Privacy Policy

1. Information We Collect

We collect: account information (name, email, password via Clerk); listing and match content you create; messages exchanged with matched parties; identity verification data (processed by Stripe Identity, if you choose to verify); payment information (processed by Stripe, not stored on our servers); usage analytics and log data.

2. How We Use Information

We use your information to: operate and improve the Platform; optionally verify your identity; facilitate matching between investors and funders; process payments; prevent fraud; comply with legal obligations; send transactional emails.

3. Information Sharing

We share limited information with your matched party (name, rating, verification status) when a match is created. We share data with service providers including Stripe (payments and identity), Clerk (authentication), Supabase (database), BoldSign (e-signatures), and Resend (email). We disclose information to law enforcement when legally required.

4. Identity Verification Data

Identity verification is optional and handled by Stripe Identity. The Funderground does not store your government ID images or biometric data. Stripe's privacy policy governs how they process verification data.

5. Third-Party Services

• Clerk: clerk.com/privacy
• Stripe: stripe.com/privacy
• Supabase: supabase.com/privacy
• BoldSign: boldsign.com/privacy-policy

6. Data Retention

Account data is retained while your account is active. Audit log and transaction records are retained for 7 years for legal and dispute purposes. You may request deletion of your account; audit records tied to completed transactions will be retained per legal requirements.

7. Your Rights

You may access, correct, or request deletion of your personal data by contacting us. California residents have additional rights under CCPA. EEA/UK residents have rights under GDPR. To exercise these rights, contact privacy@thefunderground.com.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies (PostHog) to understand usage patterns. You can disable non-essential cookies in your browser settings.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), database row-level security, and access controls. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

10. Children

The Platform is not intended for users under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We will notify you of material changes to this policy by email or Platform notification at least 30 days before changes take effect.

12. Contact

Privacy questions: privacy@thefunderground.com