Privacy Policy

Effective Date: 12/31/2022
Fundamatic, Inc. ("Company," "we," "our," or "us") is committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR) where applicable. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
 
1. Your Rights Under the CCPA
If you are a California resident, you have the following rights under the CCPA:
  • Right to Know: Request details about the categories and specific pieces of personal information we collect, use, and disclose.
  • Right to Delete: Request deletion of your personal information, subject to legal and operational exceptions.
  • Right to Opt-Out of Sale or Sharing: We do not sell or share personal information. If this changes, we will provide a "Do Not Sell or Share My Personal Information" option.
  • Right to Non-Discrimination: Exercising your CCPA rights will not result in discriminatory treatment.
To exercise your rights, contact us at privacy@fundamatic.com. We may require identity verification to process your request.
 
2. Your Rights Under the GDPR
If you are located in the European Economic Area (EEA) or the UK, you have the following rights under the GDPR:
  • Right to Access: Request a copy of your personal data that we hold.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data in certain circumstances.
  • Right to Restrict Processing: Request restriction of processing under certain conditions.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Data Portability: Request your personal data in a structured, machine-readable format.
To exercise these rights, contact us at privacy@fundamatic.com. If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority.
3. Legal Bases for Data Processing
We process personal data based on the following legal bases:
  • Contractual Necessity: To provide services you request.
  • Legal Obligation: Compliance with legal and regulatory obligations.
  • Legitimate Interests: For security, fraud prevention, and service improvements.
  • Consent: When required, we obtain your explicit consent (e.g., for marketing or cookies).
4. Data Collection and Use
We collect personal information only as necessary to provide our services and fulfill legal obligations.
Actively Collected Information:
  • Account Information: Name, business name, email address, registration details.
  • Communication Data: Emails, customer support inquiries.
Passively Collected Information:
  • IP Address: Used for security, request throttling, and performance optimization.
  • Session Cookies: Temporary cookies for user authentication that expire when the session ends.
  • MFA Cookies: Used for multi-factor authentication (MFA) to enhance account security.
We do not collect personal data for marketing purposes or share data with third parties for their marketing use.5. Data Retention and Deletion
  • Personal data is retained only as long as necessary for the purposes stated in this policy.
  • Data can be deleted upon request via privacy@fundamatic.com, unless retention is required by law.
  • Cookies expire based on their type (see Section 6 below).
6. Cookie Policy and Consent
We use essential cookies for security and authentication. Under GDPR, non-essential cookies require user consent.
  • Session Cookies: Maintain user authentication during login (expire when session ends).
  • MFA Cookies: Support multi-factor authentication (expire over time or removed manually).
 7. Data Storage, Transfers, and Security
  • We implement technical and organizational measures to protect your data, including firewalls, encryption, and MFA.
  • In the event of a data breach, we will notify affected individuals and regulatory authorities in compliance with applicable laws.
 8. Children's Data
  • Our services are not intended for children under 16 (under 13 for CCPA compliance).
  • We do not knowingly collect data from children. If we become aware of such collection, we will delete it promptly.
9. Contact Information
For privacy-related inquiries or to exercise your rights, contact us at:
Email: privacy@fundamatic.com
Mailing Address: Fundamatic, 140 Broadway, New York, New York 10005.
 
This policy may be updated periodically. We will notify users of significant changes where required by law.
Last updated: 12/31/2022