Privacy Policy

1. Who we are

Funlet is a group coordination assistant operated by Dissigno International, Inc., a Delaware corporation doing business as Streamline Ops (“we,” “us,” “our”). Funlet is offered as a Slack application, as a Model Context Protocol (MCP) server compatible with AI assistants including Anthropic Claude and OpenAI ChatGPT, and through related services at funlet.ai. This Privacy Policy describes how we collect, use, share, retain, and protect your information when you use Funlet on any of these surfaces.

For questions about this policy or to exercise your rights, contact us at privacy@funlet.ai.

2. Information we collect

We collect the following categories of information depending on how you use Funlet.

From you, when you create an organizer account:

• Name and display name you provide
• Email address
• Phone number, if you choose to provide one to receive account-related notifications
• Time zone, derived from your platform profile or set explicitly by you

From the platform you connect through (Slack, Claude, ChatGPT, or another MCP-compatible assistant):

• A unique identifier for your account on that platform
• Workspace or organization identifier, if applicable
• Display name and email associated with your platform account

From your use of Funlet:

• Events you create, including event name, date, time, location, and notes
• Time slots proposed in Sync-ups
• Crews (saved groups) you create, including crew names
• Contacts you add manually or import (name, phone number, email if provided)
• Responses submitted by people you invite (yes/no/maybe, time-slot availability, RSVPs)
• Send history, including which invitations or messages were sent and when
• Subscription status and send count

From people you invite (“invitees”):

• Phone number, supplied by you when you add the contact, or supplied by the invitee themselves when they join through a Crew Link
• Name, supplied by you or the invitee
• Responses to messages you send them (e.g., “Yes” to an invitation)
• Delivery receipts from carriers (whether the message was delivered, failed, or the recipient opted out)

From calendar integrations, only if you connect them:

• Read-only availability data from Google Calendar or Microsoft Outlook Calendar, used to show your free/busy times when planning events
• Permission to write a confirmed event back to your calendar, used only when you confirm an event
• We do not read the content of your calendar events. We see only the time blocks marked as busy.

From contact integrations, only if you connect them:

• Names, phone numbers, and email addresses of your contacts from Google Contacts or Microsoft Outlook Contacts, used to populate the Funlet contact picker

From billing:

• Billing is processed by Stripe. We do not store credit card numbers, bank account numbers, or other payment instrument details. We receive from Stripe only your subscription status, the last four digits of your payment method, and the billing email associated with your subscription. Stripe's privacy policy governs payment data: https://stripe.com/privacy

Automatically, when you use Funlet:

• Technical logs (IP address, user agent, timestamps) used for security, abuse detection, and debugging
• Aggregated usage statistics (number of events, number of sends) used for billing and product improvement

3. How we use your information

We use the information described above only to operate Funlet and only for the purposes you would reasonably expect:

• To deliver the service: create events, send invitations and reminders, collect responses, and confirm events to participants
• To communicate with you about your account, including billing notifications and product updates
• To process payments through Stripe
• To prevent fraud, abuse, and violations of our Terms of Service
• To comply with legal obligations, including responding to lawful requests from authorities
• To improve Funlet through aggregated, de-identified analytics

We practice data minimization: we collect only the information needed to provide the service you have requested, and we do not collect contextual data or chat history beyond what is necessary to fulfill your immediate request.

4. SMS and RCS messaging — your information will never be shared

When you or someone you invite provides a phone number to Funlet for the purpose of receiving messages about an event, that phone number and the associated consent to receive messages are treated with the highest level of protection.

The mobile information of any user opting in to receive Funlet messages will never be shared or sold to third parties or lead generators for any purpose. All other categories of data described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, except as strictly necessary to deliver the messages you have requested (specifically, our messaging carrier, Twilio, Inc., which processes the messages on our behalf).

We do not use phone numbers for marketing. We do not share phone numbers with affiliates. We do not sell phone numbers under any circumstances.

5. How we share information

We share information only with the third-party service providers required to operate Funlet, and only the data each provider needs to perform its function. We do not sell information to anyone for any purpose.

In addition, we share information with the platform you use Funlet through (Slack, Claude, ChatGPT, or another MCP host). Each platform has its own privacy policy, which you agreed to when you signed up for that platform. We have no control over data practices of these platforms.

