Privacy Policy

01Who we are

Foundations (“we”, “us”) is a set of products, Personas and Elements, operated by Tensegrity Systems LLC, Seattle, Washington, United States. We are the controller of the personal information described in this policy, except where we process workspace content on your behalf, in which case you or your organization are the controller and we act as a processor.

02Information we collect

We collect information in three ways: you give it to us, it is created when you use the products, or it comes from services we work with.

• – Waitlist. Email, product interest, and campaign parameters (source, medium, campaign) you submit when you join the waitlist.
• – Account information. Name, email address, organization, role, and sign-in details.
• – Workspace content. Personas, kinds, weights, sections, checks, findings, cohorts, specs you probe, and component specs and code you add to Elements.
• – Agent activity. Which MCP clients and agents you connect, the runs they start, the resources they read, and the credits each run uses.
• – Billing information. Plan, billing cycle, credit balance and grants, promo codes redeemed, invoices, and the last four digits and expiry of your card. Full card details are collected and stored by Stripe, our payment processor. We may receive Stripe customer identifiers, payment status, and dispute metadata needed to reconcile your account.
• – Usage and device data. Pages viewed, features used, approximate location from IP address, browser and device type, and error logs.
• – Demo requests. Work email, company and product interest you submit when booking a demo.

03How we use information

• –Provide and operate Personas, Elements and agent access, including running checks and probes you or your agents request.
• –Track credits, apply plans and promo codes, process payments through Stripe, and send receipts and billing emails such as renewals, low balance, expiring grants, or failed payments.
• –Keep accounts secure, detect abuse, and debug problems.
• –Improve the products using aggregated and de-identified usage data.
• –Respond to support, waitlist, and demo requests, and send product updates you can opt out of at any time.

04Your content and AI

Workspace content is used only to provide the service to you. We do not use your personas, sections, findings, specs or components to train general-purpose AI models.

Agents you connect act with your permissions and can read and change workspace content within the scopes you grant. You can revoke an agent at any time from Account settings.

Personas are meant to be synthetic. Do not place personal information about identifiable real people in persona content unless you have a lawful basis to do so.

05How we share information

We do not sell personal information or share it for cross-context behavioral advertising. We share it only as follows:

• – Service providers that host our infrastructure, process payments (Stripe), send email, and provide analytics, under contracts that limit their use of the data.
• – Your organization. Team and partner account admins can see members, usage by product and agent, and credit consumption.
• – Legal reasons, when required by law or to protect the rights, safety or property of our users or the public.
• – Business transfers, such as a merger or acquisition, with notice to you before your information becomes subject to a different policy.

06Retention

We keep account and workspace data for as long as your account is active. When you delete your workspace or close your account, we delete or de-identify it within 30 days, except for billing records we must keep for tax and accounting purposes and backups that expire on a rolling 35-day schedule. Waitlist addresses stay until you ask us to delete them or we close the list.

Usage and credit ledger data (tool calls, grant spends, entitlement changes) is kept while the account is active so we can show balances, receipts, and support history, then retained only as long as needed for security, abuse prevention, and legal accounting after closure. Stripe retains its own payment records under Stripe’s policies; we keep the Stripe customer and invoice references required to reconcile charges.

07Security

Data is encrypted in transit and at rest. Access inside our team is limited to people who need it to operate the service, and is logged. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law.

08Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can export any persona as Markdown and component specs from Elements at any time.

To make a request, email support@tensegrity.company. We will respond within 30 days and will not discriminate against you for exercising your rights.

09International transfers

We may process information in countries other than the one where you live. When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on approved safeguards such as Standard Contractual Clauses.

10Children

Foundations is built for professional use and is not directed to children under 16. We do not knowingly collect their personal information.

11Changes to this policy

If we make material changes, we will notify account owners by email or in the product at least 14 days before they take effect. The date at the top of this page shows when it was last updated.

12Contact

Questions about this policy or your information: support@tensegrity.company, or write to Tensegrity Systems LLC, Seattle, Washington, United States.