Privacy Policy

1. Who We Are

This website is operated as a private development project by:

Simon Ansel
Schumannstr. 49, 22083 Hamburg, Germany
Email: contact@fundlab.ai
LinkedIn: linkedin.com/company/fundlab-ai

For all privacy-related enquiries, please contact us at privacy@fundlab.ai.

See also our Imprint for full legal details.

2. What Data We Collect and Why

2.1 Data you provide directly — via email

The only way to contact us at this time is by sending an email to contact@fundlab.ai or privacy@fundlab.ai. When you do, we receive:

• Your email address
• Your name (if provided)
• The content of your message
• Any attachments you include

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — to respond to your enquiry.

This website does not currently include any contact forms, newsletter sign-ups, demo request forms, or user registration flows. No personal data is submitted through this website itself.

2.2 Server log data collected automatically by Vercel

This website is hosted on Vercel Inc. (340 Pine Street, Suite 701, San Francisco, CA 94104, USA). When you visit any page, Vercel's infrastructure automatically records standard server log data, which may include:

• IP address (used to route the request; subject to Vercel's retention and anonymisation policies)
• Browser type and version (User-Agent header)
• Operating system
• Date and time of the request
• URL requested
• HTTP status code
• Approximate geographic region (country/city level, derived from IP)

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — for website security, performance, and infrastructure operation. This data is processed by Vercel as a data processor on our behalf.

For details on how Vercel handles this data, see Vercel's Privacy Policy. Vercel is certified under the EU–US Data Privacy Framework. Where data is transferred outside the EEA, Vercel applies Standard Contractual Clauses.

2.3 What we explicitly do NOT collect

• No analytics tools — Google Analytics, Plausible, Mixpanel, or any similar service is not installed on this website.
• No marketing or tracking cookies — No third-party cookies, tracking pixels, or advertising scripts are used.
• No user accounts — No account registration or login functionality exists on this website.
• No payment data — No payment processing of any kind occurs on this website.
• No newsletter — No email list or marketing subscription functionality is in use.
• No sensitive personal data — We do not collect health data, political opinions, or other special categories of data.
• No data from minors — This website is not directed at persons under 16.

3. Cookies

This website does not set any first-party cookies and does not load any third-party cookie scripts. The only cookies that may be set are strictly technical session cookies placed by Vercel's infrastructure for load balancing or security purposes. These are not used for profiling or advertising, are not readable by us, and are deleted when you close your browser.

No cookie consent banner is displayed because no non-essential cookies are used.

4. How We Use Your Data

Personal data received by email is used exclusively to:

• Respond to your enquiry
• Follow up on expressions of interest in the platform

We do not use your data for unsolicited marketing. We do not sell, rent, or share your personal data with third parties for commercial purposes.

5. Data Retention

Emails and enquiry data are retained for a maximum of 24 months from your last interaction with us, after which they are deleted. If you request earlier deletion, we will action this within 30 days (see Section 7).

Vercel server log data is retained in accordance with Vercel's own policies. We do not separately store or process Vercel log data beyond what is accessible through Vercel's standard infrastructure dashboard.

6. Data Sharing and International Transfers

We share data with the following parties:

• Vercel Inc. (USA) — as our hosting provider and data processor. Data transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Our email provider — incoming and outgoing emails are processed through our email hosting provider (Strato AG, Germany). Email data remains within the EU.
• Legal authorities — only if required by applicable law.

No other third parties receive your personal data.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we process your data
• Right to object — object to processing based on legitimate interest
• Right to data portability — request your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, contact us at privacy@fundlab.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit (HmbBfDI).

8. Security

This website is served exclusively over HTTPS. We apply appropriate technical and organisational measures to protect any personal data received by email against unauthorised access, loss, or disclosure. Access to personal data is restricted to the project operator.

9. Changes to This Policy

This Privacy Policy will be updated as the platform develops — in particular as new features (such as contact forms, user accounts, or analytics) are introduced. Material changes will be indicated by an updated "Last updated" date. We encourage you to review this page periodically.

10. Contact