Data protection controls
Fundable processing is designed around consent, purpose limitation, access control, auditability, and applicable data-protection obligations.
Data processing
How Fundable handles business and document data.
Fundable separates public directory fields from private business, founder, bank, investor, provider, supplier, and generated-output records.
Purpose limitation
Documents are processed for business evaluation, business-loan pre-screening, marketplace review, compliance readiness, and consented partner access only.
Private buckets
Uploaded files and generated outputs are stored in private Fundable buckets and exposed through permissioned signed URLs.
Processing records
Uploads, document views, workflow runs, risk flags, access requests, OTP delivery attempts, and admin reviews are logged.
WhatsApp data use
WhatsApp numbers are used for OTP delivery, account continuity, and user-requested support. Sensitive files require consent before processing.
User rights route
Users can request access review, correction, restriction, complaint handling, or deletion evaluation through the review desk.