Legal
Privacy Policy
Last updated: 14 May 2026
Data Protection Officer: dpo@synopp.io
1. Who we are
FindFund.eu is a product operated by Synopp, a company registered in France at 60 Rue François Ier, 75008 Paris. Synopp acts as the data controller for all personal data processed through FindFund.eu.
FindFund.eu is an AI-powered platform that matches companies to open EU funding calls. To deliver this service, we collect and process personal data as described in this policy.
FindFund.eu is intended for use by businesses and professionals only. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us at dpo@synopp.io and we will delete it promptly.
2. What data we collect
We collect the following categories of personal data depending on how you use the platform:
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, account ID | You (via registration) |
| Uploaded documents | Company PDF, pitch deck, dossier | You (direct upload) |
| Extracted company profile | Sectors, technologies, TRL, NACE codes, summary | AI processing of your document |
| Analysis results | Matched EU calls, compatibility scores, evidence items | Generated by the platform |
| Value Propositions | AI-generated documents for consortium applications | Generated by the platform |
| Payment data | Billing information, subscription status | Stripe (payment processor) |
| Usage data | Saved calls, notifications, in-app activity | Automatically collected |
| Technical data | IP address, browser type, operating system, timezone | Automatically collected |
Regarding uploaded documents: the content of PDFs and dossiers you upload is sent to our AI provider (Anthropic, Inc.) for extraction. The raw file is deleted from our storage immediately after processing. We do not retain the original document beyond extraction.
3. Legal basis for processing
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account | Contract (Art. 6.1.b) |
| Running AI analysis on your uploaded document | Contract (Art. 6.1.b) |
| Processing payment and managing your subscription | Contract (Art. 6.1.b) |
| Storing your analysis history and profiles | Contract (Art. 6.1.b) |
| Sending deadline and match notifications | Contract / Legitimate interest (Art. 6.1.f) |
| Security monitoring and fraud prevention | Legitimate interest (Art. 6.1.f) |
| Essential cookies (authentication session) | Legitimate interest (Art. 6.1.f) |
| Marketing communications (if opted in) | Consent (Art. 6.1.a) |
4. Third-party processors
We share data with the following processors who act on our behalf under Data Processing Agreements (DPAs):
| Processor | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Clerk, Inc. | User authentication, session management | USA | Standard Contractual Clauses (SCCs) |
| Stripe, Inc. | Payment processing, subscription billing | USA | Standard Contractual Clauses (SCCs) |
| Anthropic, PBC | AI extraction of uploaded documents and generation of analyses and Value Propositions | USA | Standard Contractual Clauses (SCCs) |
| Infrastructure provider | Cloud hosting and database storage | EU / USA | SCCs where applicable |
Important — AI processing: When you upload a company document, its content is transmitted to Anthropic, Inc. (USA) for AI analysis. By uploading a document, you acknowledge this transfer. Anthropic processes data under SCCs and does not use your data to train its models unless you separately opt in to their public programmes.
We do not sell your personal data to any third party.
5. Data retention
| Data type | Retention period |
|---|---|
| Uploaded PDF / document | Deleted immediately after AI extraction (typically under 5 minutes) |
| Extracted company profile | Deleted immediately upon account deletion |
| Analysis results and Value Propositions | Deleted immediately upon account deletion |
| Account data (name, email) | Deleted immediately upon account deletion |
| Payment records and invoices | 7 years (French fiscal obligation — Code général des impôts) |
| Security and access logs | 12 months |
6. Your rights
Under the GDPR, you have the following rights regarding your personal data. See our GDPR Rights page for full details on how to exercise them.
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision-making
- Right to withdraw consent
To exercise any right, contact our Data Protection Officer at dpo@synopp.io. We will respond within one month of receiving your request. In cases of complexity or high volume, this period may be extended by a further two months; you will be informed within the initial one-month period.
7. Cookies
We use essential cookies only (authentication session managed by Clerk). See our Cookie Policy for full details.
8. Automated decision-making
FindFund.eu uses AI to generate compatibility scores and match rankings. These outputs are informational tools only — they do not constitute automated decisions with legal effect. No individual user profile is subject to solely automated decision-making that significantly affects them under GDPR Article 22.
9. Personal data breach
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Synopp will notify the CNIL without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33.
Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, as required by GDPR Article 34. Such notification will describe the nature of the breach, its likely consequences, and the measures taken or proposed to address it.
10. Supervisory authority
If you believe your data rights have been violated, you have the right to lodge a complaint with the French data protection authority:
CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy — TSA 80715 — 75334 Paris CEDEX 07
www.cnil.fr
11. Contact
For any privacy-related question or request:
Data Protection Officer
Synopp · 60 Rue François Ier, 75008 Paris, France
dpo@synopp.io