Last updated: 29 October 2026
Privacy Policy
Fundeed provides a portfolio intelligence website and software service for investment teams. This notice explains what information may be collected through our website, user accounts and optional connections; why it is used; who may receive it; and how people can exercise their choices. Some integrations and retention mechanisms remain subject to release-specific verification. We will not treat an internal policy as proof of a deployed technical control.
1. Operator and privacy contacts
Fundeed is operated by Binair CommV, enterprise number 1001.167.385, VAT BE 1001.167.385, Oktrooiplein 1 bus 201, 9000 Gent, Belgium. Write to privacy@fundeed.io for privacy questions and data rights, security@fundeed.io to report a security issue, or janet@fundeed.io for product support. No formal data protection officer is appointed.
2. Roles and sources of information
For account administration and the public Website, Binair CommV generally determines how personal information is processed. When an organisation uses Fundeed to manage its own portfolios and connected information, that organisation generally determines why the content is processed, and Fundeed processes it on the organisation’s instructions. Data may come directly from users, their organisation, connected services, uploaded files and use of the Website or application.
3. Website and account information
We may process names, business contact details, form messages, account identifiers, profile details, organisation and workspace memberships, authentication and session metadata, preferences, operational logs and other information supplied while using the Website or application. Website analytics or similar technologies, when enabled, are governed by their own consent and notice arrangements; we do not make an unconditional claim that no usage data is collected.
4. Google sign-in is separate from Google integrations
Google sign-in is an authentication method for identifying and signing into your Fundeed account. It may provide account identity information such as name, email and profile information. Signing in with Google does not itself connect your Gmail inbox or Google Calendar. Gmail and Calendar are optional, separately authorized connections that request additional permissions when enabled.
5. Optional Google Calendar access
If you choose to connect Google Calendar, Fundeed’s scheduling functionality can access event data, including meeting titles, times, descriptions, attendees and related calendar information. With the permissions granted to the integration, the software can read meetings and create, update or delete events on the connected calendar as instructed through its user-facing scheduling features. Google displays the permissions requested at connection time. Whether each operation is enabled in a particular deployed release should be confirmed before it is represented as available.
6. Optional Gmail access, including pre-filter retrieval
If you choose to connect Gmail for portfolio-update ingestion, the integration searches the inbox and retrieves messages, including sender information, headers, message bodies and PDF attachments. Tenant and portfolio sender-domain relevance checks occur after content retrieval. Consequently, unrelated messages or attachments may be retrieved into the processing flow before they are identified as irrelevant. Relevant source material can be stored and converted into reviewable portfolio information. The documented Gmail connector uses read-only access and does not request permission to send, modify or delete Gmail messages.
7. Connected tokens and permitted actions
Optional Google connections use OAuth authorization and may require access or refresh tokens so enabled functions can continue operating. Access is subject to the permissions you grant through Google. You may choose not to connect an optional service. Disconnecting a connection or revoking access from your Google Account affects future access; it does not automatically erase information already imported into a Fundeed workspace or delete source messages and calendar events in Google.
8. Why data is processed
Depending on the feature you use, information is processed to provide account access, secure workspaces, ingest source documents, prepare portfolio metrics and updates, support review workflows, coordinate meetings, generate draft reports, provide customer support, operate and improve service reliability, investigate misuse, and comply with applicable law. Legal bases vary by context and may include contract performance, legitimate interests, legal obligations and consent where required, including consent for optional access granted through Google.
9. Artificial intelligence and human review
Fundeed uses AI-assisted processing to interpret documents, email text and PDF content and to produce proposed portfolio updates, risk indicators and report drafts. Source content, prompts, relevant context and derived outputs may be transmitted to the configured AI service, identified in current product documentation as OpenAI, for these user-facing features. AI output can be inaccurate or incomplete and should be checked against the original source before consequential use. The precise deployed endpoint, account settings, provider retention and downstream uses must be confirmed for the relevant release before more specific commitments are made.
10. Who receives data
Based on the current service inventory, relevant recipients may include Microsoft Azure (application infrastructure, data storage, queues, monitoring and secret management), Auth0 (identity and authentication), OpenAI (AI interpretation of submitted or connected material), and Google (sign-in and user-authorized Gmail or Calendar API interactions). Authorized members of your organisation may also access material within their permissions. Additional operational vendors, such as analytics, delivery or other integration providers, must be disclosed if they receive personal or Google-derived data. Provider access, purpose and processing locations depend on actual configuration; no claim is made that all processing remains solely in the EU or that providers have no stored account data. Your organisation’s portfolio data is isolated from other organisations’ workspaces. Fundeed does not share it with users in other organisations.
11. Third-party processing and international transfers
Fundeed may use service providers to deliver the features you enable. Contracts, applicable safeguards, service regions and potential support access are reviewed by service and processing activity. Infrastructure hosted in a European region does not by itself establish that every provider, backup or support operation stays in the European Economic Area. We do not sell connected mailbox or calendar content. Any transfer or access to Google-derived information must be limited to the permitted user-facing purpose and subject to applicable Google requirements and consent. Fundeed’s use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. Fundeed does not use, transfer or sell this data to create, train or improve foundational or generalized AI or machine learning models, including through third-party AI providers.
12. Storage, retention and deletion
Different categories have different lifecycles. Active portfolio and other business records may be retained while needed to provide the organisation’s instructed service. Raw email payloads, PDF copies, temporary ingress files, derived records, OAuth credentials, application logs, queued work, backups and provider-side copies are not all deleted on the same schedule. The adopted internal retention schedule specifies a 90-day operational default and a 90-day account/service recovery or return window, with category-specific exceptions; tagged ingress payloads and email attachments have a documented 90-day lifecycle threshold measured from last modification. These are documented policy targets, not a claim that every deployed store currently enforces the period. Final operational periods, backup expiry, logs and provider-side retention remain subject to confirmation.
13. Disconnecting Google and removing imported content
Where the Service offers a Disconnect control, you can use it to stop a connection; you can also revoke its access in your Google Account. Disconnecting should not be understood as deleting previously imported Gmail messages, PDFs, derived portfolio records or calendar information within your organisation’s workspace. To seek removal of imported information, contact your organisation’s administrator or privacy@fundeed.io. Deletion may be subject to customer instructions, applicable legal obligations, backup expiry and documented retention exceptions.
14. Security measures and limits of assurance
Fundeed uses technical and organisational measures intended to restrict access to authorised users and service providers and to safeguard information. The development process includes automated security checks with defined scope limits. We do not claim Fundeed has SOC 2 certification, a completed full-scope penetration test, perfect tenant isolation or identical protection for all stores, backups and keys without specific supporting evidence. Certifications held by individual cloud or identity providers should not be interpreted as Fundeed certification.
15. Your choices and rights
You can choose whether to connect optional Google integrations, manage authorised access in Google, and ask your organisation about records it controls. Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing. Withdrawal of consent does not affect earlier lawful processing. Contact privacy@fundeed.io; requests regarding organisation-controlled portfolio data may need to be handled by that organisation with Fundeed’s assistance. You can lodge a complaint with the Belgian Data Protection Authority or another competent authority.
16. Changes to this notice
We may revise this notice as products, integrations, service providers or legal requirements evolve. The effective date and approved version will be shown when published. Material changes in the use of connected Google data require appropriate notice and, where necessary, renewed consent before a new purpose is implemented.
17. Further questions
For privacy matters: privacy@fundeed.io. For security reports: security@fundeed.io. For product support: janet@fundeed.io.