30% off every challenge. Use code SUMMER at checkout — until August 31.

Privacy policy

This Privacy Policy explains how Funded Capital collects, uses, and protects your personal data when you use funded-capital.com and our services. We act as the data controller for the personal data described here, and process it in accordance with the EU General Data Protection Regulation (GDPR) and applicable Lithuanian law.

01

Who we are

Funded Capital

Registered office: Vilnius, Lithuania

Contact for privacy matters: support@funded-capital.com

02

What data we collect

We collect only what we need to provide the Service:

  • Account data: your name, email address, and login credentials for your Funded Capital account.
  • Purchase data: records of the challenges you buy, the amount, and a payment reference. Card details are handled by our payment processor and are not stored by us.
  • Trading data: the performance data generated on your simulated accounts, such as account balance, equity, and trade records, used to evaluate your results against the program rules.
  • Technical data: basic information needed to operate and secure the site, such as data contained in authentication cookies and standard server logs.
  • Communications: messages you send us (for example, support requests).
03

Why we process your data, and our legal basis

To provide the Service (create your account, run evaluations, deliver credentials, process payouts): performance of a contract with you (GDPR Art. 6(1)(b)).

To process payments and prevent fraud, and to keep records to respond to payment disputes: contract and our legitimate interests (GDPR Art. 6(1)(b) and (f)).

To send service-related emails (credentials, lifecycle notifications, important notices): performance of a contract.

To comply with legal obligations, including accounting and tax record-keeping: legal obligation (GDPR Art. 6(1)(c)).

To secure the Service and prevent abuse: our legitimate interests (GDPR Art. 6(1)(f)).

We do not sell your personal data.

04

Service providers we share data with

We use trusted third parties to run the Service. They process personal data only on our behalf and only as needed to provide their function:

Stripe — payment processing.

Supabase — database, authentication, and account data storage.

Resend — delivery of transactional and service emails.

Vercel — website hosting and delivery.

Cloudflare — DNS and email routing.

Dominion Markets — provision of the simulated trading platform accounts used for evaluation.

Some of these providers may process data outside the European Economic Area. Where that happens, appropriate safeguards (such as the European Commission's Standard Contractual Clauses) are in place.

05

Cookies

We use only cookies that are strictly necessary to operate the site, primarily to keep you logged in (authentication). These do not require consent. We do not use advertising or analytics tracking cookies. If this changes, we will update this Policy and, where required, ask for your consent.

06

How long we keep your data

Account and trading data: retained while your account is active and for up to 90 days after the account is closed, after which it is deleted or anonymized. This period also allows us to handle any payment disputes that may arise.

Financial and accounting records (such as invoices): retained for as long as required by applicable Lithuanian tax and accounting law, which may be up to 10 years.

We keep data no longer than necessary for the purposes described in this Policy or as required by law.

07

Your rights

Under the GDPR, you have the right to: access your personal data; request correction of inaccurate data; request deletion ("right to be forgotten") where applicable; restrict or object to certain processing; request data portability; and withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@funded-capital.com. We will respond within the timeframe required by law. You also have the right to lodge a complaint with the Lithuanian data protection authority (State Data Protection Inspectorate, vdai.lrv.lt).

08

How we protect your data

We use appropriate technical and organizational measures to protect your personal data, including access controls and encryption in transit. No system is completely secure, but we take reasonable steps to reduce risk.

09

Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from minors.

10

Changes to this policy

We may update this Policy from time to time. The "Last updated" date shows the latest version. Material changes will be communicated where appropriate.

11

Contact

For any questions about this Policy or about how we handle your personal data, contact us at support@funded-capital.com.