Who we are
FundTogether is the data controller for the personal data described here. The registered operating entity, address and Data Protection Officer contact will be published once confirmed by counsel. Until then, privacy queries can be raised through in-app support.
Data we collect
Account data: name, email, phone (if provided), avatar and country. KYC data (hosts, providers, withdrawals): government ID images, selfie, business registration documents and bank account details. Pool activity: pools you create, back or comment on, votes, itinerary contributions and reviews. Payment metadata: payment gateway ids, last-4 digits, currency and amount — FundTogether does not store full card numbers. Device/log data: IP address, user agent and coarse location for security. Cookies and local storage as described in the cookies section.
How we use your data
To operate the platform: create accounts, run KYC, route payments to gateways, hold funds in escrow, execute payouts, deliver notifications, run reviews and reputation, and provide support. To keep the platform safe: fraud detection, rate limiting, staff moderation and dispute resolution. To improve the product: aggregated analytics on how features are used. To comply with legal obligations: tax records, AML checks, responding to lawful requests.
Legal bases
Contract performance (operating the pool you joined), legitimate interest (safety, fraud prevention, product improvement), consent (marketing, non-essential analytics cookies) and legal obligation (KYC/AML, tax). You can withdraw consent at any time — see "Your rights".
Payment data and USD processing
Card details are collected and stored by the routed payment gateway (currently Stripe for USD/global; local providers where enabled). FundTogether receives only tokens, last-4 digits and gateway ids. USD payments made from LKR cards are converted by the payment gateway at its own reference rate; FundTogether does not set that rate and does not store your card. On-site LKR equivalents next to USD amounts are indicative only and use a reference rate for display.
Storage, encryption and location
Data is stored on managed cloud infrastructure with encryption in transit and at rest. KYC documents are held in private buckets with row-level access. Bank account numbers are encrypted at the application layer with a rotating symmetric key. Data may be processed in regions outside your country of residence subject to appropriate safeguards.
Who we share data with
Payment gateways (to process contributions, refunds and payouts). Verified Providers (only what is needed to fulfil a confirmed booking: your name, contact details agreed in-app and the service address). Email delivery provider (Resend). Fraud, analytics and error monitoring vendors listed in the cookie notice. Law enforcement and regulators when we are legally required to respond. We do not sell your personal data.
Cookies and analytics
Essential cookies keep you signed in, remember your country scope, and protect against abuse — these are always on. With your consent (via the cookie banner) we also use product analytics (PostHog) and error monitoring (Sentry) to improve the product. You can change your choice at any time from the "Cookie preferences" link in the footer. Non-essential cookies are off by default until you accept them.
Your rights (including PDPA)
Under Sri Lanka's Personal Data Protection Act, GDPR (where it applies) and comparable laws you have the right to: access the data we hold about you; correct inaccuracies; request deletion (subject to legal retention below); object to or restrict certain processing; port your data; withdraw consent for non-essential processing; and lodge a complaint with the Data Protection Authority of Sri Lanka or the equivalent regulator in your jurisdiction. To exercise any of these rights use in-app support; we will respond within statutory timelines.
Retention and deletion
Account and pool records are retained while your account is active. KYC and payment records are retained for the period required by AML and tax law (typically 6–7 years) even if you close your account. Notification and log data is retained for up to 12 months. When you request deletion we anonymise remaining records that must be kept for legal reasons and remove everything else within 30 days.
Automated decision-making
Rate limits, fraud heuristics and the reports auto-hide threshold are automated. These are safety controls and do not produce legal effects on you; final KYC, refund and moderation decisions are made by human staff.
Children
FundTogether is not intended for users under 18. If you believe a child has provided personal data please contact support so we can remove the account.
Changes to this policy
Material changes will be notified in-app or by email at least 14 days before they take effect. The date at the top of this page shows the current version.
Identity verification (KYC) data
What we collect: document type and number, full legal name, date of birth, mobile number, full residential address, country, images of the front (and back where applicable) of your ID document, and a selfie. Why: to confirm you are a real, unique adult before you host a pool, back a pool, register as a Provider or withdraw money, and to meet AML obligations. How it is stored: form fields are stored in a restricted table that only you and verification staff can read; images go to a private storage bucket with row-level access — they are never public and never shown to other users, hosts, providers or backers. Who sees it: only trained FundTogether verification staff, plus regulators or law enforcement where we are legally required to disclose. Purging: as soon as a submission is approved or rejected, the ID images and selfie are permanently deleted from our cloud storage and the submission is marked as purged — we keep only the decision, the reviewer, the timestamp and the minimum record required by AML/tax law (typically 6–7 years). Rejected submissions are also purged, so you upload fresh images if you retry. Notifications: you receive an in-app and email alert when your submission is received, approved or rejected (rejections include the reason). Your rights: you can ask what verification data we hold, correct it, or request deletion of anything not covered by the legal retention period.