Last updated: October 20, 2026
Fundora Cap ("we," "us," "our") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the choices available to you when you use fundoracap.com and related Services, including evaluations, dashboards, support tooling, and marketing communications.
The data controller is the Fundora Cap operating entity identified in our company disclosures and website footer. For privacy requests, use the Support Center or the privacy contact channel listed on the Contact page. If you are in the EEA/UK, you may also contact us to designate a representative where required by law.
Name, email address, password hash, country or region, phone number (if provided), referral codes, language preferences, and profile settings.
Government ID images, proof of address, selfie or liveness verification, date of birth, nationality, and screening results when required for payouts or AML checks.
Challenge purchases, account sizes, trade history in evaluation environments, risk metrics, rule-breach flags, support tickets, chat transcripts with agents, and notification preferences.
Payment confirmations, crypto invoice identifiers, coupon usage, billing country, and limited metadata from processors such as Stripe or crypto payment gateways. We do not store full card PAN data on our servers when payments are handled by PCI-compliant processors.
IP address, device and browser type, approximate location derived from IP, cookies and similar identifiers, session tokens, diagnostic logs, crash reports, and performance metrics.
If you opt in or where permitted, we may store campaign source (UTM parameters), referral partner IDs, email engagement (opens/clicks where measurable), and consent timestamps.
Messages you send to Support, feedback forms, and survey responses.
We use data to: create and secure accounts; deliver challenges and dashboards; process payments and payouts; verify identity and prevent fraud; enforce trading rules; provide customer support; send transactional emails; improve product performance and reliability; personalize non-sensitive UI preferences; comply with law; detect abuse; and, with consent or other lawful basis, send marketing communications about Fundora Cap products.
We do not use KYC document images for advertising profiling.
Performance of a contract (providing evaluations and payouts you request); legitimate interests (security, product improvement, fraud prevention, network integrity); legal obligation (AML/recordkeeping, responding to lawful requests); and consent (non-essential cookies and certain marketing). You may withdraw consent without affecting prior lawful processing.
We may share data with: payment processors; KYC and identity-verification vendors; cloud hosting and database providers; email and SMS delivery services; analytics providers (when enabled); customer-support tooling; professional advisors (lawyers, auditors); affiliates assisting operations under contract; and authorities when legally required.
We require processors to protect data under appropriate agreements and to process data only on documented instructions, except where law requires otherwise.
We do not sell personal data in the traditional sense of selling email lists for money. Certain advertising cookies or pixels may constitute "sale" or "sharing" under some U.S. state privacy laws—manage those via cookie preferences where offered, or contact Support for a do-not-sell/share request.
Data may be processed in regions outside your home country, including where our hosting or vendors operate. Where required, we use appropriate safeguards such as standard contractual clauses, adequacy decisions, or equivalent mechanisms.
We retain account data while your account is active and for a reasonable period afterward for disputes, bookkeeping, chargeback defense, and legal obligations. KYC and AML records may be retained longer as required by applicable frameworks (often several years). Marketing suppression lists may be kept to honor opt-outs. Server logs are typically rotated on shorter cycles unless needed for security investigations.
Depending on your jurisdiction (for example GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have rights to access, rectify, delete, restrict, port, or object to certain processing, and to withdraw consent. California residents may have rights to know, delete, correct, and opt out of sale/sharing, and not to be discriminated against for exercising rights. You may also lodge a complaint with a supervisory authority.
To exercise rights, contact Support. We may need to verify your identity (for example by confirming control of the registered email or requesting additional ID for sensitive requests). We will respond within the timelines required by applicable law.
We use industry-standard technical and organizational measures including encrypted transport (HTTPS), access controls, least-privilege practices, monitoring, and vendor due diligence. No method of transmission or storage is 100% secure. Notify us promptly if you suspect unauthorized access to your account.
Rule engines may automatically fail an evaluation when hard risk limits are breached (for example daily loss). These decisions are based on objective program parameters you accepted at purchase. You may contact Support to request an explanation or human review if you believe a technical error occurred.
Services are not directed to individuals under 18. We do not knowingly collect children's data. If we learn we collected such data, we will delete it promptly.
Our site may link to third-party sites (social platforms, Trustpilot, payment pages). Their privacy practices are governed by their own policies.
We may update this Policy. The "updated" date on this page reflects the latest revision. Material changes may be communicated via email or dashboard notice where appropriate.
Privacy inquiries: use Support or the Contact page channels. Include enough detail for us to identify your account and request.
