Information we collect
- Account and identity data such as name, email, authentication status, role, organization membership, and security events.
- Customer-provided grant, nonprofit, employee-impact, application, review, payment-readiness, communication, and uploaded-file content.
- Public nonprofit registry, website, event, volunteer, and organization-profile information.
- Device, browser, referral, usage, diagnostic, and interaction data, including through Vercel Analytics and Microsoft Clarity when enabled.
- Support, pilot, outreach, and sales communications.
How we use information
- Provide, secure, administer, troubleshoot, and improve FoundationOS.
- Authenticate users, enforce roles and organization boundaries, and investigate abuse.
- Deliver requested workflows, communications, imports, reporting, and optional AI-assisted features.
- Respond to support, procurement, security, privacy, and sales requests.
- Comply with law and enforce agreements.
How information is disclosed
We disclose information to service providers that support hosting, authentication, database, file storage, email, analytics, public directory data, and optional AI processing; to customer administrators and authorized workspace users; when a customer directs us; and when required for security, legal process, or protection of rights. We do not sell personal information for money.
Public information
Public nonprofit profiles, directories, events, volunteer opportunities, and organization-submitted public content may be visible to anyone and indexed by search engines. Account-only and private workspace content is not intended for public indexing.
Retention and deletion
Information is kept for the service relationship, legitimate operational and security needs, contractual retention, legal obligations, and managed backup cycles. Customers may request export or deletion, subject to legal holds, fraud and security records, agreement terms, and backup rotation.
Choices and requests
Depending on location and relationship, individuals may request access, correction, deletion, or a copy of personal information. Customer-workspace requests may be routed to the customer that controls the data. Contact privacy@fundamentl.app.
Security, children, and changes
We use the controls described in the Security Overview, but no system is risk-free. FoundationOS is intended for organizational users and is not directed to children. Material Policy updates will receive a new effective date.