Privacy Policy

1. Information We Collect

The information we collect depends on how you use the Services, the features you access, and the choices you make.

1.1 Information You Provide Directly

We may collect information you provide when you:

• Create or maintain an account;
• Complete a profile;
• Submit a contact or support request;
• Complete an assessment, questionnaire, scorecard, or readiness orientation;
• Submit business, nonprofit, organizational, or grant-related information;
• Record notes, tasks, or progress in your pathway;
• Communicate with us through the Services; or
• Join a waitlist or subscribe to updates.

This information may include:

• Name;
• Email address;
• Organization name, role, and organizational profile;
• Grant-readiness and organizational-capacity information;
• Goals, challenges, preferences, and responses to assessments;
• Notes and task progress you record; and
• Communications and support-history information.

Please do not submit sensitive personal information unless the Services specifically request it and you have reviewed the applicable instructions.

1.2 Account and Profile Information

We collect information necessary to create, authenticate, secure, and manage your account, including your email address, authentication information, profile details, account preferences, and records of account activity. Passwords are stored only as salted hashes by our authentication provider; we never see or store your password in readable form.

You are responsible for keeping your account credentials confidential and for notifying us promptly if you believe your account has been accessed without authorization.

1.3 Business and Grant-Related Information

The Get Fundable App allows users to submit information concerning a nonprofit, organization, project, funding need, or grant opportunity. This information may include:

• Organization descriptions;
• Mission, programs, services, and community-impact information;
• Funding goals and intended use of funds;
• Governance, financial-systems, documentation, and impact-evidence information;
• Grant history and application status;
• Eligibility, capacity, and readiness information; and
• Supporting narratives and notes you enter.

You represent that you have the right to submit this information and that your submissions do not unlawfully disclose another person’s confidential, proprietary, or personal information.

You should remove or avoid submitting information that is not necessary for the feature you are using. We do not require users to submit Social Security numbers, bank-account passwords, full payment-card numbers, or other highly sensitive information through ordinary app forms.

1.4 Information Collected Automatically

When you use the Services, we and authorized service providers may automatically collect certain information, such as:

• Internet Protocol (“IP”) address;
• Device type, operating system, browser type and version;
• General location derived from an IP address;
• Dates, times, and duration of access;
• Pages, screens, and features viewed and actions taken;
• Error and diagnostic reports; and
• Security, authentication, and fraud-prevention information, including sign-in and administrative activity logs.

We may associate this information with account or other information when reasonably necessary to provide, secure, analyze, and improve the Services.

1.5 Cookies and Similar Technologies

The Services use first-party cookies and browser local storage to keep you signed in, remember preferences, provide requested features, and maintain security. We also record first-party product-usage events (such as completing an orientation or assessment) to understand how the Services are used.

The Services do not use advertising technologies, advertising or social-media pixels, session-recording tools, cross-site tracking, or third-party data-broker programs. If that ever changes, we will update this Policy and provide any disclosures and choices required by law.

You may be able to control cookies through your browser or device settings. Disabling certain technologies may affect the availability or functionality of the Services.

1.6 Payment Information

The Services are currently offered without charge and we do not collect or process payment information. If paid features are introduced, payments will be handled by a third-party payment processor identified at the time of purchase, and this Policy will be updated to describe the transaction information we receive. We do not intentionally collect or store complete payment-card numbers or payment-card security codes on our own systems.

1.7 Information from Other Sources

We may receive information from:

• Service providers that support account, hosting, analytics, communications, security, or customer-support functions;
• Google, if you choose to sign in with your Google account, which provides your basic profile and email address; and
• Organizational representatives who invite or authorize your access.

We do not purchase personal information from data brokers and do not operate referral, affiliate, or data-enrichment programs.

2. How We Use Information

We may use information for the following purposes:

• Provide, operate, maintain, and improve the Services;
• Create and administer user accounts;
• Authenticate users and process requests;
• Provide grant-readiness, educational, and planning features;
• Evaluate information submitted through assessments;
• Generate scores, gap reports, pathways, recommendations, or other requested outputs;
• Communicate with users about accounts, services, updates, and support;
• Send announcements or reminders where permitted by law;
• Respond to questions and provide customer support;
• Personalize content and user experiences;
• Monitor usage, diagnose technical issues, and conduct analytics;
• Protect the Services, users, and our business;
• Detect, prevent, investigate, and address fraud, abuse, unauthorized access, and security incidents;
• Enforce our agreements and policies;
• Comply with applicable law, legal process, or governmental requests;
• Establish, exercise, or defend legal claims; and
• Fulfill another purpose disclosed at the time information is collected or with your consent.

