Privacy Policy

Fundor ("Fundor," "we," "us," or "our") operates the website at fundor.io and related services (collectively, the "Platform"). Fundor provides a fundraising platform that connects student athletes and their teams with service partner companies. Athletes collect referral information from homeowners, which is submitted through our Platform and shared with our service partner call centers for follow-up contact.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our Platform, or submit information through a referral form. By using the Platform, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies to all users of the Platform, including student athletes, coaches, parents and guardians, team administrators, and homeowners or other individuals who submit information through our referral forms ("Referred Individuals").

Information You Provide Directly
We collect personal information that you voluntarily provide when you register for an account, complete a referral form, or otherwise interact with the Platform:

• Account Information: Name, email address, phone number, and role (athlete, coach, parent, admin).
• Team and School Information: School name, team name, team codes, city, and state.
• Referral Form Information (Referred Individuals): First and last name, email address, phone number, preferred contact time, current service providers and monthly payment amounts, and service interests.
• TCPA Consent Records: Whether you checked the consent box, the date and time consent was provided, and the IP address from which consent was given.
• Communications: Any messages or information you provide when contacting our support team.

Information Collected Automatically
When you access or use the Platform, we automatically collect:

• Device Information: Device type, operating system, browser type, and screen resolution.
• Usage Data: Pages visited, features used, time spent on the Platform, and navigation paths.
• Network Information: IP address, approximate geographic location (city/region level), and referring URLs.
• Cookies and Similar Technologies: Session cookies, authentication tokens, and analytics identifiers.

Information From Third Parties

• Authentication Provider (Clerk): Account verification data and login metadata.
• Service Partners: Status updates regarding referrals, such as whether a referred individual became a customer and commission amounts owed.
• Team Administrators and Coaches: Team roster information and athlete eligibility confirmations.

We use the information we collect for the following purposes:

• Service Delivery: To operate the Platform, manage user accounts, facilitate team enrollment, and process referral submissions.
• Referral Processing: To transmit referral information to our service partner call centers so they can follow up with Referred Individuals about services they expressed interest in.
• Partner Sharing: To share Referred Individual contact information and service interest data with our service partners (such as Vivint and other home service providers) so they may contact Referred Individuals by phone, text message, or email for marketing and sales purposes.
• Fundraising Tracking: To track referral activity, calculate commissions and earnings, maintain leaderboards, and manage team fundraising goals.
• Communications: To send account notifications, referral status updates, and respond to support requests.
• Platform Improvement: To analyze usage patterns, diagnose technical issues, and optimize user experience.
• Security and Fraud Prevention: To detect and prevent fraudulent referrals, unauthorized access, and abuse of the Platform.
• Legal Compliance: To comply with applicable laws, enforce our Terms of Service, and maintain records required by law (including TCPA consent records).

We do not sell your personal information. We share your information only in the following circumstances:

• Service Partners and Call Centers: When a Referred Individual submits a referral form, we share their name, phone number, email address, preferred contact time, and service interest details with our service partner companies and their call centers. Each partner's use of your information is governed by their own privacy policy.
• Team and Coach Visibility: Athlete referral activity, earnings data, and performance metrics are visible to their team coach and administrators.
• Infrastructure and Service Providers: We use third-party service providers including Vercel (hosting), Supabase (database), and Clerk (authentication). These providers process data on our behalf and are contractually obligated to protect it.
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or government request.
• Business Transfers: If Fundor is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information in other circumstances with your explicit consent.

THIS SECTION IS IMPORTANT. PLEASE READ IT CAREFULLY.

When a Referred Individual submits the referral form on our Platform and checks the consent box, the Referred Individual provides prior express written consent under the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, for Fundor and its service partners to contact the Referred Individual at the telephone number and email address provided.

By providing consent, the Referred Individual agrees to receive:

• Phone calls (including calls made using an automatic telephone dialing system or prerecorded/artificial voice messages)
• Text messages (SMS and MMS), including messages sent using automated technology
• Emails for marketing and informational purposes

from Fundor and its current and future service partners, including but not limited to home security, internet, cell phone, TV/streaming, pest control, solar energy, roofing, holiday lighting, estate planning, and tax strategy service providers.

Key disclosures:

• Consent is not a condition of purchasing any goods or services.
• Message and data rates may apply. Message frequency varies.
• You may revoke your consent at any time by contacting us at privacy@fundor.com, by replying STOP to any text message, or by requesting removal during any phone call.
• Your contact information and consent status will be shared with our service partner call centers so they may contact you directly.
• You may need to opt out separately with each partner.

