Security

1. Security approach

Founder Safety Kit is designed as an offline-first documentation product. The website is not intended to become a dashboard for your completed business records.

Our security approach is based on collecting as little customer operational data as reasonably possible, using private delivery controls, and keeping completed business records under the customer’s control.

2. What we protect

Founder Safety Kit may use technical measures to protect product files, download access, licensing, and delivery. These may include:

• Private expiring download links.
• Access tokens.
• Download limits.
• Access and download logs.
• Security checks.
• File versioning.
• Checksums.
• Watermarking or license notices.
• Other reasonable abuse-prevention methods.

These controls help reduce unauthorized access, download abuse, accidental public exposure, and license misuse.

3. What we do not collect or secure for you

Founder Safety Kit does not collect, host, review, verify, protect, or control completed customer files stored in the customer’s own systems.

We do not ask customers to enter or upload:

• Completed worksheets or completed spreadsheets.
• Passwords or password lists.
• API keys, private keys, seed phrases, or MFA recovery codes.
• Vendor inventories or access records.
• Incident notes or sensitive incident evidence.
• Customer records or private business records.
• Confidential contracts or internal operational documents.
• Full payment card data.

Completed records may contain sensitive business information depending on what you enter into them. You are responsible for storing, securing, backing up, sharing, redacting, and limiting access to completed materials within your own systems.

4. Safe use of the kit

To protect your own security and integrity, do not enter actual passwords, API keys, private keys, seed phrases, MFA recovery codes, full payment card data, or equivalent secrets into Founder Safety Kit worksheets or spreadsheets.

Where a record is needed, use a safer reference such as:

• Password-manager entry name.
• Secure storage location.
• Responsible owner.
• Access method.
• Last review date.
• Recovery-process note.

You are responsible for deciding where and how to store completed Founder Safety Kit-based records based on your own business needs, risk level, internal practices, and professional advice where appropriate.

5. Customer storage responsibility

After downloading Founder Safety Kit, you are responsible for storing your files securely, keeping reasonable backups, and limiting access to people permitted under your purchased license.

Storage options may include offline storage, encrypted storage, a password manager, internal drive, document management system, or another secure location. Founder Safety Kit does not determine the correct storage method for your specific business, industry, country, risk level, legal obligations, or internal practices.

Founder Safety Kit is not responsible for lost local files, unsecured internal storage, accidental sharing, unauthorized access inside your own systems, or data leaks caused by failure to secure, limit, redact, or appropriately share completed records.

6. Redaction before sharing

Before sharing completed Founder Safety Kit-based records with employees, contractors, advisors, attorneys, accountants, vendors, insurers, auditors, consultants, or other parties, you are responsible for reviewing the materials and removing, limiting, or redacting sensitive information as appropriate.

Founder Safety Kit is not responsible for data leaks, unauthorized disclosure, confidentiality breaches, business harm, or other losses arising from your failure to redact, limit, secure, or appropriately share completed materials.

7. Payment security

Purchases are processed through Paddle, our Merchant of Record. Paddle may handle checkout, payment processing, applicable taxes, invoices, receipts, fraud checks, chargebacks, and certain refund processes.

Founder Safety Kit does not directly collect or store full payment card details. Payment, billing, tax, fraud, and receipt information may be handled by Paddle according to Paddle’s own terms and privacy notices.

8. Website analytics and logs

Founder Safety Kit may use Cloudflare Web Analytics to understand basic website usage, performance, and traffic patterns.

Basic technical logs may also be used for security, troubleshooting, abuse prevention, license verification, download delivery, refund review, and investigation of suspicious activity.

These systems are not used to collect completed worksheets, passwords, API keys, vendor inventories, incident notes, access records, or private business records.

9. Technical protection measures

Founder Safety Kit may use reasonable technical measures to protect product files, download access, licensing, and delivery.

You may not bypass, disable, tamper with, remove, reverse engineer, interfere with, or attempt to defeat any technical protection, delivery, licensing, watermarking, access-control, or abuse-prevention measure used by Founder Safety Kit.

10. Unauthorized copies and misuse reporting

If you receive, find, or are offered Founder Safety Kit materials from any source other than your authorized purchase download link or an approved replacement link, please report it to:legal@foundersafetykit.com.

You should also report suspected unauthorized access, public posting, resale, leaked copies, redistribution, or misuse of Founder Safety Kit materials.

Reports should include only information reasonably necessary to identify the issue. Do not send passwords, secrets, private customer records, sensitive incident evidence, or private business records.

11. Responsible reporting

If you believe you have found a security issue affecting Founder Safety Kit’s website, delivery system, download links, or product-access controls, contact:legal@foundersafetykit.com.

Please provide enough non-sensitive information for us to understand and review the issue. Do not exploit the issue, access other customers’ data, disrupt services, bypass controls, publicly disclose the issue before we have reviewed it, or send sensitive business records.

Founder Safety Kit may limit or refuse engagement with reports that involve harassment, extortion, unlawful access, destructive testing, public disclosure without reasonable notice, or attempts to bypass license or download controls.

12. No security guarantee

Founder Safety Kit is intended to support internal organization, documentation habits, workflow clarity, and operational recordkeeping.

We do not guarantee that using the kit will produce risk reduction, improved security, compliance readiness, incident prevention, business continuity, cost savings, time savings, or improved business performance.

Founder Safety Kit does not monitor, review, approve, audit, verify, certify, or correct completed customer documents, records, worksheets, spreadsheets, policies, workflows, or internal business materials.

13. Policy updates

Founder Safety Kit may update this Security page as the product, website, delivery system, support process, security practices, legal requirements, or business structure changes.

If security practices or related policies are reviewed or changed, Founder Safety Kit will update the relevant policy pages.