Privacy Policy

Last updated: August 23, 2026

1. Introduction

FundedIQ is committed to protecting your privacy. This Privacy Policy explains how we collect, use and safeguard personal information.

It covers two distinct groups, because our obligations differ for each:

Customers and visitors — people who visit fundediq.co, start a trial, or subscribe to a plan. Sections 2–8 apply.
Individuals in our database — founders and executives at funded companies, whose professional details appear in our data because their company raised funding. Section 9 is written for you, and explains where the data came from and how to have it removed.

2. Information we collect about customers and visitors

Personal information. Your name, business email address, job title and company information when you start a trial, subscribe, or contact us.

Billing information. Billing address and tax identifiers, plus the last four digits and expiry of your card. Full card details are collected and stored by Stripe — we never receive or store them.

Usage data. IP address, browser type, device information and pages visited.

Transactional and communication data. Your subscription and payment history, which weekly data files were issued to you and when they were downloaded, and your correspondence with our support team.

We do not collect special-category data, and we do not knowingly collect data from anyone under 18.

3. How we use your information

To deliver, maintain and improve our services
To create and administer your account and process payments
To send service emails you cannot opt out of while subscribed — the weekly data file, trial-ending notices, payment failures, receipts and cancellation confirmations
To send occasional product emails, which you can opt out of at any time
To provide customer support
To detect and prevent fraud, trial abuse and unauthorised bulk extraction of our data
To comply with applicable laws, including tax and accounting obligations

Our legal bases are: performance of a contract (running your subscription), legitimate interests (securing the service, preventing abuse, improving the product), legal obligation (tax and accounting records), and consent where we ask for it.

4. Download logging

When you download a weekly data file we record which subscriber downloaded which week’s file and when. We do this so that we can answer an erasure or security question accurately, and to enforce the redistribution terms. These logs are retained for 24 months.

5. Data security

We take commercially reasonable measures to secure personal data against unauthorised access, misuse, alteration or loss. Data files are delivered as expiring, per-recipient signed links rather than email attachments, and each link is re-checked against live subscription status on every request — so access ends when a subscription ends. No method of transmission over the internet or electronic storage is completely secure.

6. Service providers

We use the following processors. Each is contractually bound to process data only on our instructions.

Provider	Purpose	Location
Stripe	Payment processing, subscription billing, tax calculation	US / global
Resend	Transactional and subscription email delivery	US
Supabase	Database hosting and account authentication	US
Vercel	Website and application hosting	US / global
Pirsch Analytics	Cookieless website analytics	Germany (EU)

We also use Google Search Console for aggregate search-performance reporting. This shows us anonymised search queries and does not identify individual visitors.

About our analytics. Pirsch is a privacy-focused, EU-hosted analytics service. It sets no cookies and stores no identifier on your device, so there is nothing to consent to and nothing to opt out of at the browser level. It does not track you across other websites and we do not run advertising or remarketing tags of any kind. Your IP address is used only in transit, to generate a daily-rotating, irreversible hash that lets Pirsch tell one visit from another; the address itself is never stored and we never see it. What we can see is aggregate: pages viewed, referring site, country, browser and device type, and a small number of product events such as “a plan button was clicked” or “a trial started”.

Signed-in areas are measured with the query string removed, so search terms you type in the app and the identifiers Stripe appends after checkout are never sent.

Where personal data is transferred outside the UK, EEA or India, transfers are made under the relevant provider’s Standard Contractual Clauses.

7. Retention

Account and subscription data — for as long as your account is active, then 7 years to meet tax and accounting obligations.
Download logs — 24 months.
Marketing preferences and suppression records — indefinitely, because deleting a suppression record would allow the data to be re-added.
Support correspondence — 24 months.

8. Your rights as a customer or visitor

You have the right to access and review your personal data, request corrections, request deletion, object to or restrict processing, request a portable copy, and opt out of marketing at any time. To exercise any of these, email privacy@fundediq.co. We respond within 30 days.

If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

9. If you appear in our database

This section is for founders and executives whose details appear in FundedIQ, and is our notice to you under Article 14 of the GDPR.

What we hold. Your name, business email address, professional profile links (such as LinkedIn), your job title, and the company you are associated with.

Where it came from. We did not collect it from you directly. It is compiled from public funding announcements and from a licensed third-party business-data provider. We do not scrape private accounts, and we have never held phone numbers for anyone.

Why we process it. Our legal basis is legitimate interests — providing business-to-business funding intelligence to professional users, an established and expected use of professional contact information. We have carried out a balancing assessment and concluded that this processing does not override your rights, in part because the data is limited to professional details, is not special-category data, and can be removed on request without conditions.

Who receives it. Subscribers to our paid plans, who receive it under terms requiring lawful use and prohibiting resale or redistribution.

Your rights. You can object to this processing, ask for a copy of what we hold, ask for a correction, or ask for erasure. We do not require a reason and we do not require you to create an account.

How to be removed. Email privacy@fundediq.co, or use the remove your data page. On removal we delete your personal record and add you to a permanent suppression list that our weekly data pipeline checks on every run — so a later data refresh cannot re-add you. Files already downloaded by subscribers before your request cannot be recalled, but the links we issue expire and future issues will not contain you.

10. Cookies

FundedIQ uses cookies and similar technologies. We use strictly necessary cookies for signed-in sessions and for Stripe’s checkout and fraud prevention. We do not run advertising or cross-site tracking cookies, and our analytics sets no cookies at all (see section 6). You may disable cookies through your browser settings, but signing in will not work without the session cookie.

11. Changes to this policy

We reserve the right to update this Privacy Policy at any time. Any changes will be reflected on this page with an updated revision date. Where a change materially affects how we use your data, we will notify subscribers by email.

12. Contact us

Privacy, erasure and data-removal requests: privacy@fundediq.co Billing and general support: support@fundediq.co