Privacy Policy

The Funding Machine · Effective October 15, 2026

The Funding Machine ("the app") is a private deal-intake system, built for and used by a single business. It is not offered to the public. This policy explains what the app reads, why, and how that data is protected.

What the app accesses

The app connects to one dedicated Google mailbox that the business uses to receive deal submissions. It asks Google for two permissions, both read-only:

• Gmail, read-only: to read the emails that arrive in that mailbox, and their attachments.
• Google Drive, read-only: to read the files and folders that those emails link to.

The app cannot send, delete, move, label or change any email or file. It does not mark emails as read.

How the data is used

The app uses this data only to run the business's deal intake: to collect the lead lists, applications and bank statements that arrive by email, organize them per business, check them against the business's own rules, and show the results to the business's authorized staff. The data is not used for advertising, is not sold, and is not used to build profiles of anyone for any other purpose.

Sharing

The data is not shared with anyone outside the business, except service providers that are needed to run the app (for example, hosting and backup, or a service that reads documents or verifies phone numbers). These providers may use the data only to provide that service. Where an AI service is used to read documents, it is set up so that the data is not used to train its models. Data may also be disclosed if the law requires it.

Google API Services User Data Policy

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

• Files and sensitive fields are stored encrypted.
• All connections to the app are encrypted (HTTPS).
• Access is limited to the business's authorized staff and to the people who operate the app for it.

Retention and deletion

Data is kept only while the business uses the app. It is deleted within 30 days of a deletion request from the business, or within 30 days of the service ending.

The mailbox owner can remove the app's access at any time at myaccount.google.com/connections. The app then stops reading immediately.

Children

The app is a business tool and is not directed to children.

Changes and contact

If this policy changes, the new version is posted on this page with a new effective date. Questions or requests: [email protected].