This Privacy Policy describes how FundOps, Inc. ("FundOps," "we," "us," or "our") collects, uses, and protects information about you when you access our website at fundopsai.com or use the FundOps platform (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

Information we collect

We collect information in the following ways:

Account information. When you create an account or contact us, we collect your name, email address, organization name, role, and other registration details.
Fund and application data. We collect and store the content you submit to or through FundOps — including pitch decks, financial statements, deal notes, messages, calendar events, and any files uploaded to data rooms. This data belongs to you and your organization.
Usage data. We automatically collect log data when you interact with the Service, including IP addresses, browser type and version, pages visited, features used, session duration, and timestamps.
Communications. If you contact us for support, submit a demo request, or provide feedback, we retain those communications.
Cookies. We use session cookies to authenticate users and maintain your logged-in state, and analytics cookies to understand how the Service is used and improve it. You may disable non-essential cookies through your browser settings.

How we use your information

We use the information we collect to:

Operate, deliver, and improve the FundOps platform and its features
Power AI features — document analysis, due diligence report generation, and AI-assisted chat — using only your fund's own data as context
Authenticate users and enforce account security and access controls
Send transactional communications such as account confirmations, security alerts, and billing notifications
Respond to support requests, inquiries, and feedback
Analyze aggregated, anonymized usage patterns to improve platform reliability and develop new features
Comply with applicable legal and regulatory obligations

We do not sell your personal data. We do not use your fund data, applications, or uploaded documents to train external AI models or share them with any third party for marketing or profiling purposes.

Information sharing

We share information only in the following limited circumstances:

Salesforce, Inc. — FundOps is built natively on Salesforce's enterprise cloud infrastructure. Your data is stored within Salesforce's SOC 2-certified environment and subject to Salesforce's security and compliance controls.
Service providers. We work with trusted third-party vendors for specific operational functions — such as transactional email delivery, error monitoring, and security scanning. These providers access only the data necessary to perform their function and are contractually bound by data protection requirements.
Legal requirements. We may disclose information when required by applicable law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users.
Business transfers. If FundOps is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy.

Data retention

We retain your account and fund data for as long as your account remains active. When you close your account, we retain your data for up to 90 days to allow for recovery, after which it is permanently deleted from our systems — except where longer retention is required by law or legitimate business need.

Audit logs may be retained for up to 7 years to comply with financial regulatory requirements applicable to our fund-manager customers.

You may request deletion of your personal data at any time by contacting us. We will respond to all deletion requests within 30 days.

Security

We take the security of your data seriously. FundOps inherits SOC 2 Type II and ISO 27001 certification from Salesforce's underlying infrastructure. Additional measures include:

All data encrypted in transit using TLS 1.2 or higher
All data encrypted at rest using AES-256
Role-based access controls that you configure — limiting who within your organization can view or edit specific applications and documents
Multi-factor authentication supported and recommended for all accounts
Regular internal security reviews and third-party penetration testing
An immutable audit trail logging every access and change made within the platform

No method of transmission or storage is 100% secure. While we use industry-standard safeguards, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at fundops@innovagentsai.com.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access. Request a copy of the personal data we hold about you.
Correction. Update or correct inaccurate data through your account settings or by contacting us.
Deletion. Request that we delete your personal data, subject to certain legal retention requirements.
Portability. Request an export of your data in a machine-readable format.
Objection. Object to certain processing activities, including direct marketing.
GDPR (EEA users). If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation. Our primary legal basis for processing is the performance of our contract with you, with supplemental processing based on legitimate interests or legal obligation.
CCPA (California residents). You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of any sale of your personal information. We do not sell personal information.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

Children's privacy

The Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform at least 14 days before the changes take effect. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

FundOps, Inc.
Privacy inquiries: fundops@innovagentsai.com
Website: fundopsai.com