Privacy Policy

Famutual LLC · Effective October 14, 2026 · Draft under attorney review; this policy applies from the date counsel approves it, and we will post that date here.

This policy explains what Famutual LLC ("Famutual", "we") collects when you use famutual.com and app.famutual.com (the "Service"), why, who sees it, and your choices. Short version: we collect what the Service needs to run your family's fund, we never sell it, every member of a fund sees the fund's records, and you can export or delete your data.

1. What we collect

Account information. Name, email address, password (stored only as a hash), state of residence, two-step login secrets, and the fund you belong to.

Fund information your family enters. The fund's name, state, rules, the company's name and formation details, members' names, emails, states and roles, pledged and contributed amounts, loan applications (purpose, amount, term, collateral description, cosigner, and the take-home pay figure used for the payment test), committee votes, withdrawal requests, and documents generated and signed in the Service.

Bank transaction data. If your treasurer connects the fund's account by a read-only connection, or imports statements, we receive the account's transaction list: dates, amounts, descriptions and sender names, so deposits and payments can be matched to members. We store the account's pay-in details (bank name, routing number, account number) encrypted, and a read-only access token encrypted. We never receive credentials that could move money.

Signatures. When a member signs a document electronically we record the typed name, the time, the member's network address, and a cryptographic hash of the document.

Technical data. Server logs with network addresses, browser type and the pages requested, kept briefly for security and reliability. We use session cookies to keep you signed in and a language preference cookie on the public site. We do not use advertising trackers.

Billing. Famutual's own subscription is billed through Stripe. Stripe collects the card or bank details; we receive only a customer reference, the subscription status, and the last digits and brand of the payment method. Stripe's privacy policy covers what Stripe collects.

Email. Messages you send to hello@famutual.com, and delivery records of messages we send you.

2. How we use it

To run the Service: creating and managing funds and members, matching contributions and payments from the bank feed, calculating interest, running the late-payment ladder, building statements, generating and storing signed documents, sending the notices the Service sends (reminders, statements, task emails), and billing Famutual's subscription. To keep the Service secure and reliable. To respond when you write to us. To meet legal obligations.

We do not sell personal information, do not share it with data brokers, and do not use it for advertising. We do not use your family's financial data to train artificial-intelligence models.

3. Who sees it

Your family. Every member of a fund can see the fund's full ledger, every loan (borrower, amount, terms, status), every member's balance, the rules, and the statements. Committee members see loan applications and votes. The founder and treasurer see bank transactions and pay-in details. This transparency is by design; it is how the fund stays honest. Members' email addresses are visible to the fund's founder and treasurer and on the fund's documents.

Our providers, who process data only on our instructions and under contract: Supabase (database, authentication, file storage), Vercel (hosting), Resend (email), Stripe (Famutual's subscription billing), and, when a fund connects one, the bank or feed provider the fund chose. All are in the United States.

Nobody else, unless the law requires it (a subpoena, a court order), to protect the rights or safety of Famutual, a fund or its members, or in a sale or merger of the Service, in which case this policy continues to apply and we will tell you.

4. Your choices and rights

• See and export. Every member can see their own records in the Service and download their statements and signed documents. The founder or treasurer can export the whole fund's data.
• Correct. Members can update their own profile; the founder or treasurer updates fund details.
• Delete. You may close your account. A fund's founder or treasurer may close the fund; we keep its data available for export for 90 days, then delete it from active systems. We keep what the law requires us to keep (for example billing records) and copies in backups for up to 35 days longer. Because the fund's ledger is a shared, append-only record of money among family members, we cannot delete one member's transactions from a fund that remains open; a member who leaves is marked as left and their records stay with the fund.
• Email. Notices about your fund (reminders, statements, tasks) are part of the Service. Any marketing email we ever send will have an unsubscribe link.
• Do Not Track. We do not track you across other sites, so there is nothing to honor beyond what this policy already describes.

Residents of California, Colorado, Connecticut, Virginia, Utah and other states with privacy laws have rights to access, correct, delete and port their data and to opt out of sales and targeted advertising; we do neither of the last two. To exercise any right, email hello@famutual.com from the address on your account. We will not treat you differently for exercising a right.

5. Security

Data is encrypted in transit and at rest. Bank access tokens and account numbers are encrypted with keys kept outside the database. Access to the database is restricted by row-level policies so a member sees only their own fund. Two-step login is available to every member and required for financial actions where the fund turns it on. The ledger and audit log are append-only and hash-chained, so records cannot be altered after the fact. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

6. Retention

Account and fund data: while the fund is open, then 90 days for export, then deleted. Signed documents: available while the fund is open and in the export. Server logs: up to 30 days. Billing records: 7 years. Backups: rolling, up to 35 days.

7. Children

The Service is for adults. We do not knowingly collect information from anyone under 18. A fund may record a minor's name only if your family chooses to name a beneficiary; do not add children as members.

8. Changes and contact

We will post changes here with a new effective date and email account holders about material changes at least 30 days before they take effect.

Famutual LLC · 21168 E Ocotillo Rd #1224, Queen Creek, AZ 85142 · hello@famutual.com