Privacy policy

01Who is responsible

The controller of personal data processed through FundingData is Fores Media Limited, registered in England and Wales (company number 08749657), 81 Turners Hill, Cheshunt, Waltham Cross, Hertfordshire, EN8 9BD, United Kingdom. Contact for anything in this policy: contact@fundingdata.com.

02What we collect and why

• Account — your email address, plan and its status, the dates you signed up and last signed in, and the IP address used at sign-up and when a sign-in link is requested (abuse prevention). Sign-in links are single-use and stored only as cryptographic hashes; API keys are stored only as hashes. Basis: contract; legitimate interests (security).
• What you set up — saved searches and alerts (including any webhook URL you give), API key names, correction reports you send. Basis: contract.
• Usage counters — records delivered per month and AI answers per day, per account, to apply plan limits. Basis: contract.
• Payments — handled by Stripe. We receive a customer ID, the plan, the subscription status and the billing period; we never receive full card numbers. Basis: contract; legal obligation (accounting and tax records).
• AI answers — questions you type into the AI answer features are sent, through OpenRouter, to the model provider that writes the answer. Do not include personal or confidential information in them. Basis: contract.
• Contact form — the email address and message you send, plus your IP address and browser user agent (abuse prevention and rate limiting). Basis: legitimate interests.
• Product analytics — page views and feature use, collected first-party through our own domain, with nothing stored on your device. Account events (sign-up, sign-in, key or alert created, checkout, plan change, export) are sent from our server under a pseudonymous ID derived from the account, never the email address. No advertising trackers and no cross-site tracking. Basis: legitimate interests (improving the product).
• Server logs — standard request logs for security and reliability. Basis: legitimate interests.

Signed-in members receive one essential session cookie (HttpOnly, signed). It exists only to keep you signed in and is not used for tracking.

03About the database itself

FundingData is a database of startup funding and company events compiled from cited public sources. Where a source names people in a professional context (founders, executives, investors), that name may appear in the database with a link to the source. We did not collect this information from you directly.

• Data about people: name, professional role and the company or fund it relates to, as stated in the cited source.
• Sources: news articles and press releases, regulatory filings (for example SEC Form D, Form C, S-1, 8-K and N-PORT, and UK Companies House), accelerator and program directories. Each record links its source.
• Purpose: recording and attributing startup funding, investment and company events, and checking that records are correct. For example, the people listed in an SEC Form D may be compared with the people named in an article, to confirm that a filing and a reported round concern the same company; the outcome and a short note of the evidence are kept in internal review records and are not published.
• Basis: legitimate interests in compiling already-public business information, with a source for every record.
• Recipients: signed-in members and API clients of FundingData, and the service providers below.
• Objection, correction and removal: email contact@fundingdata.com with a link to the record. Corrections are part of the product (see methodology).

04Service providers

• Railway — application hosting.
• Supabase — database hosting (EU, Frankfurt).
• Stripe — payments and subscriptions.
• Cloudflare — DNS and inbound email routing.
• PostHog (US) — product analytics, as described above.
• Resend — transactional email (sign-in links, invitations, alerts).
• OpenRouter, routing to Anthropic, Google and OpenAI models — extraction of structured facts from public articles, text embeddings, checks on records, AI-written summaries (labelled as such) and AI answers.
• Jina AI — rendering of some public article pages to text.
• GitHub — scheduled processing jobs.
• Google Fonts — typefaces on some pages (your browser requests them from Google).

Some of these providers process data outside the UK, including in the United States. Those transfers rely on the safeguards in each provider’s data processing terms: the UK International Data Transfer Addendum or Agreement, or the UK Extension to the EU–US Data Privacy Framework where the provider is certified.

05Retention

• Account data: while your account is open; deleted within 90 days of a request to close it, except what we must keep by law.
• Payment and invoice records: six years, as UK accounting and tax law requires.
• Article text used for extraction: up to 120 days, not published.
• Sign-in tokens: deleted 7 days after expiry.
• Processing logs: 90 days.
• Database records (funding events and the names in them): while the record is part of the database, or until a removal request is accepted.

06Your rights

You can ask us to give you a copy of the personal data we hold about you, to correct or delete it, to restrict or object to its use (including to a database record that concerns you), or to transfer data you gave us. Email contact@fundingdata.com; we reply within one month.

You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or, in the EU, to your national data protection authority.

FundingData is not directed at children under 18. We will post any changes to this policy on this page with a new date, and tell account holders by email about material changes.