Privacy Policy

1. Information users provide

Depending on how you use Cycle Found, you may provide:

• Name and public member display name
• Email address and, if you set one, a password
• Profile details such as city, bio, skills, or location
• Listing or garage details for bikes, parts, tools, or accessories — including condition notes, pricing, and location
• Photographs of bikes, parts, tools, or accessories
• Questions, answers, comments, tags, and related photos you post
• Messages you send through contact tools we provide (when those features are enabled)
• Reports you submit about content or accounts
• Questions or prompts you send to AI features, when AI features are offered
• Support emails you send to us

2. Account and authentication information

Account creation and sign-in are handled through our authentication provider (currently Supabase). We store account identifiers and related profile records linked to your account.

When you create an account, we may also store:

• Full name and an initial display name derived from your name
• Confirmation that you are 18 or older and accepted our Terms, with the date and time, and the Terms version in effect (currently 2026-11-05)

Sessions are maintained in your browser so you can stay signed in. Email verification may be required before posting, listing, messaging, or reporting when the Service requires it.

3. Garage items, listings, and photographs

When you create a garage item or listing, we collect the information you enter or confirm, which may include title, description, category, year, condition, asking price, location, notes, and related fields.

During Pre-Alpha, some garage and Community content may be stored only in your browser (local storage) for demo purposes until server-backed storage is fully enabled. When server storage is used, photos and item records are kept in cloud infrastructure with access controls. Public items and posts are visible to visitors; private items stay with your account.

If AI identification suggestions are offered for a draft, we may store those suggestions for your review. They are not written into item details until you choose to apply them.

4. Messaging and communication data

When Cycle Found offers in-app messaging or offer tools, we may store message text and related records so participants can read and reply, and we may send a notification email that a message is waiting (without using the sender’s email as a reply-to). Participants typically see each other’s display name, not account email.

On Community today, member contact may also use simpler tools (for example, mailto links). Cycle Found does not process payment. We do not claim that messages are end-to-end encrypted.

5. Location information

We may collect location-related information in these ways:

• Location you enter for a profile, garage item, or listing (which may be shown publicly when you publish it)
• Optional “Near Me” or similar search — only if we enable that feature and you choose to share approximate coordinates. A third-party reverse-geocoding service may be used to estimate city/state/ZIP. You can decline location permission.

We do not use precise continuous GPS tracking as part of the current Service.

6. Automatically collected technical information

Like most websites, our hosting and infrastructure providers may automatically receive technical data when you use the Service, such as IP address, browser type, device information, request timestamps, and pages or API endpoints accessed. We use this information for security, debugging, rate limiting, and operating the Service.

7. Cookies, analytics, and tracking technologies

Cycle Found uses browser storage for authentication sessions, your analytics preference, Pre-Alpha invite-gate unlock state (when the soft gate is enabled), and optional local demo Community data (for example, mock or locally created questions, answers, or garage items). That local data stays on your device unless you clear site data for www.cyclefound.com.

When you allow analytics and a measurement ID is configured, we may use Google Analytics 4 to understand site usage. Google Analytics uses cookies and similar technologies and may collect device and browser information, approximate location derived from IP address, pages viewed, referral source, and interactions with the Service.

We configure Google Analytics so that Google Signals and ad personalization signals are disabled. We do not currently run a Reddit advertising pixel, Meta (Facebook) Pixel, or similar third-party advertising pixel on Cycle Found.

Your choices. On first visit we may show a non-blocking cookie / analytics notice. You can choose OK (allow analytics) or Turn off analytics. We store that choice in your browser’s local storage. You can reopen the notice anytime via Cookie settings in the site footer. If you turn analytics off, we do not load Google Analytics for that browser.

Do Not Track and Global Privacy Control. There is no consistent industry standard for Do Not Track, and Cycle Found does not currently alter its practices solely based on DNT. We do honor Global Privacy Control (GPC): if your browser sends GPC, we disable analytics for that browser.

Third parties your browser may contact can include Google Analytics / Google (if analytics is allowed), Google Fonts, our authentication and hosting providers (currently Supabase and our web host), and — only if you use those features — optional AI, email, or geocoding providers described in this Policy.

8. AI processing (when offered)

Where Cycle Found offers AI features, they may rely on third-party models (for example, OpenAI) operated through our server-side integrations. Depending on the feature, we may send natural-language prompts, selected photos, or listing/garage context you submit.

