Privacy Policy

1. Introduction

Fundflow Technologies Pte. Ltd. (UEN: 202614635N), a private company limited by shares incorporated in Singapore ("we," "our," or "us"), is committed to protecting the privacy and security of your information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our fund flow tracking and analytics platform (the "Service").

This policy is designed in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and other applicable data protection regulations. By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, organization name)
• Fund data and financial information you input into the platform
• Documents you upload (capital account statements, notices, quarterly reports)
• Communications with our support team
• Payment and billing information

2.2 Information Collected Automatically

• Log data (IP address, browser type, access times)
• Device information (hardware model, operating system)
• Usage data (features used, actions taken within the platform)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process and extract data from uploaded financial documents using AI-powered analysis
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations

4. AI-Powered Document Processing

Our Service uses artificial intelligence to extract and analyze data from financial documents you upload. Document content may be processed by third-party AI providers (such as Anthropic) solely for the purpose of data extraction. These providers are contractually bound not to retain, train on, or use your data beyond the immediate processing request. We do not use your financial data to train any AI models.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Organization-level data isolation with Row Level Security (RLS)
• Regular security audits and vulnerability assessments
• Access controls and multi-factor authentication mechanisms
• Secure cloud infrastructure hosted in SOC 2 Type II compliant data centers

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Upon account termination, we will delete or anonymize your data within 90 days, unless retention is required by applicable law.

7. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who assist in operating our Service (e.g., cloud hosting, AI document processing), subject to confidentiality obligations
• Legal Requirements: When required by law, regulation, or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

8. Your Rights

Under the PDPA and other applicable data protection laws, you may have the following rights regarding your personal data:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Restrict or object to processing of your personal data
• Data portability (where technically feasible)
• Withdraw consent for data processing at any time

To exercise these rights, please contact our Data Protection Officer at privacy@fundflow.pro.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Singapore. These countries may have data protection laws that differ from those of Singapore. We ensure appropriate safeguards are in place for such transfers in compliance with the PDPA and other applicable data protection laws.

10. Cookies

We use essential cookies to maintain your session and ensure the Service functions correctly. We do not use third-party advertising or tracking cookies. You can control cookie settings through your browser preferences, though disabling essential cookies may affect the functionality of the Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at: