At Private Funnel, privacy is not an afterthought — it is the foundation of everything we build. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.
1. Introduction
Private Funnel (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy applies to all visitors, users, and customers of the Private Funnel website and services (collectively, the “Services”).
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.
Our Privacy-First Promise: We collect only the data we need, we never sell your information, and you always retain ownership of the data collected through your funnels.
2. Information We Collect
We collect information to provide, maintain, and improve our Services. The types of information we collect include:
2.1 Information You Provide Directly
When you register for an Account, create funnels, or contact us, you may provide:
- Account Information: Name, email address, company name, and password;
- Billing Information: Payment details processed securely by our payment providers;
- Communications: Any messages, feedback, or support requests you send us;
- Content: Marketing materials, funnel configurations, and campaign data you upload.
2.2 Information Collected Automatically
When you use our Services, we automatically collect certain technical information:
- Log Data: IP address, browser type, operating system, referring URLs, and pages visited;
- Device Information: Device type, unique device identifiers, and mobile network information;
- Usage Data: Features used, time spent on pages, click patterns, and error logs;
- Cookies: See our Cookie Policy for detailed information.
2.3 User Data Collected Through Your Funnels
When end-users interact with funnels you create, the following data may be collected on your behalf:
| Data Category | Examples | Collected By |
|---|---|---|
| Contact Information | Name, email, phone number | You (via your funnel) |
| Behavioral Data | Page views, clicks, form submissions | You (via your funnel) |
| Consent Records | Opt-in timestamps, IP address | Private Funnel (on your behalf) |
3. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide Services: Creating and managing your Account, processing payments, and enabling funnel functionality;
- To Improve Services: Analyzing usage patterns to enhance features, fix bugs, and optimize performance;
- To Communicate: Sending service updates, security alerts, and support responses;
- To Ensure Security: Detecting and preventing fraud, abuse, and unauthorized access;
- To Comply with Law: Meeting legal obligations and responding to lawful requests.
3.1 Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), our legal basis for processing personal data is:
- Contractual Necessity
- Processing required to fulfill our contract with you (e.g., providing the Services you subscribed to).
- Legitimate Interests
- Processing necessary for our legitimate business interests, such as fraud prevention and service improvement, provided these interests do not override your rights.
- Consent
- Processing based on your explicit consent, which you may withdraw at any time (e.g., marketing communications).
- Legal Obligation
- Processing required to comply with applicable laws and regulations.
4. Data Ownership & Your Rights
Private Funnel operates on a fundamental principle: your data belongs to you. This applies both to your Account data and the User Data collected through your funnels.
4.1 Your Data Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you;
- Right to Rectification: Request correction of inaccurate or incomplete data;
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data;
- Right to Restrict Processing: Request limitation on how we use your data;
- Right to Data Portability: Receive your data in a structured, machine-readable format;
- Right to Object: Object to processing based on legitimate interests or direct marketing;
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
4.2 Exercising Your Rights
To exercise any of these rights, please contact us at legal (at) privatefunnel (dot) com. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.
4.3 User Data Ownership
All leads, contacts, and behavioral data collected through your funnels are your exclusive property. Private Funnel:
- Does not access your User Data without your explicit permission;
- Does not use your User Data for our own purposes;
- Does not sell, rent, or share your User Data with third parties;
- Provides tools for you to export, manage, and delete User Data at any time.
“We are stewards of your data, not owners. Our role is to provide the infrastructure; the value created belongs entirely to you.”
5. Data Sharing & Third Parties
We are committed to minimizing data sharing. We only share information in the following limited circumstances:
5.1 Service Providers
We engage trusted third-party companies to perform functions on our behalf, such as:
| Provider | Service | Data Shared |
|---|---|---|
| Stripe | Payment processing | Billing information |
| Amazon Web Services | Cloud hosting & storage | Encrypted account data |
| Cloudflare | CDN & security | IP addresses (anonymized) |
| SendGrid | Email delivery | Email addresses |
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before your personal information becomes subject to a different privacy policy.
5.4 What We Never Do
We explicitly do not:
- Sell your personal data to advertisers or data brokers;
- Share your User Data with third parties for marketing purposes;
- Build advertising profiles based on your data;
- Engage in cross-site tracking of your visitors.
6. Data Security
We implement industry-leading security measures to protect your data:
- Encryption: All data in transit uses TLS 1.3 encryption. Data at rest is encrypted using AES-256;
- Access Controls: Role-based access controls (RBAC) limit who can access systems and data;
- Regular Audits: We conduct quarterly security audits and annual penetration testing;
- Incident Response: We maintain a documented incident response plan and notify affected users within 72 hours of discovering a breach;
- Employee Training: All team members undergo annual security and privacy training.
6.1 Security Certifications
Private Funnel maintains the following security standards:
- SOC 2 Type II certified;
- GDPR compliant data processing practices;
- CCPA compliant consumer rights handling.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
| Data Type | Retention Period | Rationale |
|---|---|---|
| Account Information | Duration of Account + 2 years | Legal obligations, dispute resolution |
| Billing Records | 7 years | Tax and accounting requirements |
| Log Data | 90 days | Security monitoring and debugging |
| User Data (your funnels) | As long as your Account is active | You control retention via Account settings |
Upon Account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
8. International Transfers
Private Funnel is headquartered in the United States. If you access our Services from outside the US, your data may be transferred to, stored, and processed in the US or other countries where our service providers operate.
8.1 Safeguards for EEA Users
For users in the European Economic Area, we ensure appropriate safeguards are in place for international transfers, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- Adequacy decisions where applicable;
- Data Processing Agreements (DPAs) with all subprocessors.
9. Children's Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at legal (at) privatefunnel (dot) com, and we will delete the information promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make changes:
- We will revise the “Last updated” date at the top of this page;
- We will notify you via email for material changes;
- We will obtain renewed consent where required by law.
Your continued use of the Services after changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this page regularly.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
- Email: legal (at) privatefunnel (dot) com
For users in the European Union, you also have the right to lodge a complaint with your local data protection authority.