Privacy Policy

Who we are

Xfunding (www.xfunding.io) is operated by Collective Innovation AS, a company registered in Norway (“we”, “us”). We are the data controller for personal data processed through this website. You can reach us at hakan@collectiveinnovation.no.

What we collect

• Account data. If you create an account (currently invite-only), we store your email address and authentication credentials with our authentication provider, Supabase. We also store your plan and role settings.
• Usage limits. To enforce fair-use limits we keep short-lived counters of search activity linked to your account or IP address. These reset within 24 hours and are not used for profiling.
• Server logs. Our hosting provider (Vercel) keeps standard technical logs (IP address, user agent, requested pages) for security and operations.
• Preferences. Your theme choice (light/dark) is stored locally in your browser and never sent to us.

We do not run advertising, marketing trackers or third-party analytics cookies.

Organisation and project data

The organisations, projects and results shown on Xfunding come from public EU sources (see Data Sources). This data concerns organisations, not private individuals. If you believe a record contains personal data that should be corrected or removed, contact us and we will assess the request under applicable law.

Legal bases and retention

We process account data to provide the service you signed up for (contract), usage limits and logs to keep the service secure and fair (legitimate interest). Account data is kept while your account exists and deleted when you ask us to close it. Log data is retained per our hosting provider’s standard schedule.

Processors and transfers

We use Supabase (database and authentication, hosted in the EU) and Vercel (hosting, EU region deployment) as processors. We do not sell personal data or share it with third parties for their own purposes.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data, object to processing, and lodge a complaint with a supervisory authority (in Norway: Datatilsynet). To exercise any right, email hakan@collectiveinnovation.no.

Changes

We will update this policy as the service evolves (for example if payments or analytics are introduced) and change the date at the top of this page.