Fundky Security & Safety Guide
Payment Processing (Stripe Elements)
Card transactions are handled directly through Stripe Elements. Cardholder data is transmitted from the end user’s browser straight to Stripe and never touches Fundky’s servers. Stripe is a PCI DSS Level 1 service provider.
The site has been assessed by an independent evaluator.
The site has passed independent network and application penetration tests conducted by reputable security firms.
Privacy
Fundky maintains a comprehensive privacy policy. We continually reassess our practices to improve our services while complying with privacy laws and regulations.
We do not sell customers’ personal information to third parties.
You can review our privacy policy here: https://info.fundky.com/fr/politique-confidentialite/
Hosting Environment
Fundky production systems are hosted on Amazon EC2.
-
Servers located in Canada
-
PCI-DSS Level 1 service provider
-
Independently audited and verified
-
SAS-70 Type II and SSAE16
(AWS PCI Compliance)
Encryption
Fundky uses robust encryption methods and key-management procedures to ensure your sensitive information is protected.
Fundky websites are accessible via a 256-bit SSL certificate issued by Let’s Encrypt.
Credit-card details are never stored by Fundky.
Our payment gateway partners’ security pages:
-
WePay (PCI DSS compliant): https://go.wepay.com/security
-
Stripe (PCI DSS compliant): https://stripe.com/docs/security/stripe
-
PayPal (PCI DSS compliant): https://www.paypal.com/c2/webapps/mpp/pci-compliance?locale.x=en_C2#:~:text=PayPal%20is%20PCI%20compliant.&text=We%20hold%20certification%20under%20many,18%20SOC%201.
Our Company
Fundky takes appropriate measures to train its employees.
Fundky maintains an information-security training program aligned with PCI DSS standards.
We require written acknowledgment from employees of their roles and responsibilities regarding the protection and confidentiality of user data.
Employee information—such as references, diplomas, and other personal details—may be verified.
Incident Response
While we do not anticipate any breach of our systems, we recognize that no information system is perfectly secure.
In the event of an incident affecting Fundky’s information systems, a detailed incident-response plan is in place.
Fundky continuously monitors its security and alerting systems.
Contact
If you have questions regarding our security, please write to: securite@fundky.com.
© 2035 by Name of Site. Created on Wix Studio.
Fundky.com Terms of Use
Last modified: September 29, 2025
1. Introduction
1.1. Our purpose
Fundky provides tools that let organizations and users create an online presence, collect donations, issue official donation receipts, and manage fundraising campaigns and events. Sites and spaces created with our Services are called User Platforms.
1.2. Legal agreement
These Terms of Use (the “Terms”) are a binding agreement between Les Solutions Fundky inc. (“Fundky,” “we,” “us”) and you (“User,” “you”) governing your use of Fundky.com, our apps, and related services (collectively, the “Services”).
By visiting the site or using the Services, you agree to these Terms and acknowledge that you have read our Privacy Policy (Québec’s Law 25 compliant).
1.3. User Account
Certain features require a User Account. You are responsible for keeping your credentials confidential and for all activity under your account. In ownership disputes, Fundky may determine account ownership at its sole discretion based on available evidence (email of record, billing info, connected domain, etc.).
2. Your obligations
2.1. Representations and warranties
You confirm you are at least 18 (or the age of majority in your jurisdiction), legally capable of contracting, and not subject to applicable Canadian sanctions. You hold the necessary rights to the User Content you upload/publish and you comply with applicable laws (copyright, image, privacy).
2.2. Proper use
You comply with applicable laws (Québec/Canada), are responsible for your Platforms, back up your content, and agree to receive service/operational messages. If we send promotional messages, they are subject to Canada’s CASL and include an unsubscribe mechanism.
2.3. Prohibited actions
You may not: infringe IP rights, reverse-engineer, hack, inject malware, spam/phish, harvest data unlawfully, impersonate others, harm Fundky’s reputation, or use the Services outside the authorized scope. Breaches may lead to suspension/termination.
3. Content and ownership
3.1. Your IP
You retain all rights to your User Content. To operate the Services (hosting, CDN, backups, display), you grant Fundky a limited, technical, revocable, non-exclusive license.
