Privacy policy

What Fundraising Fox is

Fundraising Fox is a free, public directory of investors and startups, plus an optional account that helps founders find warm paths to investors. The public directory is built from public sources (see our methodology). This page covers what we hold about people listed in the directory, and what we store about you when you use the site or create an account.

If you're listed in the directory

The directory profiles investors, founders and executives in their professional capacity. For a listed person we may hold: name; current and past roles, firms and companies; investments, board seats and funds; education; public professional profiles (such as LinkedIn, X or a personal site); a photo; work contact details that you or your organization published; and a short summary we write ourselves from those sources. We do not collect home addresses, personal phone numbers, family details, or special-category data (health, religion, politics and the like).

Where it comes from.Your organization's own website, regulatory filings (for example SEC Form D and Form ADV, Companies House), news and press releases, public professional profiles, accelerator and program directories, and public datasets. Every fact is stored with its source.

Why, and on what basis. To help founders find the investors who fit their company and understand who they are approaching — including showing a signed-in founder which people in their own network share a professional history with you and could make an introduction. Our legal basis under the UK and EU GDPR is legitimate interests (Article 6(1)(f)). We have weighed that interest against yours and limit the directory to information about your professional role. Our assessment is available on request.

Who sees it. Anyone visiting the public site; signed-in users, including through AI assistants they connect to their account; and the service providers listed below. We do not sell personal data.

How long. While it stays accurate and relevant to your professional role. Profiles are refreshed from their sources, and facts that no longer hold are corrected or removed.

Your rights. You can ask for a copy of what we hold, have it corrected, have your contact details hidden, or object to being listed and have your profile removed. When you object we delete your profile and the data behind it, keeping only a minimal record (your name and profile identifiers) so that it is not added back from public sources. Email privacy@fundraisingfox.com from an address we can tie to you (ideally your work address) and name the profile. We respond within one month. You can also complain to your data-protection authority — in the UK, the Information Commissioner's Office.

If you just browse

No account is needed and no personal profile is built. Optional features store small cookies on your device: which directory profile you selected as yourself (ff_me), search-credit counters, and a signed session cookie if you sign in. We do not run third-party advertising or cross-site tracking.

If you sign in with Google

We store your name, email address, and profile photo from your Google account to create your account.

Gmail data

If you connect Gmail, we scan message headers (from, to, cc, bcc, subject, date, and Gmail's category labels) to work out who you already correspond with. For each conversation we store the counterparty's address and display name, the date, the subject line, and the short preview snippet Gmail itself shows — enough to remind you where a conversation left off — plus per-correspondent totals.

• We never store full message bodies or the files you attach. Message text is read in exactly two places, both transiently:
  • To write your private “where things stand” relationship summaries, the text of your most recent messages with a contact (plus the titles and dates of meetings with them, if you connected Calendar) is sent to our AI provider, Anthropic, which returns a short summary. The text is then discarded; only the summary is kept, visible only to you.
  • For investors you correspond with, we record the namesof files and the links you exchanged, so you can find them again — never the files' contents.
• Google user data is never used to develop, improve, or train generalized artificial-intelligence or machine-learning models— ours or anyone else's. Anthropic processes summary text only to return your summary, under commercial terms that do not allow it to be used to train its models.
• Your contact data is shown only to you, signed in to your own account (and, only as described below, to a cofounder you add). It is never published, shown to other users, sold, or used for advertising. When we recognize a contact as someone in our public directory (so your introduction paths can use them), that match is stored privately for your account only — addresses from your inbox are never added to the public directory.
• The one exception is a cofounder you add yourself. When you invite your cofounder from your Team page and they sign up through your invitation, each of you sees the intro routes the other's network opens: which people in our public directory they know, and how strongly (for example “12 emails” or “connected on LinkedIn”). Your cofounder never sees your email addresses, message subjects or contents, meetings, or summaries, and contacts who aren't in the public directory are never shown to them. A link accepted from a different address than the one you invited stays off until you confirm it, and either of you can stop sharing at any time from the Team page.
• One thing is learned in aggregate: an organization's email address format (for example first.last@), used to suggest likely addresses for other people there. It is kept only when at least two different people at that organization share it, it is never an address and never tied to you, and it is never used to suggest an address for someone known from anyone's inbox.
• Google access tokens are stored encrypted and used only to run your scan.
• If you also connect Google Calendar (read-only), we store only event titles, dates, and attendee addresses for meetings you attended — never event descriptions, notes, or attachments — so your relationship summaries know about calls, not just email. The same rules above apply: visible only to you, deleted on disconnect.
• If you connect Google Contacts(read-only), we read the names, email addresses, and profile photos of your saved contacts and of the people Google lists as “other contacts” (those you've corresponded with), so your network is ready before the email scan finishes and faces appear next to names. They are stored for your account only, shown only to you, never added to the public directory, and deleted on disconnect.
• Disconnecting your account deletes your tokens and every stored contact row. You can also revoke our access any time at myaccount.google.com/permissions.

Fundraising Fox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Google user data is used only to provide the user-facing features described here, is never transferred to third parties except as necessary to provide those features or comply with the law, is never used for advertising, and is never read by humans except with your explicit consent, for security purposes, or to comply with the law.

Data you add yourself

Details you optionally provide — such as a LinkedIn URL — are used to find more introduction paths for you. They strengthen your own view and are not published.

Shared decks

Founders can upload a deck and share it by link. The files are stored privately (Cloudflare R2) and shown only to people who open the link. When you view a shared deck, we record what you give us and how you read it: the email you enter (if the link asks for one), approximate location from your IP address (country, sometimes city), device and browser type, when you opened it, the time spent on each page, and whether you downloaded or forwarded it. The founder who shared the deck sees this, and may see your public Fundraising Fox profile if your email matches one. We use it for nothing else, and it is deleted when the founder deletes the deck. Messages you send from a deck's last page go to the founder by email.

Who processes your data

The site runs on Cloudflare and stores data with Supabase (Postgres, hosted in the US); deck notification emails are sent through Resend; relationship summaries are written by Anthropic (see Gmail data above). We do not sell personal data, and share it only with these processors to run the features described here, or if required by law.

Retention and deletion

Account and contact data is kept while your account exists. Disconnecting your account from the welcome page deletes your account row, tokens, scan state, and all contact summaries immediately. Directory profiles are covered above. For anything else, email privacy@fundraisingfox.com.

Changes

We'll update this page when our practices change, with the date above. If a change materially affects Gmail data handling, we'll ask for your consent again.