Privacy Policy

Last updated: 2026-06-17

This Privacy Policy describes how LetsFundly ("LetsFundly", "we", "us") collects, processes and shares personal data when you use www.letsfundly.com and related services (the "Service"). LetsFundly is the data controller for the processing.

By registering an account or using the Service you accept this policy and the specific consents you provide during registration and within the Service. If you do not accept this policy, do not use the Service.

1. Data Controller

The data controller is LetsFundly AB, reg. no. 559584-9885, c/o Venture Vault Capital, Stortorget 9, 211 22 Malmö, Sweden. Contact: info@letsfundly.com.

2. Personal Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, password (hashed), user role (company, investor, admin), phone number.
  • Company data (for company accounts):organisation number, company name, financial data, documents, contact persons, vision, team information, share offering terms.
  • Expressions of interest (for investor accounts):which listings you have engaged with, number of shares in the expression of interest, timestamp.
  • Payment data: handled by third-party payment providers (e.g. Stripe). We store transaction IDs and status, not card details.
  • Technical data: IP address, browser, device type, operating system, pages visited, referring website, timestamps, cookies and similar tracking technologies.
  • Marketing preferences: consents, opt-outs and responses to communications.
  • Communications: messages you send us via email, contact form or support.

3. Purposes and Legal Basis

We process your personal data for the following purposes:

3.1 Providing the Service (contract)

We process account data and content you upload to deliver the Service according to our agreement with you. Without this data we cannot provide the account.

3.2 Marketing (consent)

With your explicit consent we use your contact details, including email address, phone number and mobile number, to contact you via email, SMS, phone calls and push notifications about published listings, new features, newsletters, campaigns and relevant offers from LetsFundly and from selected partners and advertisers.

At registration we ask you for separate, non-pre-ticked consents for (a) marketing from LetsFundly and (b) marketing from, and sharing of your contact details with, third-party partners (see section 4). You can withdraw the consents at any time via your profile or via the opt-out link or unsubscribe-instruction in each communication. For phone contact with consumers we always respect the Swedish NIX-Telefon do-not-call register.

3.3 Analytics, statistics and product development (legitimate interest)

We analyse use of the Service to improve features, measure performance and develop new services. We have a legitimate interest in doing so. Aggregated and anonymised data does not constitute personal data and may be used and shared freely by us for any purpose.

3.4 Security and fraud prevention (legitimate interest)

We process technical data to prevent abuse, fraud and security incidents.

3.5 Legal obligations

We process data where required by law, e.g. accounting laws, anti-money-laundering laws and similar regulation.

4. How We Share Data

We may share your personal data with:

  • Other platform users: companies publishing listings receive the expressions of interest directed at their listing (name, email, number of shares). Investors see company listings including the company's contact details.
  • Service providers (data processors): We engage the following processors who handle personal data on our behalf:
    • Vercel Inc. (USA) — hosting and deployment
    • Supabase Inc. (USA) — database and authentication
    • Stripe Inc. (USA) — payment processing
    • Resend Inc. (USA) — email delivery
    • Twilio Inc. (USA) — SMS delivery
    • Roaring AB (Sweden) — KYC verification, PEP and sanctions screening
    • Gamma Technologies Inc. (USA) — AI-powered pitch deck generation (company financial data, vision and team information is transmitted to Gamma; personal data includes contact persons' email addresses)
    Transfers to the USA are made on the basis of the European Commission's Standard Contractual Clauses (SCC). All processors act solely on our instructions.
  • Marketing and advertising partners: we may share email addresses, phone numbers, behavioural data and segmentation with advertising platforms and partners to target relevant marketing. This is done exclusively on the basis of your explicit consent (GDPR Art. 6.1.a).
  • Sale and onward transfer of contact details to third parties: with your explicit consent given at registration, LetsFundly is entitled to transfer, share or sell your contact details (name, email, phone number, user role and marketing segments) to selected third parties in the finance, investment and company-building space for their own marketing purposes. Third parties receiving your data become responsible for their own processing. You can withdraw your consent at any time. This does not affect processing already carried out by the third party.
  • Acquirers in business transfers: if LetsFundly or all or part of the business is sold, merged or transferred to a third party, your personal data may be transferred to the acquirer. We will inform affected users of the new data controller within 30 days of the completed transaction, in accordance with GDPR Art. 14, unless statutory confidentiality obligations prevent prior disclosure.
  • Authorities: where required by law (e.g. tax authority, police, courts).
  • Aggregated/anonymised data: statistics and insights that cannot be linked to you as an individual may be shared, sold or published freely.

5. Transfers Outside the EU/EEA

Several of our service providers are established in the USA: Vercel, Supabase, Stripe, Resend, Twilio and Gamma Technologies. All transfers to the USA are made on the basis of the European Commission's Standard Contractual Clauses (SCC) pursuant to GDPR Art. 46(2)(c). Roaring AB is a Swedish company and processes data within the EU.

6. How Long We Retain Data

  • Active accounts: as long as your account is active plus 12 months after closure.
  • Accounting records: 7 years under Swedish accounting law.
  • Marketing consent: until you withdraw it.
  • Logs and technical data: up to 24 months.
  • Uploaded listing content: retained while the listing is published and thereafter in archive per the above.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access (Art. 15): know what data we process about you.
  • Rectification (Art. 16): have incorrect data corrected.
  • Erasure (Art. 17): have your data deleted where the legal grounds for erasure apply. We retain data where we have a legal obligation to do so.
  • Restriction (Art. 18): request that we temporarily stop processing your data.
  • Portability (Art. 20): receive your data in a machine-readable format.
  • Objection (Art. 21): object to processing based on legitimate interest.
  • Withdraw consent: at any time withdraw consents you have given.
  • Complaint to supervisory authority: you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

You can exercise your rights by contacting info@letsfundly.com or via the functions in your profile.

8. Cookies and Tracking Technologies

The Service uses cookies and similar technologies. You can manage your choices via the cookie banner. The categories we use are described below:

  • Necessary cookies — required for login and session management. Legal basis: contract / legitimate interest. Retention: session length + up to 1 year (auth token). Provider: Supabase.
  • Consent cookie (lf_cookies) — stores your cookie banner response. Legal basis: legitimate interest (necessary to respect your choice). Retention: 1 year. Provider: LetsFundly (first-party cookie).
  • Analytics cookies — measure page views, referrer and dwell time. Requires your consent. Retention: 24 months. Provider: LetsFundly (internal logging via Supabase).
  • Marketing cookies — reserved for future advertising campaigns and retargeting. Requires separate consent. Not currently in use.

You can change your choices at any time via the cookie banner or under Profile → Privacy. Withdrawing consent does not affect processing that has already taken place.

9. Security

We apply technical and organisational security measures to protect your data, including encryption in transit, access control and security reviews. No system is entirely secure and you upload data at your own risk.

10. Children

The Service is not directed to persons under 18. We do not knowingly collect personal data about minors.

11. Changes

We may update this policy. For material changes we will notify you by email or in the Service. The most recent version is always available on this page.

12. Contact

Questions about this policy or the processing of your personal data can be sent to info@letsfundly.com.