Privacy Policy

What Funnel Draw collects, why, where it goes, how long we keep it and the choices you have.

Last updated October 22, 2026

This policy explains what Funnel Draw collects, why, where it goes, how long we keep it and the choices you have. It covers app.funneldraw.com, funneldraw.com, our API, and the Funnel Draw connector for AI assistants (MCP).

Who we are

Funnel Draw is a product of Still Matter AI Developing Services, a sole establishment licensed in Dubai, United Arab Emirates, by the Department of Economy and Tourism (license no. 1662283). For the information in your account, Still Matter AI Developing Services is the controller. For information your business sends into Funnel Draw about its own customers (for example through the incoming webhook), we act as your processor.

Still Matter LLC, a Wyoming (United States) company under the same ownership, holds Funnel Draw's apps in the Claude and ChatGPT directories and its developer accounts with the ad platforms. Those apps connect to our service: your information is handled by us as this policy describes, and Still Matter LLC doesn't keep it.

Questions about your information: [email protected].

At a glance

• We don't sell your information, and we don't use it for advertising.
• In the EU, the UK, Switzerland, Canada and Brazil, analytics, session recordings and advertising tags run only after you say yes in the cookie banner. Elsewhere they run until you turn them off from "Your privacy choices" at the foot of our pages, and we treat a Global Privacy Control signal as a no to advertising and recordings. Inside your workspaces only product analytics can run, and it never sees what you write.
• Card details go straight to Stripe; we never see or store them.
• Passwords are stored only as secure hashes; links, keys and tokens we issue are stored as hashes; the access you give us to Google Ads is stored encrypted.
• Data from Google APIs is used only to show you your own numbers in Funnel Draw. It is never sold, never used for advertising and never used to train AI models.
• You can export your funnels, delete a workspace, and delete your account from your profile.

What we collect

Your account

• Name, email address, and optionally a phone number, a profile picture you upload or an avatar you choose, your language and your time zone (from your browser).
• Your password, stored only as a bcrypt hash. If you sign in with Google, we receive your Google account ID, your email address, whether Google verified it, and your name (scopes: openid email profile); we don't receive your Google password or your profile photo.
• If you add a passkey: its public key and technical details, a device name (for example "Safari on iPhone"), the IP address and browser it was added from, and when it was last used.
• When you signed up, last signed in and were last active.

Sessions and security

• For each signed-in session: the IP address and the browser's user agent, so you and we can recognise sessions and stop abuse. A session ends 30 days after you last used it, when you sign out, or when your password changes.
• Records of security-sensitive actions, with who did them, when, and the IP address they came from: in your workspace (creating or revoking API keys, disconnecting AI apps), and by our team on your account (for example blocking access or sending a password link).

Your workspaces and your work

• Workspace names, members and their roles, and invitations (the invited email address).
• Everything you put in your funnels: steps, numbers, notes, checklists, briefs about your business, links, and images you upload (screenshots, ad creatives).
• Share links you create (view-only; turning sharing off ends the link for good).

Billing

• Your plan, subscription status and billing period, which Stripe tells us, and a history of changes to your subscription (subscribed, changed plan, payment failed, canceled).
• To create your Stripe customer we send Stripe the owner's email address and the workspace name. Payment details are entered on Stripe's pages and stay with Stripe.

Integrations you turn on

• AI assistants (MCP): when you connect Claude, ChatGPT or another assistant, we record which app you connected, to which workspace, with what permissions, and when it was last used. The assistant can read and, if you allowed it, change the funnels of that workspace on your behalf. What you say to the assistant is handled by its provider under their privacy policy; we only receive the requests it makes to Funnel Draw.
• API keys: the key's name, its permissions and when it was last used. We store a hash of the key, not the key.
• Webhooks: the address you choose and an encrypted signing secret. Each delivery (the event, the funnel's id, name and link, and for task.completed the task) is kept for 30 days.
• Incoming webhook: the events your systems send us (for example a sale, a lead or a visit count, with any extra data you include). We keep them for 90 days. If those events contain information about your customers, you are responsible for having the right to send it, and we process it only to show it to you.
• The Funnel Draw pixel: when you put our line of code on your own pages, it sends us, for each visit, form sent or event your site names: your pixel's id, the page's address (we keep only its site and path), where the visitor came from (the link's UTM tags, the platform of an ad click id, or the site that sent them; never the click id itself or the full address), and for an event its name and amount. To credit a later sign-up or purchase to that source, the code keeps one cookie on your own site (_fd_src, 90 days) holding only those source words; it skips the cookie when your site's consent tool says no to analytics or the browser sends Global Privacy Control. To count a visitor once a day, we make a code from their browser's details and IP address with a key that changes every day; we keep that code until the next day and never store the IP address itself. We keep the counts (visits per page, forms, events, by source) for 90 days and show them only to your workspace. For your visitors, you decide to use the pixel and we process its data on your behalf: your own privacy policy, and your cookie banner where the law asks for one, should cover it (the pixel's panel offers words you can use).
• Google Ads: see "Google Ads" below.
• Link previews: when you paste a link into a funnel, our server fetches that page's title, description and image to show a preview. The preview image and video embeds (YouTube in privacy-enhanced mode, Vimeo, Loom) load from those sites in your browser, so those sites see your IP address.

Emails we send

Only service emails: confirming your email address, setting or resetting your password, and workspace invitations. Payment receipts and invoices come from Stripe. We don't send marketing emails without your consent.

Google Ads

A workspace owner or admin can connect Google Ads accounts to bring their real numbers onto the canvas. When you do:

• What we receive: your Google account ID and email address (to tell connections apart), and for the ad accounts you can reach: their names, IDs, currency and time zone, whether each is a manager account; their campaigns' names, status and type; and daily metrics per campaign (impressions, clicks, cost, conversions and conversion value).
• Access we ask for: the https://www.googleapis.com/auth/adwords scope, which we use read-only: Funnel Draw never creates, changes or deletes anything in your Google Ads accounts.
• How we keep it: the refresh token Google gives us is encrypted (AES-256-GCM) and never leaves our server; short-lived access tokens are kept in memory only. Daily metrics are kept for 13 months, then deleted.
• Who sees it: the members of that workspace, and the AI assistants or API keys the workspace has connected, acting on its behalf.
• Ending it: disconnecting from the Integrations page deletes the connection, its accounts, campaigns and metrics, and revokes our access at Google. Deleting the workspace or your account does the same. You can also remove Funnel Draw's access at any time from your Google Account's permissions page (myaccount.google.com/permissions).

Google Analytics

A workspace owner or admin can connect a Google Analytics property to show its numbers on the funnel's steps. When you do:

• What we receive: your Google account ID and email address (to tell connections apart), the names and IDs of the Google Analytics accounts and properties you can see, the chosen property's currency and time zone, and for that property, per day: the number of users who viewed each page, forms sent on each page and your key events (with their value), each by its session source, medium, campaign and ad content. Nothing about individual visitors.
• Access we ask for: the https://www.googleapis.com/auth/analytics.readonly scope, read only: Funnel Draw never creates, changes or deletes anything in your Google Analytics.
• How we keep it: the refresh token is encrypted (AES-256-GCM) and never leaves our server; access tokens are kept in memory only. The numbers are kept for 90 days, like every app's events, and recent days are read again every 6 hours.
• Who sees it: the members of that workspace, and the AI assistants or API keys the workspace has connected, acting on its behalf.
• Ending it: disconnecting from the Integrations page deletes the connection and every number read from it, and revokes our access at Google (unless the same Google account still connects Google Ads in Funnel Draw). Deleting the workspace or your account does the same. You can also remove Funnel Draw's access any time from myaccount.google.com/permissions.

Google user data

Funnel Draw's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

In plain words, information we receive from Google (your Google sign-in, your Google Ads data and your Google Analytics data):

• is used only to sign you in and to show you your own numbers and analysis in Funnel Draw;
• is never sold, and never used for advertising, retargeting or to build profiles;
• is never used to train AI models, ours or anyone else's;
• is never transferred to anyone else, except to the AI assistants or API keys you connect to your workspace (on your instructions), our subprocessors to run the service, or as the law requires;
• is not read by people, except with your consent, when needed for security (for example investigating abuse), or when the law requires it.

Meta, TikTok and Snapchat ads

A workspace owner or admin can connect ad accounts from Meta (Facebook and Instagram ads), TikTok and Snapchat to bring their real numbers onto the funnel's steps.

• What we receive: the ad accounts you choose, their campaigns' names, status and budget, and daily totals (spend, impressions, reach, clicks and results). We ask each platform only for read access (on Meta, the ads_read permission), and Funnel Draw never creates, changes or deletes anything in your ad accounts.
• How we use it: only to show you your own numbers on your funnels, beside your plan. It is never sold, never used for advertising or to build profiles, and never used to train AI models.
• How we keep it: the access tokens each platform gives us are encrypted (AES-256-GCM) and never shown to anyone. Metrics are kept for 13 months, then deleted.
• Ending it: disconnecting an account from the Integrations page deletes the connection, its accounts, campaigns and metrics, and revokes our access where the platform allows it. You can also remove Funnel Draw in each platform's settings (on Facebook: Settings & privacy → Business integrations).

Deleting your data

You can delete your data at any time, without asking us:

1. Sign in at app.funneldraw.com and open your profile. 2. Choose "Delete account" and confirm with your password. This deletes your account, the workspaces you own with their funnels, images and connected ad-account data, cancels the subscriptions you pay for, and revokes the Google, Meta, TikTok and Snapchat access you gave. 3. To delete one connection only, disconnect it from the workspace's Integrations page.