3.2. Fundky IP
The Services, technology, marks, and licensed content remain the property of Fundky or its licensors. We grant you a limited license to use them subject to these Terms and payment of applicable fees.
3.3. Feedback
Any feedback/suggestions you provide may be used by Fundky to improve the Services.
4. Privacy (Law 25) — No sale of data
-
Clear policy: Fundky does not sell personal information and does not allow its use for advertising or marketing profiles.
-
Limited purposes: data about you and donors/participants is used only to provide the Services (e.g., donation processing, official receipt issuance, event and participation management), for security, legal compliance, and service improvement.
-
Roles & ownership: for transaction and participation data, the Organization (Foundation) is the owner/controller; Fundky acts as a service provider/processor following the Organization’s instructions.
-
Data location: Fundky does not disclose personal information outside Québec and stores/processes data in Québec.
-
Transparency & rights: for collection and consent, non-essential cookies, automated decision-making, privacy incident handling (notice to CAI and affected individuals), and rights (access, correction, deletion, de-indexation/cessation of dissemination), see our Privacy Policy and our Privacy Officer (RPRP): Benoit L’Archevêque — info@fundky.com.
5. Service fees
5.1. Paid Services
Some Services carry fees (the “Fees”). Prices are disclosed before purchase. Unless stated otherwise, prices are exclusive of taxes; applicable taxes are your responsibility.
5.2. Invoices
Electronic invoices are provided in your account and/or by email.
5.3. Auto-renewal
To prevent interruptions, some subscriptions auto-renew unless you disable renewal (you can cancel in your account).
5.4. Money-back
A refund window may apply to first-time purchases of certain Services (see the product flow). Third-party services (e.g., domains, pro apps) may be non-refundable.
5.5. Chargebacks
A chargeback may result in suspension or termination. Please contact Fundky Support first to resolve payment disputes.
6. Cancellation
6.1. By User
You may cancel your account/Services from your dashboard. Prepaid subscriptions remain active until the current term ends.
6.2. By Fundky
We may suspend/terminate access for breach of the Terms or non-payment.
6.3. Loss of capacity
Cancellation can cause loss of content/data/features. You are responsible for backups.
7. E-commerce
You are solely responsible for products/content/services you sell via your Platform (taxes, delivery, warranties, compliance). Payments are handled by your third-party payment providers under their terms.
8. Video services
Some uses may require licenses (e.g., MPEG-LA). You are responsible for obtaining any required license.
9. Third-party services
You may connect third-party services (domains, apps, payment gateways, etc.). Fundky acts as an intermediary platform and is not a party to your agreements with those providers.
10. Conduct and copyright
-
Abuse: report abuse to abus@fundky.com.
-
Copyright: if you believe content infringes your rights, contact copyright@fundky.com with the required details. Fundky may remove disputed content and/or suspend a Platform.
11. Disclaimer of warranties
The Services are provided “as is” and “as available.” Fundky disclaims warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted/error-free operation.
12. Limitation of liability
Subject to applicable law, Fundky will not be liable for indirect, special, punitive, or consequential damages arising from use or inability to use the Services.
13. Indemnification
You indemnify Fundky from claims arising out of your use of the Services, your content, or your breach of these Terms.
14. General
14.1. Changes
We may modify the Services or these Terms. Material changes will be notified.
14.2. Governing law & venue
These Terms are governed by Québec law; disputes are subject to the courts of Québec (Canada).
14.3. Notices
We may notify you via the Services, by email, or via the contact details you provided.
14.4. Relationship
These Terms do not create a partnership, agency, employment, or franchise.
14.5. Entire agreement
These Terms (and documents incorporated by reference) are the entire agreement between you and Fundky.
14.6. Assignment
Fundky may assign its rights/obligations. You may not assign yours without Fundky’s written consent.
14.7. Severability — Waiver
If any provision is invalid, the remainder stays in effect. Failure to enforce a provision is not a waiver.
14.8. Language
These Terms are available in multiple languages. The French version prevails in Québec.
