The short version. We collect what we need to run Fund2Build. We don't sell your information or use it for advertising. We share it only with the companies that help us run the service, and only what each one needs.
Who we are. Fund2Build is run by Matthew Lerman, doing business as Fund2Build, a small business in Washington State, USA. To reach us, email help@mail.fund2build.com or use "Report a problem" at the bottom of any page.
What we collect
- Your account: your email address, your username, a scrambled (hashed) copy of your password if you set one, and when you joined.
- What you write: ideas, answers to the project questions, project pages, comments, votes, follows and problem reports. A problem report also keeps the page you were on and your browser type.
- Chats and demos: your messages, the replies, the demos, and the summaries made from them.
- Apps: each build's plan, code and check results. For a hosted app, the app and the data its users put into it, which we keep on its creator's behalf.
- Payments: amounts, your balance, top-ups, charges and refunds, and Stripe's reference numbers for them. You type your card number on Stripe's page; we never see or store it.
- Top-ups: your billing state and ZIP code (for sales tax records).
- Backing: your pledges and their history, the agreement you ticked (with the versions of these Terms and this notice), your billing state and ZIP code (for sales tax records), your billing country, and your card's brand and last 4 digits.
- Hosting by card: your billing state, ZIP code and country, and your card's brand and last 4 digits, for each card you save to pay for hosting; and each hosting charge's amount, sales tax and Stripe's reference numbers.
- Emails we send you about backing: a record of each one (the project, the amount and your account) and whether it was sent. Sign-in emails aren't kept.
- Emails you send us: your email address and what you write.
- Technical information: our hosting company's logs of requests to the site (such as IP address, browser type, pages and errors), and one cookie that keeps you signed in. We use no advertising or tracking cookies and no analytics services.
- Speaking instead of typing: your browser turns your speech into text, usually with its maker's help. We never receive the sound, only the words you save.
How we use it. To run Fund2Build: sign you in, show your projects, write replies and make demos, build and host apps, take payments and give refunds, and send you emails about your account, projects, balance, hosting and pledges. To keep tax and accounting records. To keep the site safe and fix problems. We send no marketing emails.
- Stripe takes payments and saves cards: your email address, card and billing details, amounts and our account number for you.
- Resend sends our emails and our replies, and receives the emails you send us: your email address and the email.
- Railway runs the website and its database.
- Fly.io runs hosted apps: the app's code and the information people enter in it.
- Cloudflare stores our encrypted backups and the copies creators download of their hosted apps, and runs the addresses of hosted apps.
- Anthropic and OpenAI run the AI that writes chat replies, demos, project summaries and app code: they receive your project's content and your chat messages, never your payment details. When you email us or report a problem, we may use Anthropic's Claude to read it and help write our reply; that account is set so Anthropic doesn't train on it. Under their business terms they don't use it to train their models. Most of it they delete within 30 days; what their chat and build tools store for us stays until we delete it, and anything flagged for misuse may be kept longer, or for as long as the law requires.
- GitHub keeps each hosted app's code in a private repository, and publishes app code when a creator chooses to make it public.
- Everyone: what you share is public (a shared project page, your username, your comments). A link-only page is visible to anyone with its link.
- When the law requires it, to protect someone's safety, or if Fund2Build is sold or merged (the new owner would have to keep these promises).
How long we keep it
- Your account, projects and chats: while your account is open.
- Top-ups' billing state and ZIP code: 5 years after the top-up (Washington's period for tax records), then deleted.
- Backers' state, ZIP code and card ending: 5 years after the pledge ends (Washington's period for tax records), then deleted. The permanent pledge record keeps the amount, the agreement, Stripe's reference numbers, the country, and a fingerprint of those details that can't be turned back into them once they're deleted.
- Hosting cards' state, ZIP code and card ending: 5 years after that hosting ends (Washington's period for tax records), then deleted. The charge records are kept with our other payment records.
- Payment, balance and pledge records: kept, because our money records must always add up and tax law requires them.
- Records of emails we sent: kept.
- Emails you send us: your email address and up to 2,000 characters of what you wrote; attachments aren't kept. Problem reports: what you wrote, up to 2,000 characters, and your account if you were signed in. Both are kept until you ask us to delete them, then deleted within 30 days. Our replies are kept and deleted with them. Resend also keeps its own copy of the emails you send us.
- A hosted app's data: 30 days after hosting stops, then deleted.
- Backups: encrypted and kept for 30 days, so something deleted can stay in a backup for up to 30 more days.
- Logs: as long as our hosting company keeps them.
Your choices
- See or get a copy of your information: ask us. Creators can also export a hosted app's data and download their accepted build's code themselves.
- Correct it: most things can be edited on the site; ask us for the rest.
- Delete it: ask us to close your account. Within 30 days we delete your information or remove your name from it, except what we must keep: payment, pledge and tax records and the permanent records above. Public comments stay, shown without your name.
- Stop sharing a project at any time until you agree to its backing rules.
To ask, email help@mail.fund2build.com or use "Report a problem" at the bottom of any page. We answer every request within 30 days.
Keeping it safe. Sign-in links instead of shared passwords, hashed passwords, encrypted backups, and access limited to the person who runs Fund2Build. No system is perfect: if a breach affects your information, we'll tell you as the law requires.
Children. Fund2Build is for people 18 and older. If we learn an account belongs to someone younger, we close it and delete its information.
Where it's kept. In the United States, and with our service providers wherever they operate.
Changes. The version and date are at the top. For an important change we'll put a notice on the site or email you before it applies.
Contact. Matthew Lerman, doing business as Fund2Build, 100 E. 3rd Ave. PO Box #305, Ellensburg, WA 98926, USA. Email help@mail.fund2build.com, or use "Report a problem" at the bottom of any page.