Privacy Policy
We collect only what we need to process your pledge, refund you if a project fails, issue your tax receipt, and prevent abuse.
Last updated: 2026-09-04 · Version 2026-09-04
1. Data controller
Meridian Technologies LLC, Ulaanbaatar, Mongolia. Contact: privacy@fundly.mn
2. What we collect
Account data: email address, password (stored only as a hash), display name, language preference.
Pledge data: which project you backed, at which level, for how much, your payment method, the payment rail’s transaction reference, and your eBarimt receipt number.
Refund bank details: bank, account number, account name — asked for only when a refund is actually owed to you.
Creator data: ДАН verification result, company registration number, bank account details, and document images where manual review is needed.
Technical data: IP address, browser type, session records — to protect against abuse and fraud.
We never store card numbers. Card details go directly to the bank’s hosted payment page.
3. Why we process it
To process your pledge, collect payment, and refund you if the project fails — to perform our contract with you.
To issue eBarimt tax receipts and keep accounting records — a legal obligation.
To prevent money laundering, fake pledges and abuse — a legal obligation and our legitimate interest.
To send project updates, pledge confirmations and refund notices — part of our contract with you.
4. Who we share it with
Payment rails: QPay and Golomt Bank, to take and return payments.
Tax authority: the General Department of Taxation, through the eBarimt system, as required by law.
Verification: the ДАН/ХУР systems, for creator identity verification.
Infrastructure: DigitalOcean (Singapore) for hosting; Resend for sending email.
Creators: after a project funds, the creator receives backers’ names, email addresses and reward levels so they can deliver rewards. We never pass your payment details to a creator.
Regulators: the Bank of Mongolia, the Financial Regulatory Commission, and the Financial Information Unit receive reports required by law, including transactions of ₮20 million or more.
We do not sell your data, and we do not share it with third parties for advertising.
5. Where your data is held
Our servers are in Singapore (DigitalOcean SGP1). Your data is therefore stored and processed outside Mongolia.
That processing is covered by contract and limited to the purposes described in this policy.
6. How long we keep it
Financial records (pledges, payments, refunds, eBarimt): for the period required by Mongolian accounting and tax law.
Refund bank details: deleted once the refund is complete and they are no longer needed.
Account data: until you ask us to close your account, after which everything but the financial records is deleted.
Technical logs: up to 12 months.
7. Your rights
You can ask to see, correct or delete your data, or to restrict how we process it.
You can edit your core account data yourself on the Settings page.
For anything else, write to privacy@fundly.mn. We respond within 30 business days.
Financial records we are legally required to keep cannot be deleted — we will tell you clearly when that applies.
8. Cookies and sessions
We use only cookies the platform needs to work: your login session, your language preference, and the referral code from a shared link.
We use no third-party advertising or cross-site tracking cookies.
9. Security
Passwords are stored only as hashes, as are session and verification tokens.
All connections are encrypted over HTTPS. Every administrative action is recorded in an audit log.
If a data breach occurs, we will notify the relevant authority and the affected users.
10. Children
The platform is not intended for anyone under 18, and we do not knowingly collect children’s data.
11. Changes to this policy
If we update this policy we will change the date on this page and email you about significant changes.
12. Complaints
Privacy complaints can go to privacy@fundly.mn, or to Mongolia’s personal data protection supervisory authority.