Privacy Policy

Overview

Fund Flow OS is committed to protecting user privacy. This summary explains what data we collect, how it's used, how it's protected, and how users can manage their information.

What Information We Collect

Personal details: Name, email, contact info, business and billing details, login credentials.

Usage data: IP address, browser/device type, pages visited, interactions, crash reports, and cookies for authentication or preferences.

Workspace content: Investor lists, deals, financial data, uploaded documents, and templates created by users.

How We Use the Information

• To operate and improve the platform.
• To process payments and manage subscriptions.
• To secure user accounts and detect fraud.
• To personalize the experience and provide AI-powered insights.
• To meet legal or compliance obligations.

Fund Flow OS does not sell personal information and does not use private workspace data to train public AI models.

AI and Automation

Some features use AI or machine learning to generate insights or recommendations. User-uploaded data is processed only to provide these features and remains private to each workspace. Third-party AI vendors (if used) operate under strict confidentiality and data-protection agreements.

Cookies & Tracking

Essential cookies: Enable login and basic functionality.

Analytics cookies: Help improve product performance.

Preference cookies: Remember user settings.

Users may disable cookies, but some features may no longer function correctly.

Data Sharing

Fund Flow OS shares information only with:

• Service providers (e.g., Stripe, DocuSign, Twilio, hosting/analytics partners) under secure contracts.
• Professional advisors for legal or audit purposes.
• Law enforcement when required by law.
• During business changes (e.g., merger or acquisition) with prior notice when applicable.

No personal data is sold or rented.

Google User Data (Gmail)

When you connect your Google account, Fund Flow OS accesses certain Gmail data in order to provide email synchronization and sending features within your workspace. This may include email metadata (such as sender, recipient, subject, timestamp) and message content for messages that you select or interact with.

Fund Flow OS uses Gmail data only to provide CRM email functionality. We do not sell Gmail data, not share it with advertisers, and not use it to train public AI models.

You can revoke Google access at any time from your Google Account permissions page or by disconnecting Gmail inside Fund Flow OS. You may request deletion of email-related data as outlined in the "User Rights" section.

Data Security

Data is encrypted in transit and at rest. We use role-based access controls, multi-factor authentication, continuous monitoring, and incident response procedures. While no system is 100% secure, Fund Flow OS actively maintains safeguards and employee training.

Data Retention and Deletion

User data is retained while the account is active and as required by law. Users may request deletion of their personal data at any time, subject to legal or regulatory retention requirements (such as invoices).

User Rights

Depending on location, users may:

• Access or correct their data.
• Request deletion or export of their data.
• Opt out of marketing communications.
• Withdraw consent where applicable.

Requests can be made using the contact information below.

International Data Transfers

Data may be processed in the U.S. or other regions using legally approved safeguards such as Standard Contractual Clauses.

Children's Privacy

Fund Flow OS is not intended for users under 18 years old. Any data collected from minors is deleted once identified.

California Privacy Rights

California residents may:

• Request access or deletion of their data.
• Correct inaccuracies.
• Confirm that Fund Flow OS does not sell personal information.

Updates to This Policy

Policy changes will be announced by email or in-app notice. Continued use after notification indicates acceptance of the updated terms.

Contact Us

Email: support@fundflowos.com

If unresolved, users may contact their local data-protection authority.