Privacy Policy

FUNDesk ("FUNDesk", "we", "us") provides a CRM and communications platform for commercial finance brokers. This policy explains what data we collect, how we use it, and the choices you have. It applies to fundesk.ai and the FUNDesk application.

Information we collect

We collect only what we need to run your account and the features you turn on.

• Account information. Your name, email, and workspace details when you register.
• Connected accounts. When you connect an email provider (Google or Microsoft), we store encrypted access tokens so we can send and sync mail on your behalf.
• Usage data. Log data, device and browser information, and product analytics used to operate and secure the service.

We do not collect, buy, or assemble our own database of businesses or consumers, and we do not mine your workspace to build one.

Your workspace data

Whatever you and your team put into a workspace stays yours. We hold it only so we can show it back to you and run the features you use. We do not sell it, rent it, share it with other workspaces, use it for advertising, or use it to train AI models. Our staff do not access it except when you ask us for support, when we have to investigate abuse or a security incident, or when the law requires it.

How we use your information

We use your information to provide the product, authenticate you, send and receive email you initiate, thread replies onto the right conversation, provide support, secure the platform against abuse, and meet legal obligations. We do not sell your data.

Messages you send to the AI assistant are processed through Anthropic to produce a response. They are not used to train AI models. A preference you ask FUNDesk to remember is encrypted at rest, and FUNDesk is designed not to keep credentials, sensitive identifiers, or financial instructions as AI memory.

Google user data and Limited Use

When you connect a Google account, FUNDesk requests access to your Gmail so it can provide the email features you enable inside your workspace: sending email on your behalf, syncing and threading the conversations you run through FUNDesk, and processing incoming mail you direct FUNDesk to handle.

FUNDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data solely to provide and improve the in-product email features above.
• We do not transfer or sell Google user data.
• We do not use Google user data for advertising.
• We do not allow humans to read Google user data except (a) with your explicit consent, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data is aggregated and anonymized so it can no longer identify you.

You can disconnect a Google account at any time in Settings, which revokes FUNDesk's access going forward.

How we share information

We share data with service providers that host and operate the platform (for example, cloud hosting, database, email delivery, and analytics providers), only as needed to run the service and under confidentiality obligations. We may disclose information to comply with law or to protect the rights and safety of users and the public.

Inside your own workspace, a preference the assistant proposes to share with the whole team goes to your workspace admins for review, and that review screen shows which member it came from. Nothing else from your assistant conversations is shown to other members.

Data security

We protect your data with encryption in transit and at rest for sensitive fields (including connected-account tokens and identifiers such as SSN, EIN, and date of birth), access controls, and tenant isolation enforced in the database so one workspace cannot reach another's data. No system is perfectly secure, but we work to protect your information.

Data retention

We keep your workspace data for as long as your account is active or as needed to provide the service. You may request deletion of your data as described below, subject to legal retention requirements.

AI memory runs on a shorter clock. A pending suggestion no admin decides is removed after 30 days. The decision record, which does not contain the suggestion text, is removed 90 days later. Clearing or forgetting a memory removes its stored text, including from any short-lived encrypted copy kept to recover from an interrupted save.

Your choices

You can access and update your information in the app, disconnect integrations, and request export or deletion of your data by contacting us. Depending on where you live, you may have additional rights over your personal data.

In AI memory controls, you can pause learning, add or correct a saved preference, export your personal memory, forget individual facts, or forget everything. Workspace admins have the same controls over shared workspace memory.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy or your data? Email dev@fundesk.ai. See also our Terms of Service.