We may use aggregated, deidentified, or anonymized information for lawful business, analytical, research, development, and improvement purposes. We will not attempt to reidentify information that has been deidentified except as permitted by law.

3. Artificial Intelligence and Automated Features

The Get Fundable App may include artificial-intelligence, automation, recommendation, drafting, analysis, or similar features.

These features may process information you submit to generate outputs, suggestions, summaries, prompts, classifications, or other results. AI-generated outputs may be incomplete, inaccurate, outdated, or unsuitable for your particular circumstances.

Where an AI-assisted feature is used, the information you submit is transmitted to an external AI model provider solely to generate the requested output for you. That information is not used to train third-party models, and we do not sell or share it for advertising. Outputs are generated automatically without routine human review; our team accesses submitted content only when needed to provide support, investigate abuse, or comply with law.

Unless separately disclosed and authorized:

• We will not represent that AI-generated outputs are guaranteed to produce funding, revenue, approval, eligibility, or other business results;
• AI-generated information should be reviewed and independently verified before use;
• Users are responsible for reviewing outputs for accuracy, completeness, confidentiality, legal compliance, and appropriateness; and
• Users should not submit confidential information belonging to another person or organization without authorization.

The Services are not a substitute for legal, tax, accounting, financial, grant-administration, cybersecurity, or other professional advice.

4. How We Disclose Information

We may disclose information in the following circumstances.

4.1 Service Providers

We may disclose information to contractors and service providers that perform services on our behalf. The categories we currently use are: a cloud application-hosting provider; a managed database, authentication, and file-storage provider; an artificial-intelligence model provider; and an email-delivery provider. These providers process information in the United States and may access information only as reasonably necessary to perform services for us, subject to contractual or other appropriate obligations.

4.2 Business and Organizational Users

If the Services are used on behalf of a nonprofit, employer, educational institution, or other organization, that organization may be able to access or control information associated with the organization’s account, subject to the applicable agreement and account configuration.

Questions about an organization-managed account should first be directed to the organization’s administrator.

4.3 Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

• Comply with a subpoena, court order, legal process, or governmental request;
• Enforce our agreements or policies;
• Protect the rights, property, safety, or security of A1 Business Experts, users, or others;
• Investigate fraud, security incidents, or unlawful activity; or
• Establish, exercise, or defend legal claims.

4.4 Business Transfers

Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, dissolution, or similar transaction. We will use reasonable efforts to require the recipient to handle information consistently with this Privacy Policy or provide any notice required by applicable law.

4.5 With Your Direction or Consent

We may disclose information when you direct us to do so, authorize the disclosure, or otherwise consent to it.

4.6 Aggregated or Deidentified Information

We may disclose aggregated, statistical, or deidentified information that does not reasonably identify an individual, subject to applicable law.

4.7 Sale and Targeted Advertising

We do not sell personal information, do not share personal information for cross-context behavioral advertising, do not use targeted advertising, and do not participate in data-broker or similar programs. If our practices change, we will provide disclosures and choices required by applicable law.

5. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the Services;
• Maintain and secure accounts;
• Fulfill the purposes described in this Privacy Policy;
• Comply with legal, accounting, tax, reporting, or contractual obligations;
• Resolve disputes;
• Enforce agreements; and
• Protect our legal rights.

Our current retention practices are:

• Account, profile, assessment, gap report, and pathway information: retained while your account is active, and deleted within 30 days after you delete your account or request deletion;
• Support and correspondence records: retained up to 24 months after the last communication;
• Security, authentication, and administrative audit logs: retained up to 12 months;
• Waitlist and subscription email addresses: retained until you unsubscribe or request removal; and
• Encrypted system backups: overwritten on a rolling cycle within 35 days.

When information is no longer required, we will delete, anonymize, or securely dispose of it when reasonably practicable, subject to backup, legal, security, and operational limitations.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, acquisition, alteration, disclosure, loss, or destruction. These include encryption in transit over HTTPS, encryption at rest, hashed passwords, row-level database access controls that limit records to the account that owns them, checks against known-breached passwords at sign-up, and audit logging of security-relevant events.

No method of transmission or storage is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed as a result of a security incident or other event beyond our reasonable control.

Users should:

• Use a strong, unique password;
• Avoid sharing account credentials;
• Keep devices and software updated;
• Use secure networks when accessing the Services;
• Avoid submitting unnecessary sensitive information; and
• Notify us promptly of suspected unauthorized access.