We may also disclose information when required by law, in response to a lawful request from a government authority, or to protect our rights, property, or the safety of users.

6. AI and machine learning

Funlet uses AI models from Anthropic and other providers to power features such as natural-language event parsing and the in-app help system. These features process your data only to generate a response to your immediate request.

Funlet does not use any of your data — including event details, messages, contacts, or platform data — to train AI or machine learning models, under any circumstances.

Our AI service providers operate under terms that prohibit the use of API inputs and outputs to train competing models. Anthropic specifically does not train its models on data submitted through the Claude API.

7. How long we keep your information

We keep information only as long as needed to provide Funlet to you, comply with our legal obligations, resolve disputes, and enforce our agreements.

• Active account data: retained while your account is active.
• After you delete your account or uninstall Funlet: all personal data is deleted within 30 days. We honor deletion requests received via privacy@funlet.ai within the same 30-day window.
• Billing records: retained for up to seven years to comply with tax and accounting obligations.
• Aggregated, de-identified analytics: may be retained indefinitely.
• Legal-hold data: retained as required by applicable law, court order, or pending dispute, even after a deletion request.

8. Your privacy rights

Depending on where you live, you have rights regarding your personal information. Funlet honors all of the following requests regardless of jurisdiction:

• Access: receive a copy of the personal information we hold about you
• Rectification: correct inaccurate information
• Erasure: delete your personal information (“right to be forgotten”)
• Portability: receive your data in a structured, machine-readable format
• Restriction: ask us to limit how we use your information
• Objection: object to specific uses of your information
• Opt-out of sale or sharing: Funlet does not sell or share your personal information for cross-context behavioral advertising; this right is honored by default
• Non-discrimination: we will not deny service, charge different prices, or provide a different quality of service because you exercised a privacy right

California residents (CCPA / CPRA): in the prior 12 months, we have collected the categories of information listed in §2. We have not sold or shared personal information for cross-context behavioral advertising. We do not knowingly collect personal information of California residents under 16 without consent.

EU / UK / EEA residents (GDPR / UK GDPR): the lawful bases on which we rely are (a) performance of our contract with you (Article 6(1)(b)), (b) compliance with legal obligations (Article 6(1)(c)), and (c) our legitimate interests in operating, improving, and securing Funlet (Article 6(1)(f)). You have the right to lodge a complaint with your supervisory authority.

To exercise any right: email privacy@funlet.ai with a description of your request and enough information for us to verify your identity. We will respond within 30 days. We may extend this window by up to 60 days for complex requests, in which case we will notify you. We do not require you to create an account to make a request.

9. Delete your data

You can delete your Funlet data at any time through three paths:

If you have an active Funlet account:

Ask your AI assistant: “Delete my Funlet account.” Funlet will confirm and remove your data within 30 days.

If you receive Funlet messages but do not have an account (you are an invitee):

Reply STOP to any Funlet text message. You will be opted out immediately. To request deletion of your phone number from our system, email privacy@funlet.ai.

If you cannot access your account or your AI assistant:

Email privacy@funlet.ai with the subject line “Delete my data” and we will verify your identity and process the deletion within 30 days.

10. Data security

We protect your information through industry-standard technical and organizational measures, including encryption in transit (TLS 1.2 or higher), encryption at rest (AES-256 or equivalent), access controls, security monitoring, and regular review of our security practices.

No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify affected users and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33–34 and applicable state law.

11. International data transfers

Funlet operates from the United States. If you access Funlet from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For transfers from the EU, UK, or Switzerland, we rely on the Standard Contractual Clauses approved by the European Commission and applicable adequacy decisions where available.

12. Children's privacy

Funlet is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users between 13 and 17 may use Funlet only with the consent of a parent or legal guardian.

If you believe a child under 13 has provided us with personal information, contact us at privacy@funlet.ai and we will delete that information.

13. Changes to this policy

We may update this policy from time to time. When we make changes, we update the “Last updated” date at the top of this page. For material changes that affect your rights, we will provide additional notice — for example, via email if we have your address, or via in-product notice — at least 30 days before the change takes effect. Continued use of Funlet after the effective date constitutes acceptance of the updated policy.

14. Contact

Dissigno International, Inc. (Streamline Ops)
privacy@funlet.ai
General support: support@funlet.ai
Support site: funlet.ai/support

Governing law: State of Delaware, United States.