We record and retain the following as evidence of consent: the exact consent language presented, date and time consent was given, IP address, and identity of the Referred Individual. These records are maintained for a minimum of five (5) years.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Account Data: Retained for as long as your account is active and for a reasonable period thereafter.
• Referral Data: Retained for at least three (3) years after submission.
• TCPA Consent Records: Retained for a minimum of five (5) years from the date consent was provided, including the consent text, timestamp, IP address, and contact information.
• Financial and Commission Records: Retained for at least seven (7) years for tax and accounting compliance.
• Anonymized Analytics Data: May be retained indefinitely in aggregated, de-identified form.

When personal information is no longer needed, we will securely delete or anonymize it.

Fundor is designed to be used by student athletes, some of whom may be under the age of 18. We comply with the Children's Online Privacy Protection Act (COPPA).

Users Under 13: We do not knowingly collect personal information from children under 13 without verified parental consent. If we discover that we have collected such information without consent, we will promptly delete it.

Users Ages 13 to 17: Student athletes between 13 and 17 may create accounts and use the Platform. We encourage parents and guardians to be involved in their child's use of the Platform.

Referred Individuals: The referral form is intended to be completed by adults (homeowners). We do not knowingly collect referral information from individuals under 18.

Parental Rights: Parents and guardians may at any time review their child's personal information, request its deletion, or refuse to permit further collection by contacting us at privacy@fundor.com.

We implement industry-standard safeguards to protect your personal information:

• Encryption: All data is encrypted in transit using TLS/SSL (HTTPS). Sensitive data is encrypted at rest.
• Authentication: We use Clerk, which supports secure login, session management, and multi-factor authentication.
• Access Controls: Role-based access controls limit what data each user type can view.
• Infrastructure Security: Our Platform is hosted on Vercel and uses Supabase for database services, both of which maintain SOC 2 compliance.
• Rate Limiting: API endpoints are protected by rate limiting to prevent abuse.
• Input Validation: All form submissions are validated and sanitized.

No method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@fundor.com.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out of Marketing: Opt out of marketing emails by clicking unsubscribe or contacting privacy@fundor.com.
• Revoke TCPA Consent: Revoke consent at any time by emailing privacy@fundor.com, replying STOP to any text, or requesting removal during any call. You may also need to opt out separately with each service partner.
• Account Deletion: Request full account deletion by contacting us. We will process within 30 days, except for legally required retention.

To exercise any of these rights, contact us at privacy@fundor.com. We will respond within 30 days.

Fundor and its service partners are committed to compliance with the TCPA, the Telemarketing Sales Rule (TSR), and all applicable Do Not Call (DNC) regulations.

• We maintain an internal Do Not Call list and will process requests within 30 days.
• We honor the National Do Not Call Registry. Our service partners are required to scrub call lists against the National DNC Registry.
• Consent provided through our referral form may constitute an Established Business Relationship (EBR) inquiry, which may permit contact until you revoke consent or request Do Not Call status.
• To be added to our internal Do Not Call list, email privacy@fundor.com with the subject line "Do Not Call Request."

If you are a California resident, you have additional rights under the CCPA/CPRA.

Categories of Personal Information Collected:

• Identifiers: Name, email, phone, IP address, account IDs.
• Commercial Information: Referral records, service interests, earnings data.
• Internet/Electronic Activity: Browsing history on our Platform, device information.
• Geolocation Data: Approximate location derived from IP address.
• Education Information: School name and team affiliation.

Your California Rights:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected.
• Right to Delete: Request deletion, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate information.
• Right to Opt-Out of Sale/Sharing: Sharing referral data with service partners may constitute "sharing" under CCPA/CPRA. Opt out by contacting privacy@fundor.com.
• Non-Discrimination: We will not discriminate against you for exercising your rights.

To submit a request, contact privacy@fundor.com. We will respond within 45 days.

We use cookies and similar technologies to operate the Platform:

• Essential Cookies: Required for the Platform to function, including authentication sessions and security cookies. These cannot be disabled.
• Analytics Cookies: Used to understand how users interact with the Platform and to improve features.
• Functional Cookies: Used to remember your preferences, such as form progress.

We do not use third-party advertising cookies or tracking pixels for targeted advertising. Most browsers allow you to control cookies through their settings.

The Platform may contain links to third-party websites that are not operated by Fundor, including our service partners' websites. We are not responsible for the privacy practices of third-party sites. This Privacy Policy applies only to information collected through the Fundor Platform.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and provide prominent notice on the Platform. For registered users, we will send an email notification for significant changes. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, please contact us:

Fundor
Email: privacy@fundor.com
Website: fundor.io

For TCPA consent revocation or Do Not Call requests, email privacy@fundor.com with the subject line "TCPA Opt-Out" or "Do Not Call Request."

For California privacy rights requests, email privacy@fundor.com with the subject line "California Privacy Request."