Privacy Policy
Privacy Policy.
Last updated: May 16, 2026
Who we are
What we collect
When you use the qualification flow, we collect:
- Business name, industry, US state, and time in business
- Approximate monthly revenue and funding amount requested
- Your name, email address, and phone number
- Information you choose to upload later (e.g., bank statements during funder routing)
When you browse the site, we collect:
- Pages viewed, referring URL, and approximate geographic region (state/city)
- Device type, browser, OS — not fingerprint-level detail
- Anonymous session ID for analytics
- UTM tags from advertising and referral partners
We do not collect Social Security numbers, full bank account numbers, or payment-card information through this site. If a funding partner requests those during underwriting, you provide them directly to the funder.
How we use it
- Match you to funding partners likely to approve your application
- Send you status updates, match results, and educational content you ask for
- Improve our matching model and site performance
- Comply with legal obligations (anti-fraud, recordkeeping, state disclosure requirements)
- Detect and prevent abusive or fraudulent activity
Who we share it with
Funding partners: Only when you indicate you want to be routed. The partner receives the fields they need to underwrite the deal.
Service providers: Hosting (Vercel), database (Supabase), analytics (PostHog, Google Analytics, Microsoft Clarity), email (Resend), AI services (Anthropic for content generation only — not your personal data). These vendors are contractually limited to using your information to provide services to us.
Legal: When required by law, valid court order, or to enforce our terms or protect rights.
We do not sell your information to data brokers, marketing lists, or unaffiliated third parties.
Cookies and analytics
We use first-party cookies and similar storage to keep your session, save your in-progress qualification, and measure traffic. We deploy PostHog, Google Analytics 4, and Microsoft Clarity for product analytics. We mask form inputs from session recordings.
You can disable cookies in your browser; the qualification flow may not work properly without them.
Your rights
Regardless of state, you can:
- Request a copy of the information we hold about you
- Correct inaccurate information
- Request deletion (subject to legal recordkeeping obligations)
- Opt out of marketing communications at any time
California residents: Under the CCPA/CPRA, you have additional rights including the right to know, the right to delete, the right to correct, and the right to limit use of sensitive personal information. We do not sell personal information.
Virginia, Colorado, Connecticut, Utah residents: Comparable rights under each state's comprehensive privacy law.
Email legal@fundnode.co to exercise any right. We respond within 14 days.
Data retention
Active lead records: retained as long as your file is being matched or you remain on the waitlist. Inactive records: retained for 24 months after last activity, then deleted unless we're required to retain longer for regulatory or contractual reasons.
Raw analytics events: 90 days at full granularity, aggregated thereafter.
Children's privacy
We do not knowingly collect information from anyone under 18. The qualification flow is for US business owners.
Security
Data is encrypted in transit (TLS 1.3) and at rest. We use row-level security in our database to prevent cross-tenant access. We don't collect bank account numbers, SSNs, or payment-card data through this site.
Changes
We may update this policy. Material changes are flagged at the top of the page and (if we have your email) sent to you. The "Last updated" date above always reflects the current version.
Contact
Email legal@fundnode.co for any privacy question or rights request.