Last updated: March 2026
This Privacy Policy explains how FundGen ("Company", "we", "our", or "us") collects, uses, stores, and shares your personal information when you use our Ambassador App and related services (the "Service"). Please read this policy to understand how we handle your data.
FundGen operates in two capacities: as a data processor when following a nonprofit organization's instructions, and as a data controller for its own analytics and service improvement. In practice, the nonprofit you're fundraising for is responsible for why your data is in the system; FundGen is responsible for how it's handled.
Legal Entity: FundGen.ai
Address: Moshav Revacha 57, Israel
Domain: fundgen.ai
FundGen processes personal data of individuals in the European Union. At our current scale, we have determined that a formal EU representative under Article 27 GDPR is not required. This determination will be reviewed as our user base grows.
We use AI-powered features to enhance your campaign experience. This includes personalized guidance, smart suggestions, content generation, and other intelligent features designed to improve your outreach effectiveness. These features process information you provide through the app as described in this policy. Data used by AI features is handled by the third-party services listed in Section 5.
FundGen does not directly process or store payment card information. For campaigns that use tap-to-pay donations, payments are processed entirely by Stripe. Stripe's own privacy policy governs how your payment information is handled. FundGen only receives confirmation of payment amounts for campaign tracking.
We use your information for the following purposes:
We do not use your information for advertising, remarketing, or third-party marketing.
We use the following categories of third-party services to operate the app:
These services have their own privacy policies and are used only as needed to provide the Service.
With Nonprofit Organizations: Ambassadors' names, phone numbers, activity data, and donation tracking information are shared with the nonprofit organization managing the campaign you are part of. This is core to how the Service works.
With Other Ambassadors: Within a campaign, limited contact information (such as names of shared leads) may be visible to other ambassadors or team leaders, depending on campaign settings.
With Service Providers: Only as described in Section 5 above.
We do not sell your personal data to third parties.
Your data is stored and processed using Google Firebase infrastructure. Our database and backend services are hosted entirely within the European Union.
We implement standard security measures including app integrity verification, encrypted connections (HTTPS/TLS), phone number hashing for authentication sessions, and rate limiting on authentication endpoints.
Where any sub-processors operate outside the European Union, we rely on appropriate transfer safeguards such as the European Commission's Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
When FundGen acts as a data controller (for service improvement, aggregated analytics, service optimization, cross-platform insights, and its own website operations), we process personal data on the following legal bases:
When FundGen acts as a data processor on behalf of an organization, the legal basis for processing is determined by that organization as the data controller. If you would like to understand the basis for your data being shared with us, please refer to that organization's privacy policy or contact them directly.
If you grant contact access permission, the app reads your device's address book to identify contacts relevant to your campaign. Your phonebook is not uploaded — matching is done on your device by comparing your contacts against the campaign's lead list, which is downloaded to your device.
If you choose to share a contact with your campaign, that contact's name, phone number, and email are stored on our servers so they can be tracked for outreach and coordinated with your campaign team.
When you choose to hide a contact, their phone number is saved to your account to remember that preference across sessions and devices.
When AI contact features are enabled, contact names only (not phone numbers or email addresses) may be sent to one of our AI providers — on our behalf, under contractual data protection terms — to clean names, classify contacts by relevance, and surface the most relevant contacts first. Only contacts with no prior campaign activity are included in this step. You can deny or revoke contact permission at any time through your device settings.
The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If a nonprofit organization enrolls minors as ambassadors, the organization is responsible for obtaining appropriate parental consent.
Organizations that use FundGen sign a data processing agreement with us. Under this agreement, the organization is responsible for the data it provides — including ambassador and contact details — and must ensure it has a valid legal basis for sharing that data with us.
FundGen also processes certain platform data as an independent data controller — for example, aggregated analytics, service optimization, and cross-platform insights. FundGen does not share identifiable donor or contact data between organizations. This processing is governed by our own legitimate interests as described in Section 8, and is conducted independently of the organization's instructions.
Organizations using FundGen are required by their agreement with us to have privacy notices in place that disclose the use of FundGen as their data processor and independent data controller.
Personal data is retained for the duration of the active service relationship. An organization is considered inactive if it has had no campaign activity or account usage for 24 consecutive months. FundGen will notify the organization 30 days before deletion of its data. If the organization responds or resumes activity, retention continues.
Ambassador account data (name, phone number, and activity history) is retained for as long as your account is active, or for up to 24 months after your last campaign activity. You may request earlier deletion at any time.
Contact and lead data (names, phone numbers, and email addresses of individuals you reached out to) is retained for the duration of the campaign and for up to 12 months thereafter, unless the organization requests earlier deletion.
Analytics and error data is retained in aggregated or anonymized form and is not subject to individual deletion timelines.
Authentication session data is automatically deleted within 24 hours after expiration.
Under applicable data protection laws, including the GDPR, you have the following rights regarding your personal data:
Donors who wish to opt out of receiving outreach through the platform may contact the organization running the campaign, or contact us directly.
To submit a request, contact us at the address in Section 15. If your data is processed by FundGen on behalf of an organization, we may direct your request to that organization. All requests are handled free of charge.
We will respond to all valid requests within 30 days. In complex cases we may extend this by up to two additional months and will notify you within the initial 30-day period.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by other direct means before they take effect. The revised "Last updated" date will always appear at the top of this page.
If you have any questions about this Privacy Policy, you can contact us at: