Legal
Privacy Policy
TODO[legal] This is a placeholder. The final Privacy Policy must be reviewed by counsel before launch. Last updated: pending.
Data we collect
- Account identity from MagnusID (sub, email, name)
- Business profile details the user enters
- Eligibility-screening inputs and outputs
- Application drafts, edits, and submission history
- Supporting documents the user uploads
- System logs (request metadata, error traces) — retention bounded
How we use it
- Operate the screening, matching, and drafting features
- Send the user's own data into the brain on their behalf to draft applications — never used for training third-party models
- Provide service notices (no marketing without explicit opt-in)
- Comply with legal obligations and respond to lawful requests
Sharing
We share data with the funder ONLY when the user clicks submit on an application. We never sell user data. Operational vendors are listed in the appendix to the final policy.
User rights
The final policy must spell out access, correction, deletion, portability, and opt-out rights under applicable law (CCPA / CPRA for California; GDPR if/when EU users are supported).
Contact
Privacy questions can be sent to privacy@magnusfunding.com.