AI features are informational only and may be inaccurate. Do not submit sensitive personal information in AI prompts unless it is necessary for the feature you are using. Pre-Alpha Community may not offer all AI features described historically for Cycle Found.

9. How information is used

We use information to:

• Create and manage accounts and profiles
• Host questions, answers, garages, listings, and photos
• Enable search, browsing, and member contact tools when available
• Provide AI assistance when those features are offered
• Send transactional emails (verification, password reset, and similar notices)
• Contact you about your account and the Service — security or abuse notices, material changes to the Terms or this Privacy Policy, important Service updates, and replies to requests you send us
• Enforce Terms, prevent fraud and abuse, and improve safety
• Operate, secure, debug, and improve the Service
• Measure traffic with Google Analytics when you allow it
• Respond to support requests and legal obligations

10. How information is shared

We share information in these limited ways:

• Public content: questions, answers, profiles, and garage/listing details you publish are visible to visitors
• Member contact: when messaging features are enabled, conversation records are visible to the participants; notification emails do not include the sender’s email as a reply-to
• Service providers: processors such as Supabase (authentication, database, storage), Google Analytics / Google (if allowed), optional OpenAI (AI), optional email delivery, optional geocoding, and font/hosting providers
• Legal and safety: we may disclose information if we believe it is required by law or necessary to protect rights, safety, or the integrity of the Service
• Business transfers: if we undergo a reorganization or similar transaction, information may be transferred as part of that process

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

11. Data storage and security

We use managed cloud infrastructure with access controls intended to limit who can see or change information. Public Community content is visible to visitors. During Pre-Alpha, some demo content may exist only in your browser’s local storage until server-backed Community data is fully enabled.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service understanding that residual risk remains.

12. Message access and moderation

When in-app conversations are stored, authorized Cycle Found personnel may process message content as needed to deliver notifications, operate the feature, apply access controls, investigate abuse, provide support, or comply with law. We do not claim that administrators routinely monitor all conversations or that messages are end-to-end encrypted.

13. Data retention

We retain information for as long as needed to operate the Service, maintain accounts and content, meet legal obligations, resolve disputes, and enforce our agreements. Exact retention periods are not yet formalized in an automated retention schedule.

Local browser demo data remains until you clear site data. Email and AI processors may retain data according to their own practices when those features are used.

14. Account deletion and privacy requests

To request access, correction, or permanent deletion of your account and related data we control, email hello@cyclefound.com. When an in-product delete-account control is available on Community, you may use that as well. Deletion removes profile and account data we control, server-stored Community content tied to your account (such as questions and answers), and garage/listing records we host — subject to legal retention needs. Local browser demo data on www.cyclefound.com is cleared when you clear site data for this host.

We may need to verify your request and retain certain information when required for legal, security, fraud-prevention, or legitimate business purposes.

15. California privacy rights and applicability

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), depending on whether those laws apply to Cycle Found at a given time.

Subject to applicability and verification, those rights may include the right to know/access, delete, correct, and opt out of certain sales or sharing of personal information, and the right not to be discriminated against for exercising privacy rights. To submit a request, contact hello@cyclefound.com. You can also limit Google Analytics collection using the options in Section 7.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

16. Privacy rights in other applicable jurisdictions

If other state or international privacy laws apply to you, you may have additional rights. Contact us and we will review your request under applicable law. This Policy is written primarily for a U.S. audience and a California-based operator.

17. Children’s privacy

Cycle Found is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

18. Changes to the policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and revise the effective date. Material changes may also be communicated by email or in-product notice when appropriate.

Changes (changelog)

As of October 27, 2026, we named Fault Board Co., LLC as the operating entity and described analytics, cookie choices, GPC, and related practices.

As of November 5, 2026, we aligned this Policy with Cycle Found on www.cyclefound.com as a single Pre-Alpha site: Q&A, garages (bikes, parts, tools, accessories), optional buy/sell, local demo storage, Cookie settings, and deletion via email until in-product account deletion is available.

19. Contact information

Privacy questions and requests: hello@cyclefound.com

Fault Board Co., LLC · DBA Cycle Found
171 Branham Ln, Ste 10 POB 1074, San Jose, CA 95136, United States