Privacy

Draft dated 23 October 2026. This describes how fundingdx.com works today.

Draft for legal review. This is a plain-English description, not a lawyer’s policy. Mash Bonigala needs to review it, correct anything that is wrong, and have counsel sign off before treating it as final.

Who runs this site

FundingDX is Mash Bonigala’s Series A fundability diagnostic. The site is fundingdx.com. This page covers that site, including the application forms, the journal, the indicative tool at /tools/diagnostic, and the separate Brand Friction Diagnostic form at /bfd.

What the diagnostic application collects

The forms on the homepage, on /book, and inside the indicative tool ask for:

If you submit from the indicative tool, the message also includes the score that tool produced and the weakest area it flagged.

I use this to decide whether a diagnostic is a fit, to reply, and to prepare if we go ahead. I read the applications myself.

The indicative tool

/tools/diagnostic saves your answers in this browser (local storage) so you can resume. Those answers stay on your device until you clear the site’s data or start over. They are sent to me only if you submit the application form.

The Brand Friction Diagnostic form

/bfd is a separate form. It asks for first and last name, work email, company name, website, role, revenue range, the brand challenge you describe, when you want to start, and how you heard about it.

How applications are delivered

Submitting a form sends the details by email through Resend, an email delivery service, to the address configured for this site. The message is sent from mash@fundingdx.com. That address is how the system sends mail. It is not published as a contact address on the contact page until Mash confirms it should be.

Google Analytics

The site uses Google Analytics 4, measurement ID G-VYCQF6YD1J, on the homepage, the Series A page, /bfd, and anywhere else that tag is installed. Google receives pages viewed, a rough location, device and browser information, and the site that referred you. Google may set cookies.

There is no consent banner on the site today. Whether to add one, especially for visitors in the EU or UK, is open. See the note at the bottom.

Hosting

The site is hosted on Vercel. Vercel may keep standard server logs, including IP address and the page requested, for its own operations.

Sharing

Application details and analytics data are not sold. A client’s materials, numbers, and report are not shared with investors or with other founders. Journal posts are written so that a reader cannot identify a specific client from them.

How long it is kept

I have not set a fixed deletion date. Applications are kept so I can review them and follow up. If you want yours deleted, ask and I will delete the application and the related email I still control. I can’t delete copies that are already in a third party’s backups.

Asking for a change or a copy

Use the contact page. A public email address is not listed there yet. Until it is, you can use the application form and say clearly that the message is a privacy request, not an application.

Children

This site is for founders. It is not meant for children, and I don’t knowingly collect information from them.

Open items for Mash and counsel
  • Confirm the legal name and address that should appear here.
  • Confirm whether mash@fundingdx.com is the address for privacy requests.
  • Decide whether Google Analytics should wait for consent, and in which countries.
  • Set a retention period if you want one.
  • Have a lawyer review this draft before it is treated as final.