Privacy Policy

Overview

FundSignal is operated by Hope Underground Capital LLC, a company based in Mount Vernon, Kentucky. We provide a lead intelligence platform that helps private lenders, hard money lenders, and DSCR originators identify real estate investors who are publicly seeking funding.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using FundSignal, you agree to the practices described in this policy.

Data We Collect

We collect information in three categories:

1. Lead Data (Public Posts)

FundSignal automatically scans publicly accessible posts on platforms including Reddit, BiggerPockets, and public real estate Facebook groups. We collect post content, usernames, posting timestamps, and platform identifiers where funding-related intent is detected.

This data comes from posts that users have chosen to make public on those platforms. We do not scrape private messages, login-protected content, or any data not openly accessible to an unauthenticated internet visitor.

2. Lender Account Data

When you create a FundSignal account, we collect your name, email address, company name, and password (stored as a bcrypt hash). We may also collect information you provide about your lending criteria, target markets, and loan programs.

3. Usage Data

We automatically collect information about how you use the platform: pages visited, leads viewed, searches conducted, features used, and session timestamps. This helps us improve the product and understand platform usage patterns.

Lead Data Sources

Our AI monitoring system continuously scans the following publicly accessible sources:

• Reddit — Subreddits related to real estate investing, hard money lending, fix and flip, BRRRR strategy, and related topics
• BiggerPockets — Public forum posts in the lending, financing, and deal analysis sections
• Public Facebook Groups — Publicly accessible real estate investing groups (not private/closed groups)

Data from these sources includes: the original post text, author username (as displayed publicly on the platform), timestamp of the post, and the platform it came from. We do not collect profile photos, contact information, or any private account details of forum posters.

If you are a forum user whose public post has been captured by FundSignal and you would like it removed, see the Your Rights section and our Data Use Policy.

Account & Lender Data

For lenders who create accounts on FundSignal, we collect and store the following:

• Name and email address (required for account creation)
• Company name and business information
• Password (hashed using bcrypt — we cannot see your actual password)
• Subscription and billing records (payment processed by Stripe; we do not store full card numbers)
• Lead interaction history — which leads you viewed, bookmarked, or contacted
• Notes and CRM data you enter within the platform

This data is stored on servers provided by Neon (PostgreSQL) and hosted via Render. All data is encrypted at rest and in transit (TLS 1.2+).

Cookies & Analytics

FundSignal uses a lightweight analytics system (operated by Polsia) to track aggregate platform usage. This includes a visitor ID stored in localStorage — not a cookie — to distinguish unique visits. We do not use advertising trackers, Facebook Pixel, Google Analytics, or any third-party behavioral tracking.

We use session-based authentication via JWT tokens stored in your browser's localStorage. These are used solely to authenticate your session and expire after 30 days of inactivity.

We do not use third-party cookies. The only data stored in your browser is your authentication token and anonymous visitor ID.

How We Use Your Data

We use the data we collect for the following purposes:

• Providing the service — Displaying classified leads in your dashboard, running the AI scoring engine, sending lead alerts
• Account management — Authentication, billing, subscription management, password resets
• Platform improvement — Understanding which features are used, fixing bugs, improving lead classification accuracy
• Security — Detecting and preventing fraud, unauthorized access, and abuse
• Communications — Sending transactional emails (signup confirmation, billing receipts) and product updates (can be unsubscribed)

We do not use your data for advertising purposes. We do not build behavioral profiles for sale to third parties. We do not use your lead interaction data to train models for any purpose other than improving FundSignal's own classification engine.

Data Sharing

We do not sell, rent, or trade your personal information. We share data with third parties only in the following limited circumstances:

• Infrastructure providers — Render (hosting), Neon (database), Cloudflare (CDN/DNS). These providers process data on our behalf under their own security and privacy policies.
• Payment processing — Stripe handles all payment processing. Your payment card details go directly to Stripe and are never stored on FundSignal servers.
• Legal requirements — We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers — If FundSignal is acquired or merges with another company, customer data may be transferred as part of that transaction. We will notify users before any such transfer and give the option to delete their account.

Security

We take reasonable measures to protect your information:

• All data in transit is encrypted using TLS 1.2+
• Passwords are hashed using bcrypt with a cost factor of 12
• Database access is restricted to authenticated application servers
• API keys and credentials are stored as environment variables, not in source code
• Authentication uses short-lived JWT tokens with expiration

No system is completely secure. If you believe your account has been compromised, contact us immediately at privacy@fundsignal.app.

Data Retention

We retain your data as follows:

• Account data — Retained while your account is active and for 90 days after deletion to allow recovery and resolve disputes
• Lead data (public posts) — Retained for up to 24 months to provide historical context for the lead feed. Posts can be removed on request (see Data Use Policy)
• Usage logs — Retained for 12 months for security and debugging purposes
• Billing records — Retained for 7 years as required by US tax and accounting regulations

When you delete your account, we delete or anonymize your personal data within 30 days, except where we are legally required to retain it.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request that we correct inaccurate data
• Deletion — Request deletion of your personal data (subject to legal retention requirements)
• Opt-out of communications — Unsubscribe from marketing emails at any time using the link in any email
• Removal of public post data — If your public post was captured as a lead and you want it removed, email us at privacy@fundsignal.app with the post URL or username

California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to non-discrimination for exercising privacy rights. We do not sell personal information as defined by the CCPA.

To exercise any of these rights, contact us using the information below. We will respond within 30 days.

Contact Us

For privacy-related questions, data access requests, or to request removal of public post data:

If you have a complaint about how we handle your data and are not satisfied with our response, you may contact your local data protection authority.