Privacy policy

Information you provide

RapidFund stores account details, password hashes and session records; startup and Founder contact details; questionnaire answers; uploaded decks and supporting documents; funding preferences; and application drafts, approvals, selections, notes and outcomes. You control the startup information and application content you save or approve.

Support messages contain the information you choose to send us. Avoid including passwords or Google access credentials in support messages.

Google and Gmail information

Connecting Gmail is separate from signing in to RapidFund. With your consent, RapidFund receives your verified Google email address and account identifier, plus credentials that allow continuing access to the approved Gmail sending permission. Continuing-access credentials are encrypted in storage.

RapidFund requests basic Google account identity and the Gmail send-only permission (gmail.send). This permission lets RapidFund send email from your connected account. It does not permit reading your Gmail inbox, reading existing Gmail messages or deleting your Gmail messages. Inbox-reading and mailbox-metadata access are not part of this connection.

We use the connection to send the applications and follow-ups you explicitly approve and start in RapidFund. Google receives the approved outgoing message, recipient and any attachments needed to send it. RapidFund retains application content, approval records, delivery status and message or thread identifiers returned by Google so you can review outcomes and avoid duplicate sending.

Google account credentials and Gmail API response data are not sent to document-extraction AI models. RapidFund does not use Google user data for advertising or to train general-purpose AI models, and does not sell Google user data.

RapidFund's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How information is used and shared

We use information to authenticate accounts, save startup preparation, explain fund matching, prepare and validate applications, record your approvals, execute requested submissions and provide support. Google account information is used for the connected-account features described above.

An application is shared with its selected fund recipient or form provider when you approve its exact content and start submission. A fund receives the submitted content and attachments or document links, rather than access to your RapidFund account.

Service providers process information needed to operate RapidFund: hosting and storage infrastructure; Google for Gmail delivery; email services for account messages and support; and Anthropic for document-extraction requests you initiate. Document extraction can include uploaded documents and saved startup facts. It is separate from Gmail access. Authorized RapidFund administrators can access startup service records for administration and support; this does not allow them to approve applications as a Founder.

Storage, security and retention

RapidFund uses encrypted HTTPS connections, session and membership checks, and encrypted storage for private document originals and Gmail continuing-access credentials. Application approvals and changes are recorded so submitted work can be traced to the reviewed version.

Account, startup and application records are retained to provide the service, preserve your preparation and history, investigate delivery outcomes and prevent duplicate or unwanted contact. Backups and audit records can also contain retained information. There is no automatic account or startup deletion control. Contact us about access, correction or deletion requests; we will review the request and explain any information that must be retained for security, suppression or applicable obligations.

Your Gmail controls

You can pause sending or disconnect Gmail on your RapidFund Account page. Disconnecting removes the stored Gmail continuing-access credentials and prevents future use of that connection. You can also revoke RapidFund's access through your Google Account connections.

Disconnecting does not recall messages already accepted by Google or erase saved startup and application history. Account and startup data exports are available from your RapidFund Account page.

Cookies, document views and recipient choices

RapidFund uses cookies and browser storage for authentication and saved interface preferences. Security and service records can include technical request information. Private document links can record view and download events for the startup that shared them.

Recipients can use an application email's private opt-out link to stop future RapidFund fundraising email to that address. Opening the link only checks status; confirmation records the preference. A suppression record is retained to enforce the opt-out.

Contact and updates

Contact rapidfund@rapidmvp.app about this policy or your information. Changes to this policy are published on this page with an updated date.