Privacy Policy
What personal information we collect, how we use and share it, your choices, and how we protect it.
1. Introduction
This Privacy Policy explains how Funded with Flow L.L.C. (Funded with Flow, we, us, or our) collects, uses, shares, and protects information when you use fundedwithflow.com and our related services (the Services).
Funded with Flow operates a simulated, evaluation-based trading practice platform. By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.
2. Information We Collect
We collect the following categories of information:
- Account and profile information such as your email address and name.
- Authentication and session data from email or Google sign-in (OAuth) and session cookies.
- Payment information processed by Stripe. We do not store full payment card data; Stripe provides us with limited transaction details.
- Trading activity and account performance within the simulated environment.
- Device and browser information such as browser type, device characteristics, and similar technical data.
- Cookies and similar technologies as described in our Cookie Policy.
- Online advertising and visitor identification data collected with the help of our advertising partner, which may associate your visit with other information about you, including your business email, as described in the Online Advertising and Visitor Identification section below.
- AI support conversations with our AI assistant.
- MCP and API access logs relating to connected agents and tokens.
- Support conversations and correspondence with our team.
- Referral tracking data relating to referral codes and links.
- Payout identity and KYC information that you provide when requesting payouts and undergoing verification.
3. How We Use Information
We use information to:
- provide, operate, maintain, and improve the Services;
- create and secure your account and authenticate sessions;
- process purchases through Stripe and manage plans and entitlements;
- administer paper, evaluation, and funded accounts, including applying trading rules and evaluating performance;
- process and review payout requests, including identity, KYC, rule-compliance, and fraud checks;
- operate AI support and MCP and API features;
- detect, prevent, and investigate fraud, abuse, and security incidents;
- communicate with you, including service and support messages; and
- comply with legal obligations and enforce our terms and policies.
6. Online Advertising and Visitor Identification
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We, or service providers on our behalf, may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.
Our visitor identification partner is RB2B, operated by Retention.com. You can also opt out directly on this site at any time. Choose Decline in our cookie notice, or open your cookie choices from the Do Not Sell or Share My Personal Information link, and we will stop loading the visitor identification technology in your browser going forward. We also honor the Global Privacy Control (GPC) browser signal as an opt out.
7. Your California Privacy Rights and Do Not Sell or Share
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you certain rights regarding your personal information. These include the right to know what we collect and how we use it, the right to access and delete your information, the right to correct it, the right to opt out of the sale or sharing of your personal information, and the right to limit the use of sensitive personal information. We will not discriminate against you for exercising any of these rights.
We do not sell your personal information for money. Our use of an online advertising and visitor identification partner may be considered sharing or a sale under California law. To opt out, choose Decline in our cookie notice or use the Do Not Sell or Share My Personal Information choice on our site, and opt out with our partner at https://app.retention.com/optout. We recognize the Global Privacy Control (GPC) browser signal as a valid opt out request, so if your browser sends that signal we will treat it as a choice to opt out.
To exercise your other California rights, contact us at [email protected]. We may need to verify your identity before we act on a request, and you may use an authorized agent where the law allows. See our State-Specific Privacy disclosures for more detail.
8. Security
We take reasonable measures designed to protect information. These include encryption in transit using HTTPS/TLS (via Cloudflare), session-cookie authentication, reliance on Stripe for payment card handling (so that card data is handled under Stripe's controls), MCP and API tokens stored in hashed form (not plaintext) that are revocable and rate-limited, and role-restricted administrative access with audit logging.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and tokens.
9. Data Retention
We retain personal information for as long as needed to provide the Services, maintain your account, comply with our legal, tax, accounting, and regulatory obligations, resolve disputes, prevent fraud, and enforce our agreements.
Retention periods vary by data type and context. When information is no longer needed, we take reasonable steps to delete or de-identify it. Specific retention periods are subject to attorney review.
10. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
You can update certain account information directly in the Platform and manage cookies through your browser. To exercise applicable rights, contact [email protected]. We may need to verify your identity before acting on a request, and some information may be retained as permitted or required by law.
11. Region-Specific Rights
Residents of certain jurisdictions may have additional rights under applicable privacy laws. For more information about those rights and how to exercise them, please see our State-Specific Privacy disclosures, or contact [email protected].
12. Children's Privacy
The Services are not directed to children, and we do not knowingly collect personal information from individuals who are not at least the age of majority in their jurisdiction. If you believe a person below the applicable age has provided us personal information, please contact [email protected] so we can take appropriate action.
13. International Users and Processing
We and our service providers may process and store information in the United States and other countries where we or they operate. These countries may have data-protection laws that differ from those in your jurisdiction. By using the Services, you understand that your information may be transferred to and processed in such locations, subject to appropriate safeguards where required by law.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date below and may provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
15. Privacy Contact
If you have questions or requests regarding this Policy or your information, contact us at [email protected]. See our Contact page for additional ways to reach Funded with Flow L.L.C.