Privacy Policy

This Privacy Policy explains how Black Flag Funding LLC DBA BFF Software ("Company," "we," "us," or "our") collects, uses, discloses, and protects information in connection with FundFriend.online ("Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, do not use the Service.

1 Information We Collect

1.1 Account and Registration Information

When you create an account, we collect your name, email address, company name, portal subdomain, and billing information. We do not store full payment card numbers — payment processing is handled by Stripe, Inc. subject to their own privacy policy.

1.2 Usage Data

We automatically collect information about how you use the Service, including log data (IP address, browser type, pages visited, timestamps), portal activity (lead submissions, commission events, announcement interactions), and feature interaction data. This data is used to operate and improve the Service.

1.3 Partner and Lead Data

When you invite partners or submit lead records to the Service, that data is stored on our servers to provide the core functionality of the Service. You are solely responsible for the accuracy, legality, and proper handling of any partner or lead data you input or upload. You represent that you have obtained any required consent from your partners for their data to be stored and processed by the Service.

1.4 Communications

If you contact us via email or support channels, we retain records of those communications.

1.5 Cookies and Tracking Technologies

We use cookies and similar technologies to maintain session state, authenticate users, and gather aggregate analytics. You may disable cookies via your browser settings, though this may limit functionality of the Service.

2 How We Use Your Information

We use collected information for the following purposes:

• To provide, operate, and improve the Service
• To authenticate users and maintain account security
• To process billing and manage your subscription
• To send transactional emails (magic link logins, welcome messages, commission notifications, partner announcements) via Resend
• To send product updates or marketing communications (you may opt out at any time)
• To monitor for abuse, fraud, and unauthorized activity
• To comply with legal obligations
• To analyze aggregate usage patterns and improve product performance

3 How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service Providers: Third-party vendors who assist in operating the Service (hosting on DigitalOcean, payment processing via Stripe, email delivery via Resend, error monitoring via Sentry), bound by confidentiality obligations.
• CRM Integrations: If you connect a CRM platform (HubSpot, GoHighLevel, Salesforce, Close.io, or others), lead and partner data may be synced to those platforms according to the integration configuration you authorize. We are not responsible for how those platforms handle your data.
• Legal Requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of the Company, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.
• With Your Consent: We may share information for other purposes with your express consent.

4 Data Retention

We retain account data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Partner data, lead records, and commission logs are retained for the duration of your subscription plus 90 days after account closure, after which they are deleted. You may request earlier deletion by contacting us at legal@bffsoftware.com.

5 Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.2/1.3), hashed credential storage (bcrypt), JWT-based session authentication, server-level firewall and intrusion prevention (UFW, fail2ban, CrowdSec), and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6 Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us immediately at legal@bffsoftware.com.

7 Third-Party Links and Services

The Service may contain links to third-party websites or integrate third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing information with them.

8 Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, or delete your information. To exercise these rights, contact us at legal@bffsoftware.com. We will respond within a reasonable timeframe consistent with applicable law. Note that deletion of your account data may be limited by legal obligations or legitimate business needs (such as outstanding billing records).

9 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website or via email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10 Contact Us

If you have questions about this Privacy Policy, contact us at:

Black Flag Funding LLC DBA BFF Software
Utah, United States
Email: legal@bffsoftware.com