Fundzeo Privacy Policy
Last Updated: August 2026 • Product of Roguetrove Ventures (OPC) Private Limited
1Overview & Legal Business Identity
This Privacy Policy describes how Fundzeo ("the Service"), accessible at https://fundzeo.com, a software product developed, owned, and operated by Roguetrove Ventures (OPC) Private Limited ("Company", "we", "us", "our"), collects, uses, protects, and handles information when education consultancies and their authorized personnel use our multi-tenant SaaS platform.
Fundzeo is designed to assist education consultancies in managing student admissions, institution commission tracking, payment reconciliation, and team workflows. We respect your privacy and are committed to safeguarding the data you entrust to us.
2Information We Collect
- Consultant Account Information: Name, work email address, agency name, and phone number when you register for an account or join an existing consultancy team.
- Operational Consultancy Data: Partner college and university names, academic courses, student admission records (student name, contact details, program choices, course fees, and commission percentages).
- Financial & Payment Records: College remittance dates, bank reference/NEFT numbers, receipt amounts, and commission allocation entries.
- Technical & Log Data: IP address, browser user-agent, session timestamps, and system audit event records strictly for security and anti-abuse verification.
3. Google User Data, OAuth SSO & Google Drive Disclosures
Fundzeo offers optional Google OAuth single sign-on (SSO) and Google Drive cloud storage integration to enhance your workflow. In strict compliance with the Google API Services User Data Policy, here is the exact disclosure of what Google user data is accessed, how it is used, and how it is protected:
A. Google Sign-In (SSO)
When you choose to sign in to Fundzeo using Google OAuth, we request access to basic identity scopes (openid, email, profile). We access your Google user ID, primary email address, full name, and profile picture avatar solely to authenticate your identity and create or log in to your tenant account.
B. Google Drive Storage Integration
Fundzeo allows consultancy owners to connect their own Google Drive account for storing student application documents (such as mark sheets, passports, and university offer letters).
- Scope Requested:
https://www.googleapis.com/auth/drive.file - Access Limitation: Under this per-file scope, Fundzeo only accesses, creates, modifies, and organizes files and folders that are created or opened directly by Fundzeo for your consultancy. Fundzeo has zero access to any other private files, personal documents, or pre-existing folders in your Google Drive.
- Purpose of Use: To create an organized folder structure (e.g.
Fundzeo > College Name > Student Name) inside your consultancy's own Google Drive so your team maintains direct ownership of student documents. - Encryption & Token Storage: Google OAuth refresh tokens are encrypted at rest using industry-standard AES-256-GCM authenticated encryption with isolated encryption keys. Decryption occurs only in ephemeral server memory during authorized file sync operations.
- No AI Training or Advertising: Fundzeo does not use Google user data or document contents to train artificial intelligence (AI) / machine learning (ML) models, nor do we share or monetize Google user data for advertising.
C. Disconnecting & Revoking Google Access
You maintain complete control over Google permissions:
- From Fundzeo: Navigate to Settings > Drive Connection and click Disconnect Google Drive. This immediately purges all encrypted tokens from our database.
- From Google: You can revoke Fundzeo's access at any time directly through your Google Account Security Dashboard at https://myaccount.google.com/permissions.
4Indian Aadhaar & Sensitive Document Zero-Persistence Guarantee
When consultants utilize Fundzeo's optical character recognition (OCR) tool to verify student identity details, all image processing occurs ephemerally in volatile memory solely to extract applicant name, year of birth, and gender for field autofill.
Strict Invariant: Fundzeo NEVER stores, writes, or persists 12-digit Indian Aadhaar numbers, UIDAI identifiers, or raw Aadhaar card images in our databases, server logs, or backups.
5Sub-processors & Cloud Infrastructure
To deliver our SaaS platform, Fundzeo engages reputable third-party cloud infrastructure providers under strict confidentiality agreements:
6Data Security & Tenant Isolation
We implement enterprise security controls to protect your data against unauthorized access, loss, or alteration:
- Strict PostgreSQL Row Level Security (RLS) ensuring each consultancy can only query its own isolated data.
- HTTPS/TLS 1.3 encryption for all data in transit with HTTP Strict Transport Security (HSTS).
- Content Security Policy (CSP), anti-clickjacking
frame-ancestors 'none', andX-Content-Type-Options: nosniffheaders. - Encrypted application secrets and credential storage.
Contact & Privacy Requests
For privacy inquiries, data access requests, or account deletion requests, please contact:
Roguetrove Ventures (OPC) Private Limited
Product: Fundzeo (https://fundzeo.com)
Location: Kudlu Road, Bengaluru, Karnataka, India
Privacy Inquiries: privacy@fundzeo.com
Customer Support: hello@fundzeo.com