Privacy
Last updated: September 2026 · The short version: we collect what's needed to build, sell, protect, and deliver your report — and minimize it automatically.
What we collect
- What you type in the intake form — organization name, email, org type, state, amount sought, optional EIN, and your mission/project text. Used solely to generate and deliver your report.
- Payment — handled entirely by Stripe. We receive confirmation that payment succeeded and a reference ID; we never see or store your card details. Stripe's own privacy policy governs its processing.
- Email delivery metadata — sent through Resend so your report reaches your inbox.
- Abuse prevention — a short-lived, one-way hash of the connecting IP address is used to enforce an hourly form limit. We do not store the raw IP address in our application database.
- Privacy-minimal sales measurement — daily totals for successful free-matcher searches, checkout starts, paid orders, deliveries, and refunds. Matcher totals contain no visitor identifier. A checkout may also carry a short source, campaign, and landing-page label from its link; that label is stored with the resulting order so we can tell which FunderFit pages or promotions lead to sales. It never includes your mission or project text.
What we deliberately don't do
- No cookies, no third-party analytics, no ad trackers, and no advertising pixels. Sales measurement is first-party, aggregate, and limited to the events described above.
- No selling or renting your information, and no sharing for advertising or unrelated marketing.
- No marketing lists — you get your receipt and your report, and that's the last email unless you write to us.
- Your mission and project text is processed through Anthropic's commercial API to generate your report. Anthropic states that commercial API inputs and outputs are not used for model training by default and are deleted from its backend within 30 days by default, subject to its usage-policy and legal exceptions.
Service providers
We disclose only the information needed for these providers to perform their role: Cloudflare hosts and protects the site and stored reports; Anthropic processes mission/project text to generate matches and report prose; Stripe processes checkout, fraud prevention, and payments; and Resend delivers report and operational emails. Their terms and privacy practices govern their processing.
What not to submit
Please describe your organization and program, not individual clients. Do not enter Social Security numbers, payment-card details, medical records, passwords, or other sensitive personal data in the mission or project fields.
Retention
Report web links and PDFs are retained for 30 days after delivery, then deleted from storage. Your mission, project, EIN, location, organization type, and requested grant amount are also erased automatically after 30 days. Unpaid, abandoned intake forms are deleted after two days. Anonymous daily matcher totals are retained for 180 days. Minimal order records (who purchased, what was purchased, whether it was delivered, and its non-personal source label — never card data) are retained for accounting and sales measurement. Want your intake text deleted sooner? Email us and it's done.
The funder directory
Funder pages on this site are built from public records (IRS filings, federal databases) that are public by law. If you represent a foundation and believe a record is inaccurate, contact us with the correction and the source filing.
Contact
To ask what information we hold, request a correction or deletion, or raise a privacy concern, email support@funderfit.co. We may need to verify that you control the order email address before acting on a request.