FunderFit

Privacy

Last updated: July 2026 · The short version: we collect what's needed to build, sell, protect, and deliver your report — and minimize it automatically.

What we collect

  • What you type in the intake form — organization name, email, org type, state, amount sought, optional EIN, and your mission/project text. Used solely to generate and deliver your report.
  • Payment — handled entirely by Stripe. We receive confirmation that payment succeeded and a reference ID; we never see or store your card details. Stripe's own privacy policy governs its processing.
  • Email delivery metadata — sent through Resend so your report reaches your inbox.
  • Abuse prevention — a short-lived, one-way hash of the connecting IP address is used to enforce an hourly form limit. We do not store the raw IP address in our application database.

What we deliberately don't do

  • No cookies, no third-party analytics, no ad trackers, no pixels. This site runs clean.
  • No selling or renting your information, and no sharing for advertising or unrelated marketing.
  • No marketing lists — you get your receipt and your report, and that's the last email unless you write to us.
  • Your mission and project text is processed through Anthropic's commercial API to generate your report. Anthropic states that commercial API inputs and outputs are not used for model training by default and are deleted from its backend within 30 days by default, subject to its usage-policy and legal exceptions.

Service providers

We disclose only the information needed for these providers to perform their role: Cloudflare hosts and protects the site and stored reports; Anthropic processes mission/project text to generate matches and report prose; Stripe processes checkout, fraud prevention, and payments; and Resend delivers report and operational emails. Their terms and privacy practices govern their processing.

What not to submit

Please describe your organization and program, not individual clients. Do not enter Social Security numbers, payment-card details, medical records, passwords, or other sensitive personal data in the mission or project fields.

Retention

Report web links and PDFs are retained for 30 days after delivery, then deleted from storage. Your mission, project, EIN, location, organization type, and requested grant amount are also erased automatically after 30 days. Unpaid, abandoned intake forms are deleted after two days. Minimal order records (who purchased, what was purchased, and whether it was delivered — never card data) are retained as required for accounting. Want your intake text deleted sooner? Email us and it's done.

The funder directory

Funder pages on this site are built from public records (IRS filings, federal databases) that are public by law. If you represent a foundation and believe a record is inaccurate, contact us with the correction and the source filing.

Contact

To ask what information we hold, request a correction or deletion, or raise a privacy concern, email support@funderfit.co. We may need to verify that you control the order email address before acting on a request.