Privacy Policy

This policy explains what data Few Found collects, who can see it, how long we keep it and the rights you have over it.

1. Who is responsible

ScaleMind Media (GSTIN 07AFPFS5655F1ZI) operates Few Found and is responsible for your data. Contact details are in section 13.

2. Data we collect

Account data: email address, name, phone number if you add one, and a hashed password.
Profile data: company or creator name, website, services, locations, team size, description, portfolio, social links and contact email.
Verification data: what you send for the four-part check (client delivery, team and capability, registration and tax, commercial transparency): registration numbers such as GSTIN, CIN or Udyam, documents and evidence links, the people behind the business, and your client references' names and contact details.
Quote requests and briefs: what you ask for (the service, budget, timing and description), who you sent it to, and the replies.
Messages, posts, comments and reviews you write on Few Found.
Payment and billing data: order IDs, amounts and status from Cashfree, and the legal name, address and GSTIN you add to your billing details. We never see or store card details.
Technical data: IP address and browser type in server logs, used to run and protect the site.
Visit data, only if you accept it (see section 9).

3. How we use it

To run your account and show your profile.
To review a verification application, including contacting the references you give us.
To pass quote requests, briefs and messages between businesses and providers, and to match briefs with providers whose services fit.
To process payments and refunds, and issue tax invoices and receipts.
To send emails about your account, requests, payments and verification, and the weekly digest unless you turn it off.
To keep the site safe: screening content, preventing fraud and enforcing the community rules.

4. What is public

Your profile is public unless you set it to private. For a verified provider, the public record shows the company name, Verification ID, dates, each of the four parts as met or not met with a short line on how we know, and a dated history. Documents, references, application details and reviewers' internal notes are never public. Reviews you write are public with the name and company you give.

5. What other members see

Quote requests: when a business asks a provider for a quote, the provider receives the request as a message, with the business's name and profile. The email address you sign in with is not shared with them; you share contact details in a message only if you choose to.
Briefs: a members-only brief is seen by signed-in providers who can apply to it; a brief you choose to publish is public. Applicants are seen by the business that posted the brief.
Messages are seen only by the people in the conversation, and by our team when one is reported or screened out.
We never use what members write to each other for advertising.

6. Automated screening

Messages, comments, posts, briefs, reviews and applications are screened automatically before anyone else sees them, by fixed rules and a model we run on our own servers. Content is not sent to outside services for this. When something is not published, we keep a short excerpt, the rule involved and the decision, to explain it to you, handle an appeal and improve the checks; these records are never public. Automated checks also prepare a report for verification reviewers. They never decide: a person decides every verification and every appeal.

We do not sell personal data. Besides the members described above, data goes only to:

Cashfree, for payments and refunds.
Our email provider, to send emails.
Our hosting and database providers, which run the site.
Authorities, when the law requires it.
Advertising platforms, only with "Accept all": to measure our own ads, we may upload a one-way hashed email with the event (for example a sign-up or a payment) and its time. Never your name, contact details, messages, briefs or campaign details. With "Necessary only" this never happens.

8. Sponsored places

Sponsors see how many times their place was seen and clicked, as totals per day. A view is counted when at least half of the place has been on screen. Views and clicks are each counted at most once per place per day in a browser: a small marker in your browser's local storage, removed on a later day. To stop repeats, we also keep a one-way hash of your IP address and browser for one day; it is never stored with the totals. A sponsor's own visits while signed in are not counted. We store only the daily totals, never who saw or clicked a place.

9. Assistants and the Chrome extension

You can connect Few Found to an AI assistant (such as ChatGPT, Claude or Gemini) or to the Few Found Chrome extension. Searching works without connecting anything. Connecting means signing in with Few Found and choosing Allow on a page that names the app and what it may do; the app then receives a token, never your password.

An assistant can send quote requests to providers as you, and read your quote requests and the providers' replies. What it shows you comes from Few Found; what the assistant does with your conversation is governed by its own provider's privacy policy.
The Chrome extension reads the address of the page you open it on, only when you open it, to find that company on Few Found. It does not read your browsing history or page content. It keeps its sign-in token in your browser. It can send quote requests and save providers as you.
Neither sees your password, payments or verification documents, or can change your profile. Business emails shown are the ones providers chose to publish on their profiles; nothing is collected from other websites.
We store a hash of each app's token, which app it is, and when it was connected and last used. Disconnect an app any time in Settings → Account & Security; deleting your account disconnects every app at once.

10. Cookies and visit counting

Always on (necessary): a session cookie that keeps you signed in, a cookie that remembers whether to show prices in rupees or dollars, and a cookie that remembers your cookie choice. These are needed for the site to work and are not used for analytics.

Only if you choose "Accept all": a random visitor ID (no name, email or account attached) and a record of each page you view: the page address without its query string, the referring website, campaign tags (utm_), your device type, operating system, browser, screen size, language, time zone and country, and whether you were signed in. We do not store your IP address or full browser details with it. We use this only to see which pages and devices need improving; it is not used for advertising and never sold.

Also only with "Accept all": a cookie (up to 90 days) recording how you first reached Few Found: the campaign tags, the first page, the referring website, whether you arrived from an ad click (not the click identifier itself) and any referral code. When you then create an account or send us a request, we link that first visit to it, so we can see which channels bring real customers.

If you choose "Necessary only", or your browser sends a Global Privacy Control signal, none of this is recorded. You can change your choice at any time from "Cookie settings" at the bottom of every page; withdrawing consent also removes the visitor ID cookie. No third-party analytics or advertising script runs on Few Found.

11. How long we keep data

Accounts: while your account is open. When you close it, you are signed out at once and cannot sign in again, and the account is permanently deleted 15 days later.
Visit records: deleted automatically after 13 months.
Screening records: while the strike or appeal they belong to is relevant.
Verification decisions: the public record and its history are kept while the account exists, so a record cannot be quietly rewritten.
Payments, invoices and receipts: as long as tax and accounting law requires, even after an account is closed.

12. Security

Passwords are stored only as salted hashes. Sessions use signed cookies, and resetting your password signs you out on every device. Data is encrypted in transit with TLS, and forms are rate limited.

13. Your rights

Under Indian data protection law, and the law where you live where it applies, you can:

Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your account and data
Withdraw consent where processing is based on consent
Name someone to exercise these rights for you

14. Contact and grievances

Privacy requests and questions: [email protected]. Grievances go to [email protected].