14.9. Support
Help Center: support.fundky.com — Email: support@fundky.com / faq@fundky.com
Fundky.com Privacy Policy
Last updated: September 29, 2025
1. Introduction to the Fundky.com Privacy Policy
Fundky.com (a product of Les Solutions Fundky inc.) cares about the privacy of its visitors and users. We are committed to protecting personal information and using it properly in accordance with applicable privacy laws. This policy explains how we collect and use personal information and the rights and choices available to our visitors and users.
We strongly suggest you read this policy carefully and make sure you fully understand it before accessing or using any of our services. Terms capitalized but not defined here have the meanings assigned in our Terms of Use.
This Privacy Policy describes how Les Solutions Fundky inc. (“Fundky”, “we”, “us”) collects and uses information about each of our unregistered visitors and registered users, including premium users (each, respectively, a “Visitor” or “User”, or “you”), in connection with their access to and use of Fundky’s websites (including subdomains, the “Website”), web applications (“Fundky Apps”), mobile applications (“Mobile Apps”), and related services (collectively, the “Services”).
This Privacy Policy does not override the terms of any contract you have with us, nor any rights you may have under applicable privacy laws. If you disagree with our practices, please discontinue use of our Services. Questions? confidentialite@fundky.com.
1.1. Governing law and venue (Quebec)
Fundky operates from Quebec, Canada. Applicable law is Quebec civil law, and any dispute is subject to competent courts in Quebec, Canada.
1.2. Privacy Officer (Quebec – Law 25)
In accordance with Quebec Law 25, Fundky designates the following person in charge of the protection of personal information (Privacy Officer). Contact for any privacy request or complaint:
Name: Benoit L’Archevêque • Email: info@fundky.com • Mail: 653 Charles-de-Couagne, Terrebonne, Quebec, Canada, J6V 1L6.
The Privacy Officer may delegate duties in writing.
2. What information do we collect?
2.1. Information about Visitors and Users
We collect:
-
Non-personal Information (technical/usage data that does not identify an individual), such as device, browser, language, session statistics, clickstream, timestamps, etc.
-
Personal Information (information that identifies or could reasonably identify an individual), such as contact details (email/phone), billing details (name, billing address, payment method, transaction metadata), session data (IP address, geolocation, device ID), linked-account identifiers (e.g., Google/Facebook), scanned IDs provided to us, correspondence, and any other information you provide. Non-personal data linked to Personal Information is treated as Personal Information for as long as the link exists.
We collect such information from Visitors/Users, Users’ end-users, job applicants, and other sources you or they authorize.
2.2. Information about Users’ Users
We may collect information about visitors and users of our Users’ websites or services (“Users-of-Users”) only on behalf of our Users (see Section 6).
2.3. Information about job applicants at Fundky
We collect information submitted by candidates who apply for roles at Fundky (see Section 7).
3. How do we collect this information?
-
Through your use of the Services (automatic collection via our Services and approved third parties—cookies and similar technologies, see Section 9).
-
Directly from you (when you register, connect via a third-party account, make purchases, submit forms, contact us, etc.).
-
From authorized third-party sources (as permitted by law and Section 8).
4. Why do we collect this information?
We collect Personal and Non-personal Information to:
-
provide and operate the Services; 2) develop, customize, and improve the Services; 3) provide support; 4) send service notices and lawful promotional messages; 5) facilitate promotions/events; 6) produce aggregated statistics; 7) enhance security/fraud prevention; 8) process job applications; and 9) comply with laws.
We use Personal Information where necessary to perform a contract with you, comply with legal obligations, or pursue legitimate interests in a proportionate manner that respects your rights.
Children. Our Services are not intended for children under 18; we do not knowingly collect personal information from them. Parents/guardians must supervise minors’ activities.
5. Where do we store your information?
Data residency (Quebec commitment). Personal Information processed by Fundky is stored and processed in Quebec. We do not communicate personal information outside Quebec.
If this policy were to change, we would first conduct a privacy impact assessment, implement appropriate safeguards (contractual and technical), and update this Privacy Policy before any cross-border communication occurs.
Access to Personal Information is limited to personnel and service providers located in Quebec with a need-to-know and subject to confidentiality and security obligations.
