Privacy Policy

1. Who we are

FunnelApp is a LaunchOut Digital product. LaunchOut Digital, 700 University Avenue, Toronto, Ontario M5G 1X6, Canada, operates FunnelApp and is responsible for the personal information it handles ("FunnelApp", "we", "us"). This policy covers funnelapp.io, the FunnelApp app, and the funnel pages and emails that businesses run on FunnelApp.

In this policy:

• Founders are the businesses and people who create a FunnelApp account.
• Visitors are people who view a funnel page built on FunnelApp.
• Leads and buyers are visitors who sign up, apply or buy on a funnel.

2. Our two roles

For founders, we decide how and why your account data is used. We are responsible for it. In privacy law terms, we are the controller.

For leads and buyers, the founder who runs the funnel decides how your details are used. The founder is responsible for that use. We store and process your details on the founder's behalf and follow their instructions. In privacy law terms, we are the processor or service provider.

If you signed up on a funnel and have a question about how your details are used, the business that runs that funnel is the best first contact. You can also write to us and we will pass your request on and help the business answer it.

3. What we collect from founders

• Account details: name, email address and sign-in details. Sign-in runs through Clerk, including Google sign-in if you use it.
• Business details: your business name, website address, offer, brand colours and the other details you enter or ask FunnelApp to read from your website.
• Your content: the funnels, pages, emails, images, videos, testimonials and settings you create or upload.
• Billing details: your plan, invoices and payment status. Stripe handles card details. We never see or store your full card number.
• Connections: if you connect Stripe, Meta or TikTok, we store the account identifiers and access tokens needed to run those connections. Tokens are encrypted.
• Messages to Copilot and support: what you ask the in-app assistant and what you send us.
• Usage and technical data: what you do in the app, how much of your plan you use, your IP address, browser and device type, and error logs.

4. How we use founder data

• To run your account, host your funnels and send your emails.
• To write drafts with AI from the details you give us.
• To bill you and apply your plan's limits.
• To keep FunnelApp secure, prevent abuse and fix problems.
• To answer you when you contact us.
• To tell you about changes to the service, your account or these policies.
• To send you product news and tips, if you have not opted out. Every such email has an unsubscribe link.
• To meet our legal, tax and accounting duties.

Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you, our legitimate interest in running and improving a secure service, your consent where we ask for it, and our legal obligations.

We do not sell your personal information. We do not use your content to train AI models.

5. What happens when you visit or sign up on a funnel

When you visit, sign up, apply or buy on a funnel built with FunnelApp, the following may be collected on behalf of the business that runs it:

• Your name, email address and any answers you give in a form or application.
• What you bought, how much you paid, and your access to what you bought. Card payments are handled by Stripe on the business's own Stripe account. We never see your full card number.
• Which pages and steps you viewed, and how much of a video you watched.
• A consent record: the sign-up wording you agreed to, the time, the page, your IP address and your browser. This is kept as proof that you asked to hear from the business.
• Ad click identifiers, such as a Meta or TikTok click ID, if you arrived from an ad and the business turned on ad tracking.

The business uses these details to deliver what you signed up for, send you follow-up emails, and run its sales. We process them only to provide FunnelApp to that business.

Every email sent from a funnel has an unsubscribe link and an email preferences link. Unsubscribing stops that business's emails to you through FunnelApp.

6. Ad tracking on funnel pages

A business can choose to measure its ads with Meta or TikTok. When it does:

• The funnel page may load the Meta Pixel or TikTok Pixel, which can set their own cookies.
• In the EU, the European Economic Area, the UK, Switzerland and Quebec, the page asks before any ad tag loads. Nothing is shared unless you say yes. A business can also choose to ask everyone.
• When you sign up or buy, FunnelApp may send that event to the ad platform from our server. Your email address and lead ID are hashed before they are sent. Your IP address, browser details and ad click ID may be sent so the platform can match the event to an ad.

Meta and TikTok handle that data under their own privacy policies. funnelapp.io itself does not run ad tags today. If we add them, we will update this policy first and ask for consent where the law requires it.

7. AI features

FunnelApp uses Anthropic's Claude models to write funnel drafts, read a founder's website on request, answer Copilot questions, and reply first in the support chat. What you enter or ask us to read is sent to Anthropic to produce the result.

