Privacy Policy

1. Who we are

FunderBuddy OS is operated by Commercial Capital Connect ("Commercial Capital Connect", "we", "us", "our"), 3379 Hwy 5, Douglasville, GA 30135. You can reach us at support@funderbuddyos.com.

FunderBuddy OS is a software platform. It is not a lender, funding provider, broker of record, or law firm.

2. What this policy covers

This policy covers the marketing website at funderbuddyos.com and the FunderBuddy OS application at app.funderbuddyos.com (together, the "Service").

Two different kinds of information run through the Service, and they are treated differently:

• Our data. Information about you as our customer or prospect: your name, your email, your brokerage, your billing. We decide how that is used, and this policy governs it.
• Your content. Information you and your merchants put into the platform: merchant applications, bank statements, deal documents, notes, contacts, and leads from your branded website. That is yours. You decide how it is used. We process it on your instructions in order to run the platform for you. See section 6.

3. Information we collect

Information you give us

• Signup and inquiry. Email address, name, brokerage name, and which plan you are interested in.
• Account. Login credentials, profile details, brand settings, team member invitations, and your subdomain or custom domain.
• Billing. Payments are processed by Stripe. We never see or store your full card number. We receive the last four digits, card brand, billing status, and the subscription record.
• Support. Whatever you send us in an email or support request.

Content you upload

• Merchant records, contact details, and credit profile information.
• Bank statements and other financial documents you upload for deal analysis.
• Deal documents, submission packets, and e-signed applications.
• Leads captured by your branded broker website.

Information collected automatically

• Server and application logs: IP address, browser and device type, pages or screens accessed, timestamps, and error traces.
• Authentication events such as sign in, sign out, and password reset.

We do not buy personal information about you from data brokers to build a profile of you.

4. This website specifically

The application at app.funderbuddyos.com uses strictly necessary cookies and browser storage to keep you signed in and to remember your workspace. Those are required for the product to function and cannot be switched off while you are logged in.

5. How we use information

• To create, run, secure, and support your account.
• To process payments, renewals, and cancellations.
• To deliver transactional email such as welcome messages, receipts, password resets, and service notices.
• To provide the features you asked for, including deal analysis, lender matching, submission packets, and your branded website.
• To detect fraud and abuse, enforce our Terms of Service, and protect the platform.
• To improve the product in aggregate, using usage patterns rather than the contents of your merchant files.
• To send you product and marketing email, which you can stop at any time. See section 12.
• To comply with law and respond to lawful requests.

We do not sell personal information, and we do not share it for cross context behavioral advertising.

6. Your customers and your merchants

When you upload a merchant application or a bank statement, that document usually contains another person's or another business's information. In that relationship you are the controller and we are the processor. Plainly: it is your data about your merchant, and we hold it and process it so the platform can do its job for you.

That means you are responsible for:

• Having the right to collect and upload that information, including any consent, notice, or authorization your merchant is owed.
• Your own privacy notice to your merchants and applicants.
• The accuracy of what you upload and what you do with the output.
• Your obligations under the laws of every state where you operate.

We do not use your merchant content to market to your merchants. We do not contact your merchants. We do not sell your merchant content to anyone, ever.

7. AI features

Some features use artificial intelligence: the AI Deal Analyzer that reads bank statements, the Stack Detector that flags recurring debits, and the in app FunderBuddy assistant.

• To produce those outputs, the relevant content is transmitted to third party AI model providers under contract with us. Email us for the current list of providers.
• We do not use your content to train our own models.
• AI output is a draft for a human to check. It is not underwriting, not legal advice, and not a funding decision. Verify before you rely on it.
• The Match Engine is deterministic and rules based. It does not send your deal to an AI model to be scored.
• FunderBuddy answers state compliance questions only from our Compliance Command Center data, not from general model knowledge, and those answers carry a notice to verify with the state regulator.
• On plans that support it, you may supply your own AI provider keys, in which case your content goes to your provider under your agreement with them.

8. Service providers

We use a small number of vendors to run the Service. Each receives only what it needs.

Provider	What it does	What it touches
Stripe	Payments and subscriptions	Billing details, card data (held by Stripe, not by us)
Supabase	Database, authentication, file storage	Account data and uploaded content
Resend	Transactional email	Email address and message content
Lovable	Application hosting	Application traffic and logs
Netlify	Marketing website hosting	Website requests and logs
AI model providers	Deal analysis and assistant responses	Only the content required for the request, see section 7

This list can change as the product changes. The current list is always available from support@funderbuddyos.com.

9. When we share information

We share information only in these situations:

• With the service providers above, to run the Service.
• On your instruction, for example when you send a submission packet or invite a team member.
• For legal reasons, when we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect rights, safety, or the integrity of the platform.
• In a business transfer, such as a merger, acquisition, or sale of assets. You will be notified, and this policy will continue to apply until you are told otherwise.

We do not share your information with lenders. We do not have a lender marketplace, and we do not route your deals to funders.

10. How long we keep it

• Account and content: for as long as your account is active.
• After cancellation: your content stays available for export for 30 days, then it is scheduled for deletion.
• Billing records: retained as long as required for tax and accounting purposes.
• Logs: retained on a rolling basis for security and troubleshooting.
• Marketing contacts: until you unsubscribe or ask us to delete you.

You can ask us to delete your content sooner. See section 12.

11. Security

• Traffic is encrypted in transit with TLS.
• Every workspace is isolated from every other workspace at the database level. One brokerage cannot see another brokerage's merchants, deals, or documents.
• Deal documents are stored in private storage, not on a public URL.
• Access to production systems is limited and authenticated.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your information, we will notify you as required by applicable law. If you believe your account has been compromised, email support@funderbuddyos.com immediately.

12. Your choices and rights

• Access and export. You can view and export your data from inside the application, or ask us for a copy.
• Correction. You can edit your account information at any time.
• Deletion. Email support@funderbuddyos.com and we will delete your account and content, subject to records we are required to keep.
• Marketing email. Every marketing email has an unsubscribe link. Unsubscribing does not stop transactional email such as receipts and security notices, because those are part of the service.
• Complaints. Email us first. We would rather fix it than have you find out from somewhere else.

We will not deny you service, charge you a different price, or give you a lower quality product because you exercised a privacy right.

13. State privacy rights

Depending on where you live, state law may give you the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale or of targeted advertising. We do not sell personal information and we do not use it for targeted advertising, so there is nothing there to opt out of.

To make a request, email support@funderbuddyos.com from the address on your account, or tell us enough for us to verify you are who you say you are. We respond within the time the applicable law requires. You may use an authorized agent where the law allows it.

If your request concerns information a broker uploaded about you as a merchant or applicant, contact that broker directly. They control that record. We will refer your request to them.

14. Children

FunderBuddy OS is a business product for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, email us and we will delete it.

15. Where data is handled

The Service is offered to businesses in the United States and Puerto Rico, and information is processed on infrastructure located in the United States. If you access the Service from outside the United States, you understand that your information will be handled in the United States.

16. Changes to this policy

We may update this policy as the product changes or the law changes. The effective date at the top always tells you which version you are reading. If a change is material, we will notify account holders by email or in the application before it takes effect. Continuing to use the Service after that means you accept the updated policy.

17. Contact us