If we determine that a security incident requires notice under applicable law, we will provide notice as required by law. Arkansas data-breach notification requirements may apply depending on the information and circumstances involved.

7. Your Choices and Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to:

• Access information we maintain about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of information;
• Request a copy of certain information in a portable format;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Opt out of certain marketing communications;
• Manage cookies or similar technologies through available settings;
• Appeal a denial of a valid privacy request, where required by law; and
• Lodge a complaint with an appropriate regulatory authority.

These rights are subject to legal exceptions and limitations. For example, we may retain information necessary to comply with law, secure the Services, detect fraud, resolve disputes, or protect legal rights.

7.1 Marketing Communications

You may opt out of promotional emails by using the unsubscribe link in the message or contacting us at compliance@drfaye.com. You may continue to receive transactional, account, security, or service-related communications. We do not send SMS or voice marketing.

7.2 Submitting a Privacy Request

To submit a privacy request, including a request to delete your account and associated data, email compliance@drfaye.com from the address associated with your account and include “Get Fundable App Privacy Request” in the subject line. Please provide enough information for us to understand and process your request. We may need to verify your identity before completing a request.

We may request information reasonably necessary to verify that the request relates to you. We will not use verification information for unrelated purposes except as permitted by law.

8. Arkansas Privacy Context

A1 Business Experts is associated with Arkansas and may process information in Arkansas. We intend to handle information in accordance with applicable federal and Arkansas laws, including applicable consumer-protection, data-security, breach-notification, and privacy requirements.

Arkansas law may provide specific protections or obligations depending on the type of information, the person involved, the Service used, and the circumstances of collection or disclosure. This Privacy Policy does not create rights beyond those provided by applicable law.

Users located outside Arkansas may have additional rights under the laws of their jurisdiction.

9. International Users

The Services are operated from the United States and are intended for users in the United States. We do not target the Services to users in other countries. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States.

The United States may have data-protection laws that differ from the laws of your country. Where required, we will use legally recognized safeguards for international transfers.

10. Children’s Privacy

The Services are directed to adult nonprofit and organizational leaders. They are not directed to children, teens, students, or educational institutions, and we do not knowingly collect personal information from children under 13 without legally required parental consent.

If you believe a child under 13 has provided personal information through the Services, please contact us at compliance@drfaye.com. We will take reasonable steps to investigate and delete the information when required by applicable law.

11. Third-Party Websites, Services, and Links

The Services may contain links to websites, applications, platforms, or services operated by third parties. We do not control and are not responsible for the privacy, security, content, or practices of third parties.

Your use of a third-party service is governed by that service’s privacy policy and terms. You should review those policies before providing information.

12. User-Submitted Information

You are responsible for ensuring that information and materials you submit:

• Are accurate to the best of your knowledge;
• Do not violate another person’s privacy or rights;
• Do not contain information you are prohibited from disclosing;
• Do not include unnecessary sensitive information;
• Do not contain malicious code or harmful material; and
• May lawfully be processed for the purposes described in this Privacy Policy.

If your submission includes information about another person, you represent that you have appropriate authorization to provide it and permit us to process it as described in this Privacy Policy.

13. Do-Not-Track Signals

Some browsers and devices offer “Do Not Track” or similar settings. Because there is not a universally accepted standard for responding to such signals, the Services do not currently respond to them.

The Services do not use targeted advertising or sell personal information, so there is no advertising opt-out to apply. Where applicable law requires us to honor a recognized opt-out preference signal such as Global Privacy Control, we will do so.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last Updated” date. If a change materially affects how we use or disclose personal information, we will provide additional notice when required by applicable law.

Your continued use of the Services after an updated Privacy Policy becomes effective means that you acknowledge the updated Policy, subject to any consent requirements imposed by law.

15. Contact Us

Questions, privacy requests, correction requests, deletion requests, or concerns about this Privacy Policy may be submitted to A1 Business Experts LLC. Please include “Get Fundable App Privacy Request” in the subject line of an email when appropriate.

• fundable.drfaye.com
• 501-284-5916
• email@getfundable.io
• compliance@drfaye.com (legal & privacy)

16. Governing-Law Context

This Privacy Policy is intended to be interpreted consistently with applicable law. To the extent Arkansas law applies, Arkansas law will govern interpretation of this Privacy Policy without regard to conflict-of-law principles, except where applicable law requires otherwise.

Nothing in this Privacy Policy limits any nonwaivable rights or remedies available to you under applicable law.