For unresolved privacy concerns, contact info@fundky.com or confidentialite@fundky.com.
6. Information about Users-of-Users (roles, ownership & responsibility)
When an organization (e.g., a Foundation) uses Fundky, that organization is the controller of the personal information collected through its fundraising pages, events, transactions, and participations.
-
Ownership. Transaction data and participation data belong to the organization (Foundation).
-
Responsibility. The organization is responsible for its legal obligations as controller (e.g., transparency, lawful basis/consent, notices, individual rights, retention).
-
Fundky’s role. Fundky acts as a service provider/processor, processing such data only on documented instructions from the organization, with appropriate security and confidentiality.
Users-of-Users seeking to exercise privacy rights should contact the organization directly. Upon the organization’s instruction, we assist with access, correction, deletion, or other lawful requests within applicable timelines.
7. Applying for jobs at Fundky
Applicants may submit their details and CV for open roles. We use Applicant Information solely for recruitment, may retain it for up to two (2) years to consider future opportunities, and handle requests at jobs@fundky.com.
8. Sharing Personal Information with third parties
We may share Personal Information with:
-
Quebec-based service providers who support our Services (e.g., hosting, security, analytics, email delivery) under confidentiality and security obligations.
-
Authorities where required by law or court order.
-
Corporate events (e.g., merger/acquisition), with prior notice if materially affecting your information.
We do not sell personal information. We do not communicate personal information outside Quebec (see Section 5).
9. Use of cookies and other tracking technologies
We use cookies, pixels, tags, and similar technologies to operate, secure, and improve the Services.
Consent for non-essential cookies (Quebec). Non-essential cookies (e.g., advertising/profiling) are used with your consent where required by law. You can manage preferences in your browser and, where available, in our cookie settings.
We do not change our practices in response to “Do Not Track” signals at this time.
10. Communications from Fundky
Promotional messages. We may send lawful promotional content. You can opt out at any time (e.g., unsubscribe links or contacting us).
Service and billing messages. We send essential notices about the Services (e.g., maintenance, support replies, billing). These cannot be opted out of while you use the Services.
11. Your rights regarding your Personal Information
Subject to law, you have rights to access, rectification, erasure, and to request limits on processing.
Quebec (Law 25) additions. You may:
-
Withdraw consent at any time (without affecting prior processing).
-
Request cessation of dissemination, de-indexing or re-indexing of Personal Information where legal conditions are met.
-
Where automated decision-making that produces legal or similarly significant effects is used, be informed, obtain information about the factors and main parameters of the decision, submit observations, and, where provided by law, request a review by a person able to reconsider the decision.
Requests: droitaloubli@fundky.com or confidentialite@fundky.com. We may verify identity and respond within legal timeframes.
12. Data retention
We retain Personal Information for as long as necessary to fulfill the purposes described or as required by law. When purposes are achieved and any legal retention periods expire, Personal Information is destroyed or irreversibly anonymized according to our retention schedule. Deleting your Fundky account permanently removes your data from our active systems and cannot be reversed.
13. Security
We implement physical, technical, and organizational measures to protect Personal Information (e.g., HTTPS/TLS, hardened infrastructure, access controls, monitoring). While we strive for strong security, no method is perfect; use strong passwords and avoid sharing highly sensitive information through insecure channels.
Privacy incidents (Quebec). If a confidentiality incident presents a risk of serious injury, we will promptly notify Quebec’s Commission d’accès à l’information (CAI) and affected individuals and maintain a register of such incidents, in accordance with law.
14. Public forums and User Content
Information posted in public areas (blogs, communities, forums) may be read and used by others. Avoid posting information you do not wish to make public. Removal may require contacting the relevant third-party platform when used.
15. Updates and interpretation
We may update this Policy to reflect legal or operational changes. Material changes will be notified before taking effect. The most current version applies. Non-English translations are for convenience; in case of conflict, the English version prevails.
16. Contact us
Questions or requests about this Policy: confidentialite@fundky.com
Privacy Officer (Law 25): Benoit L’Archevêque — info@fundky.com
Mail: 653 Charles-de-Couagne, Terrebonne, Quebec, Canada, J6V 1L6



