Privacy Policy
Version 4 · Last updated 7 October 2026
This policy explains what personal information TriDiv Inc (“Fundalyze”, “we”, “us”) collects when you use fundalyze.ai and our related services, why we collect it, who else receives it, and what you can ask us to do about it. Questions go to hello@fundalyze.ai.
What we collect
Information you give us. When you sign up, contact us, or use the service, we collect information such as your name and email address, and the content you create or submit while using it. Some of it is required and some is optional; where it is required, we cannot provide the service without it.
Information collected automatically. As you use the service, we and the providers we work with collect information about your visit using cookies and similar technologies — including your IP address, approximate location, device and browser, the pages you view, the site that referred you, and how you interact with the service. Our analytics can include recordings of how pages are used, with what you type into form fields masked. When you are signed in, analytics is linked to your account by an internal ID, never by your name or email address.
Account activity records. When you are signed in, we keep a record of account activity — when you accepted our terms, your sign-ins, and the main actions you take — together with the time, your IP address, and your device and browser.
API, MCP and AI use. If you use our API or MCP server, we keep a fingerprint of each API key (never the key itself), the apps you allow to connect, and a record of each call: when it was made, which key or app made it, which tool it used and which company it asked about. When you use an AI feature, we record the model used, its size in tokens and what it cost us. We use these records for your daily limits, your usage figures and credits, billing, and to prevent abuse.
Payment information is given directly to our payment processor. We do not store card details on our servers.
How we use it
- To provide, maintain, personalise and improve the service.
- To communicate with you, including messages you have asked to receive.
- To understand how the service is used.
- To produce aggregated or de-identified statistics — for example, which companies are most researched — that no longer identify anyone.
- To measure and improve our advertising.
- To keep the service secure and prevent misuse.
- To prevent fraud, and to respond to payment disputes and legal claims.
- To meet our legal, tax and accounting obligations.
Where the GDPR or UK GDPR applies to you, we rely on your consent for marketing and non-essential cookies, on performance of our contract with you to provide the service, and on our legitimate interests in keeping it secure, preventing fraud, responding to payment disputes and legal claims, and understanding how it is used. We do not make automated decisions about you that have legal or similarly significant effects.
Who else receives it
We share personal information with the kinds of providers below, only so they can perform that function for us, and under obligations of confidentiality:
| Category | What they do for us |
|---|---|
| Hosting and infrastructure providers | Running the website, our servers, and the databases your data is stored in |
| Analytics providers | Counting visits and understanding which parts of the product get used, including recordings of how pages are used |
| Advertising and marketing partners | Measuring whether our ads work, and showing our ads to people likely to be interested |
| Error and performance monitoring providers | Telling us when something breaks so we can fix it |
| Email delivery providers | Sending the messages you ask for, and the ones you sign up for |
| Payment processors | Taking payment and managing your subscription. Your card details go directly to them; we never see or store them. If a charge is disputed, we send them — and through them the card network and the bank that issued the card — records of the purchase and of how the account was used |
| AI model providers | Generating the summaries and analysis you request. We send the text being analysed, not your account details |
| Professional advisers | Lawyers, accountants and auditors, where they need it to advise us |
We may also disclose information where the law requires it, to enforce our terms, to prevent fraud or respond to a payment dispute or legal claim, or to protect the rights or safety of anyone. If the business is sold or merged, information may transfer as part of it.
Cookies
We use cookies and similar technologies that are strictly necessary (signing you in, remembering your privacy choice), analytics (understanding how the service is used), and advertising (measuring and targeting our ads). In the EU, UK and EEA the analytics and advertising ones run only with your consent; elsewhere they run by default, and you can turn them off using the controls below. In the Fundalyze app, analytics can be turned off in the app's account settings, and in the EU, UK and EEA it runs only after you agree in the app. Your browser can also block or delete cookies, though the service may not work correctly without the strictly necessary ones.
Where your information goes
Fundalyze is operated from Canada, and your information may be processed and stored outside Canada, including in the United States. Laws there differ, and courts, law enforcement and regulators may be able to obtain access to it. Where required, transfers out of the EU or UK rely on Standard Contractual Clauses or another approved safeguard.
How long we keep it
We keep personal information only as long as we need it for the purposes described here, including to meet legal, tax and accounting obligations. We may keep anonymised information that can no longer identify you.
When you delete your account we delete your sign-in credentials and the content you created. Because a charge can be disputed after an account is closed, we keep two kinds of record for a limited time afterwards, together with the email address the account used so that they can be matched to a payment:
- Account activity records, including the record that you accepted our terms and the records of your API, MCP and AI use, for up to 18 months after your account is closed.
- Billing records — what you were charged, when, any refunds, and the credits you bought, were granted or spent — for up to 6 years, as tax law requires.
We use these retained records only to prevent fraud, to respond to payment disputes and legal claims, and to meet our legal, tax and accounting obligations, and we delete them when the period ends.
Your rights
Wherever you live, email hello@fundalyze.ai to ask for a copy of your information, to correct it, or to have it deleted (the records described under “How long we keep it” are kept for the periods stated there). We will respond within 30 days, and we may ask you to confirm the request from your account email first. We will not charge you and will not treat you differently for asking.
In the EU or UK you additionally have the right to restrict or object to processing, to receive your information in a portable format, to withdraw consent, and to complain to your data protection authority. In California and other US states with privacy laws you have the right to know, delete, correct, and opt out of sale or sharing for advertising. In Canada you have rights of access and correction under PIPEDA and may complain to the Office of the Privacy Commissioner.
Security
We take reasonable measures to protect your information, including encryption in transit and access controls. No system is perfectly secure. If a breach affects you, we will tell you.
Children
Fundalyze is not intended for anyone under 18 and we do not knowingly collect their information. If you believe someone under 18 has given us information, email us and we will delete it.
Changes
We may update this policy. When we make a material change we will post the new version here and tell you — by email where we hold your address — before it takes effect. Where the law requires your consent for a new use of your personal information, we will ask for it.
Contact
hello@fundalyze.ai
TriDiv Inc, Ontario, Canada
What changed
- Version 4, 7 October 2026: Added the records we keep when you use the API, the MCP server or an AI feature, and how long we keep them after an account is closed; added credits to billing records; removed the sentence about storing your own AI provider key, a feature we do not offer.
- Version 3, 5 October 2026: Added account activity records as a category of information; added fraud prevention, payment disputes and legal claims as a purpose, and the sharing of purchase and usage records when a charge is disputed; stated what we keep after an account is deleted and for how long (18 months for activity records, 6 years for billing records); named recordings of page use; replaced the fixed 30-day change notice with notice before a material change takes effect; said how analytics is turned off, or agreed to, in the Fundalyze app.
- Version 2, 10 September 2026: Added AI model providers as a recipient category and how connected AI keys are stored; added aggregated/de-identified statistics as a purpose; updated the payment-processor description; fixed the cookie opt-out reference; added a 30-day response time and identity check for rights requests; stated that we make no significant automated decisions; named the UK GDPR; aligned change notice to 30 days.
- Version 1, 20 August 2026: First published.