Privacy Policy
What personal information we collect, how we use and share it, your choices, and how we protect it.
1. Introduction
This Privacy Policy explains how Funded with Flow L.L.C. (Funded with Flow, we, us, or our) collects, uses, shares, and protects information when you use fundedwithflow.com and our related services (the Services).
Funded with Flow operates a simulated, evaluation-based trading practice platform. By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.
2. Information We Collect
We collect the following categories of information:
- Account and profile information such as your email address and name.
- Authentication and session data from email or Google sign-in (OAuth) and session cookies.
- Payment information processed by Stripe. We do not store full payment card data; Stripe provides us with limited transaction details.
- Trading activity and account performance within the simulated environment.
- Device and browser information such as browser type, device characteristics, and similar technical data.
- Cookies and similar technologies as described in our Cookie Policy.
- AI support conversations with our AI assistant.
- MCP and API access logs relating to connected agents and tokens.
- Support conversations and correspondence with our team.
- Referral tracking data relating to referral codes and links.
- Payout identity and KYC information that you provide when requesting payouts and undergoing verification.
3. How We Use Information
We use information to:
- provide, operate, maintain, and improve the Services;
- create and secure your account and authenticate sessions;
- process purchases through Stripe and manage plans and entitlements;
- administer paper, evaluation, and funded accounts, including applying trading rules and evaluating performance;
- process and review payout requests, including identity, KYC, rule-compliance, and fraud checks;
- operate AI support and MCP and API features;
- detect, prevent, and investigate fraud, abuse, and security incidents;
- communicate with you, including service and support messages; and
- comply with legal obligations and enforce our terms and policies.
6. Security
We take reasonable measures designed to protect information. These include encryption in transit using HTTPS/TLS (via Cloudflare), session-cookie authentication, reliance on Stripe for payment card handling (so that card data is handled under Stripe's controls), MCP and API tokens stored in hashed form (not plaintext) that are revocable and rate-limited, and role-restricted administrative access with audit logging.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and tokens.
7. Data Retention
We retain personal information for as long as needed to provide the Services, maintain your account, comply with our legal, tax, accounting, and regulatory obligations, resolve disputes, prevent fraud, and enforce our agreements.
Retention periods vary by data type and context. When information is no longer needed, we take reasonable steps to delete or de-identify it. Specific retention periods are subject to attorney review.
8. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
You can update certain account information directly in the Platform and manage cookies through your browser. To exercise applicable rights, contact [email protected]. We may need to verify your identity before acting on a request, and some information may be retained as permitted or required by law.
9. Region-Specific Rights
Residents of certain jurisdictions may have additional rights under applicable privacy laws. For more information about those rights and how to exercise them, please see our State-Specific Privacy disclosures, or contact [email protected].
10. Children's Privacy
The Services are not directed to children, and we do not knowingly collect personal information from individuals who are not at least the age of majority in their jurisdiction. If you believe a person below the applicable age has provided us personal information, please contact [email protected] so we can take appropriate action.
11. International Users and Processing
We and our service providers may process and store information in the United States and other countries where we or they operate. These countries may have data-protection laws that differ from those in your jurisdiction. By using the Services, you understand that your information may be transferred to and processed in such locations, subject to appropriate safeguards where required by law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date below and may provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
13. Privacy Contact
If you have questions or requests regarding this Policy or your information, contact us at [email protected]. See our Contact page for additional ways to reach Funded with Flow L.L.C.