policy.
• Technical data — standard server logs (IP address, user agent, pages requested).

3. Cookies, Google reCAPTCHA and analytics

This site currently sets no cookies and runs no third-party analytics or advertising trackers — the exposure-read tool works entirely in your browser via local storage, described in §2. If we add Google reCAPTCHA to a form to prevent abuse, that page will display: "This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply." If we add Google Analytics or another cookie-based analytics tool, this section and a cookie notice will be updated first, and EU/EEA and UK visitors will be asked for consent before non-essential cookies are set. Foundry HR does not currently publish an app on Google Play; if we do, that app's data handling will be disclosed here and will comply with Google Play's Developer Program Policies and Data Safety requirements.

4. Our lawful bases (GDPR/UK GDPR)

Where GDPR or UK GDPR applies, we rely on: consent (running the exposure read, submitting the lead-capture form); performance of a contract or steps to enter one (client engagements, responding to a request you made); and our legitimate interests (operating, securing and improving this site, and following up on a request you initiated) — balanced against your rights, and never used to send marketing you did not ask for. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. How we use it

To deliver what you asked for (the exposure read, the full findings, a walkthrough call, engagement services), to operate and secure the site, and to meet legal obligations. We do not sell personal information, share it with data brokers, or add you to marketing lists you did not request.

6. Sharing

Only with: service providers who process data for us under confidentiality (hosting, email delivery, and Stripe for payment processing); the parent engine at Foundry IR / 9GG LLC that powers Gene and the assessment logic; professional advisers; regulators where legally required; and a successor in a business transfer. HR personnel or subcontractors working on your engagement see only what that engagement requires.

7. International transfers

We operate from the United States; data is stored on servers we control in the U.S. Where personal data is transferred from the EU/EEA or UK to the U.S., we rely on the European Commission's Standard Contractual Clauses (and the UK's International Data Transfer Addendum) with our processors, or on your explicit consent, as the transfer mechanism. For Canadian individuals, we handle personal information consistently with PIPEDA's fair-information principles; submitting information to us means it may be processed outside Canada, subject to local law.

8. Retention

Exposure-read inputs live only in your browser's local storage until you clear it — we do not receive them unless you submit the lead-capture form. Lead-capture and contact submissions are kept while relevant to your request or relationship and deleted on request. Engagement records are kept as long as our services and any applicable legal or tax requirement demand. Data is transport-encrypted (TLS), stored on access-controlled systems, and never placed in public repositories.

9. Your rights

Email support@9gg.app and we will action any of the below within 30 days, free of charge, subject to identity verification.

If you are in the EU/EEA or UK (GDPR/UK GDPR): you have the right to access, rectify, erase, restrict or object to our processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may lodge a complaint with your local supervisory authority (in the EU, the authority in your member state; in the UK, the Information Commissioner's Office).

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect and why, the right to delete it, the right to correct it, and the right to non-discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA, and have not done so in the preceding twelve months.

If you are in Canada (PIPEDA): you may access your personal information and challenge its accuracy.

10. Children's privacy

This site and our services are directed at businesses and working professionals. We do not knowingly collect personal data from children under 16, and if we learn we have, we will delete it.

11. Changes to this policy

We may update this policy as the site and services evolve. The effective date above reflects the latest revision; material changes affecting EU/EEA or UK rights will be highlighted on this page.

12. Contact

9GG LLC (Foundry HR), 30 N Gould St, Ste R, Sheridan, WY 82801, USA · support@9gg.app.