Under Anthropic's commercial terms, that content is not used to train its models. Please do not put sensitive personal information, such as health or financial details about real people, into AI prompts.

8. Who processes data for us

We use these service providers. Each one processes data only to provide its service to us, under a contract that requires it to protect that data.

• Vercel: hosting and delivery of the app and funnel pages. United States, with servers worldwide.
• Supabase: database and file storage. United States (AWS us-east-1).
• Clerk: founder sign-in and account security. United States.
• Stripe: FunnelApp subscriptions, and the connection to founders' own Stripe accounts. United States and other countries.
• Resend: sending funnel and account emails, and reporting bounces and complaints. United States.
• Cloudflare: video hosting, streaming and playback measurement. United States, with servers worldwide.
• Anthropic: AI writing, Copilot and the support chat's first replies. United States.
• Meta and TikTok: only when a founder turns on ad tracking, as described above.

We may change providers as the service grows. We will update this list when we do.

We may also share information if the law requires it, to protect people from harm or fraud, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

9. Where your data is stored

FunnelApp is a Canadian company. Our main database is in the United States, and our providers may process data in other countries. Data stored outside your country may be accessed by courts and authorities there under local law.

Where the GDPR or UK GDPR applies, we rely on our providers' standard contractual clauses or other approved safeguards for these transfers.

10. Cookies

We keep cookies to what the service needs.

• Sign-in cookies (set by Clerk) keep founders signed in.
• Dashboard preference cookies remember things like a collapsed sidebar or a hidden tip.
• A short-lived security cookie protects the Stripe connection step.
• Funnel cookies remember that a visitor signed up or paid, so the next step shows the right page and buyers can get back to what they bought.
• An ad consent cookie remembers a visitor's yes or no for 180 days.
• Meta and TikTok cookies, only on funnels where ad tracking is on and, where required, the visitor said yes.

You can clear or block cookies in your browser. Some parts of FunnelApp, such as signing in or moving through a funnel, will not work without them.

11. How long we keep data

• Founder accounts: while the account is open. When you ask us to delete your account, we delete it and its funnels, leads and emails within 30 days.
• Leads and buyers: for as long as the founder keeps them. Deleting a funnel deletes its leads. A founder can ask us to delete a lead at any time.
• Consent records: as long as the lead is kept, and after that only as long as needed to show that consent was given.
• Billing and payment records: as long as tax and accounting law requires, usually up to 7 years in Canada.
• Logs: for a short period, usually no more than 90 days, unless needed to investigate a problem.

Copies in backups, where they exist, are overwritten in the normal backup cycle.

12. Your rights

Depending on where you live, you can ask us to:

• Tell you what personal information we hold about you, and give you a copy.
• Correct it if it is wrong.
• Delete it.
• Give it to you in a portable format.
• Stop or limit some uses, including direct marketing.
• Withdraw consent you gave, without affecting what happened before.

These rights come from laws including Canada's PIPEDA, Quebec's Law 25, the GDPR, the UK GDPR, and California's CCPA and CPRA. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using your rights.

To make a request, email [email protected] from the address we know you by. We may need to confirm who you are. We answer within 30 days, or tell you if we need longer and why. If your request is about a funnel you signed up on, we will pass it to that business and help it respond.

If you are not satisfied with our answer, you can complain to a privacy regulator. In Canada that is the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information in Quebec. In the EU or UK it is your local data protection authority.

13. Security

Data is encrypted in transit. Payment connections and ad platform tokens are encrypted at rest. Access to production data is limited to the people who run FunnelApp and only when needed. We limit how often forms and AI features can be used to slow down abuse.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the relevant regulators as the law requires. If a breach affects a founder's leads or buyers, we will tell that founder without undue delay so they can meet their own duties.

14. Children

FunnelApp accounts are for adults. You must be at least 18 to open one. Funnels built on FunnelApp must not be aimed at children under 16. We do not knowingly collect personal information from children. If you believe a child has given us their details, email us and we will delete them.

15. Our privacy officer

FunnelApp's Privacy Officer is responsible for how we protect personal information and for answering privacy requests and complaints. Reach the Privacy Officer at [email protected], or by mail at LaunchOut Digital, 700 University Avenue, Toronto, Ontario M5G 1X6, Canada, marked "Attention: Privacy Officer".

16. Changes to this policy

We update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we will tell account holders by email or in the app before it takes effect.