You can also write to [email protected] from the email on your account and we'll delete it within 30 days. Backups that still hold it are overwritten within 8 weeks.

Why we use it

The legal bases below apply to people in the EU, the UK and places with similar laws.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

Who we share it with

Our subprocessors:

When you connect an AI assistant or turn on a webhook, the information goes to the app or address you chose. We share information when the law requires it, to protect rights and safety, or as part of a merger or acquisition (with notice to you).

International transfers

Our main servers are in the European Union, and we operate from the United Arab Emirates. Some providers process information in other countries, including the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

• Your account and workspaces: until you delete them.
• Sessions: until they end (30 days after last use at most). Expired sessions are deleted every night.
• One-time links (password, email confirmation, invitations): they expire within 1 hour to 7 days. Used and expired links are deleted every night.
• Webhook deliveries: 30 days. Incoming events and the pixel's counts: 90 days. The pixel's daily visitor codes: until the next day.
• Pictures you remove from a funnel: deleted 7 days after they were uploaded.
• How you use the product (the AI tools your apps call, prompts you copy, tools you open from a step, what you connect): 180 days. We use it to improve the product and to help you, never for ads, and never sell it.
• Whether an email or Google sign-in has had a free trial: kept after the account is deleted, so a trial can't be started again. We keep only a one-way fingerprint (a hash), never the address.
• Google Ads daily metrics: 13 months, or until you disconnect.
• Records of security-sensitive actions: 12 months.
• Analytics and recordings (only if you said yes): as long as each tool keeps them, at most 14 months. Error reports: 90 days.
• Billing records: as long as tax law requires.
• Backups: encrypted backups are kept up to about 8 weeks, so deleted information can remain in them until they expire.

Your choices and rights

• Access and export: your funnels are yours. You can export them from the canvas, read them through the API, or ask us for a copy of your personal information.
• Correct: edit your profile at any time.
• Delete: a workspace owner can delete a workspace, with its funnels and images. You can delete your account from your profile: this deletes the workspaces you own (with their funnels, images and ad-account data), cancels the subscriptions you pay for, revokes the Google Ads access you gave, and removes you from the workspaces you joined. You can also ask us at the address above.
• Disconnect: revoke an AI app, an API key or a Google Ads connection from Integrations at any time; it stops at once.
• Depending on where you live (for example the EU, UK, the United Arab Emirates, California, Brazil or India), you may also have the right to object, to restrict processing, to data portability, and to complain to a data protection authority. Write to us and we'll answer within 30 days.

Cookies and storage

Needed to work (always on):

• __Host-fe_session: keeps you signed in (30 days, renewed while you use it).
• fe_google: a short-lived cookie (10 minutes) used only during "Continue with Google".
• fe_gads: a short-lived cookie (10 minutes) used only while you connect Google Ads.
• fd_consent: remembers your cookie choices for funneldraw.com and the app (12 months).
• fd_attr: where your first visit came from (a link or an ad's tags), read once when you sign up (60 days).
• Your browser's local storage keeps preferences on your device: theme, language, the last workspace you opened, and canvas layout choices.

Measuring: in the EU, the UK, Switzerland, Canada and Brazil, only after you say yes in the cookie banner; elsewhere on until you turn it off. Change any of them at any time from "Your privacy choices" at the foot of our pages; a Global Privacy Control signal turns off advertising and recordings:

• Analytics: Google Analytics (_ga, _ga_…, up to 2 years) on our site and public pages, and PostHog (ph_…, 1 year) on the site and in the app. Text you write and what you type are never sent.
• Session recordings: Microsoft Clarity (_clck 1 year, _clsk 1 day) on our site and public pages only, never inside a workspace, with what you type hidden.
• Advertising: the ad platforms' tags we run through Google Tag Manager on our site and public pages (for example Meta's _fbp and Google Ads' _gcl_au, 90 days; TikTok's _ttp, 13 months), to know which of our ads bring people. Each tag follows your choice. Under some US state laws this counts as "sharing" for advertising: "Your privacy choices" or Global Privacy Control opts you out. We never sell your information.

Error reports (Sentry) set no cookies and carry nothing about who you are. Embedded video players (YouTube, Vimeo, Loom) may set their own cookies when you play a video.

Security

Passwords are hashed with bcrypt; sessions, one-time links, invitations, API keys, OAuth codes and tokens are stored only as hashes; service secrets, webhook signing secrets and Google Ads tokens are encrypted (AES-256-GCM); connections use HTTPS; requests are protected against cross-site forgery and rate-limited; backups are encrypted with a key only our team holds. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Children

Funnel Draw is a tool for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children; if you think a child gave us information, tell us and we'll delete it.

Changes

We'll post changes here and update the date above. If a change matters, we'll tell you by email or in the app before it takes effect.

Contact

Still Matter AI Developing Services · Dubai, United Arab Emirates · DET license 1662283 · [email protected]