Privacy Policy

Last updated 27 August 2026

This policy explains how Fundlevel Digital Limited, a company registered in Ontario, Canada with its registered office at 86 Ringwood Drive, Unit 212, Whitchurch-Stouffville, Ontario, Canada, L4A 1C3, handles personal information in Scheduler Zero. We are the organisation accountable for that information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

You can reach our privacy contact at legal@fundlevel.co for any question, access request, or complaint about this policy.

1. We handle data in two different roles

This distinction decides who you should contact about a given piece of information, so it comes first.

  • For our own customers and site visitors, we decide why and how information is used. That covers your account, your billing details, and how you use the product.
  • For the data our customers put into the product, such as their lead lists, the mail synced from their mailboxes, and their call recordings, we act on that customer's instructions. They decide who is contacted and why. If you received an email or a call from a business using Scheduler Zero and you want it to stop, the fastest route is to reply to that business or use the unsubscribe link in the message. You can also write to us at legal@fundlevel.co and we will pass your request to them.

2. What we collect

Account and workspace information

Your name, email address, profile picture, and workspace details. If you sign in with Google, we receive your basic profile from Google rather than a password.

Billing information

Your plan, subscription status, invoices, and usage counts. Card details are entered directly with Stripe and we never see or store the full card number.

Connected mailboxes

When you connect a mailbox we store the access tokens or the IMAP and SMTP credentials needed to send and read on your behalf. These are encrypted at rest. We sync message content, headers, threads, and folder labels so the unified inbox, reply detection, and bounce handling work.

Google API data

Scheduler Zero's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google mailbox data and the mailbox address only to provide the mailbox features you enable. We do not sell it, use it for advertising, or use it to train generalised AI models.

Contact and lead data you upload

Names, email addresses, phone numbers, employers, job titles, and any custom fields you choose to add. This is information about other people, and you are the one responsible for having the right to provide it.

Sending and engagement data

Which messages were sent from which inbox and when, plus opens recorded through a tracking pixel, clicks recorded through rewritten links, replies, bounces, and unsubscribes. Open and click tracking is a feature you control per campaign.

Dialer data

Phone numbers dialled and received, call times and outcomes, and, where you switch it on, call recordings and their transcripts.

Product and site analytics

Pages viewed, features used, approximate location derived from IP address, browser and device type, and log data. On the marketing site we use cookies and similar technologies as described below.

How we identify website visitors

When you allow advertising tracking on this site, we use a tracking script, cookies and similar technologies to collect information about your visit, including your IP address, the pages you view, the site you arrived from, and your approximate location. We pass that information to our visitor-identification provider, which compares it against its own database of business contact records.

Where it finds a match we receive personal information about you that you did not give us directly: usually your name, work email address, employer, job title and professional profile links. We use it to contact you about our products and services, and we store it in our sales and marketing systems.

Under some privacy laws this counts as a "sale" or "sharing" of your personal information, or as targeted advertising. You can stop it at any time:

3. How we use it and why we may

PIPEDA is built on consent. We rely on your express consent where you give it, such as connecting a mailbox or enabling call recording, and on implied consent for the ordinary operation of a service you have signed up for. We use personal information to:

  • provide and operate the features you have switched on;
  • protect deliverability and the platform, which includes monitoring bounce rates, spam complaints, and abuse signals;
  • bill you and keep the financial records the law requires;
  • provide support and respond to what you ask us;
  • improve the product, using aggregated or de-identified information wherever that is enough;
  • send you service messages, and marketing messages where CASL permits it, which you can stop at any time;
  • meet legal obligations and enforce our terms.

We do not sell personal information, and we do not use the content of your mailboxes for advertising.

4. AI processing

When you use an AI powered feature, the relevant content is sent to our model providers to generate a result. We do not train our own models on your content, and our providers are engaged under terms that prohibit training on content submitted through their APIs.

5. Who else processes it

We share personal information with the service providers below, only as far as they need it to do their job for us, and under contracts that require them to protect it. This list is current at the date at the top of this page and we update it as our providers change.

ProviderWhat it is used forWhere it processes
Google LLCSign in, Gmail and Google Workspace mailbox sync, marketing analytics, and advertising measurementUnited States
Meta Platforms, Inc.Advertising measurement and campaign optimisationUnited States
Cheap InboxesProvisioning and maintaining purchased Google Workspace mailboxesUnited States
Microsoft CorporationMicrosoft 365 and Outlook mailbox sync through Microsoft GraphUnited States
Stripe, Inc.Subscription billing and payment processingUnited States
Dub Technologies, Inc.Affiliate referral analytics, partner administration, identity verification, commission, and payoutsUnited States
PlanetScale, Inc.Managed database hosting for the application databaseUnited States
Vercel, Inc.Hosting for the web application and this marketing siteUnited States
Fly.io, Inc.Hosting for the application programming interfaceUnited States
Cloudflare, Inc.Domain name service, edge network, and the integrations endpointGlobal edge network
Tigris Data, Inc.Object storage for call recordings and uploaded assetsUnited States
Trigger.dev LtdBackground job processing for sending, syncing, and warmupUnited States and European Union
Amazon Web Services, Inc.AI model inference for enabled AI powered featuresUnited States
PostHog, Inc.Product analytics and feature flagsUnited States
GetLeadsWebsite visitor identification and business contact enrichmentUnited States
Attio LtdOur own customer relationship recordsEuropean Union and United Kingdom
Cal.com, Inc.Scheduling demo and onboarding callsUnited States
Email verification providersChecking whether an address is deliverable, only when you enable a providerUnited States and European Union

We may also disclose information where the law requires it, to establish or defend a legal claim, or as part of a merger or sale of our business, in which case we will tell you before your information becomes subject to a different policy.

6. Storage outside Canada

Our infrastructure and most of our providers operate in the United States and other countries, so your information is stored and processed outside Canada. We are required to tell you what that means: while information is in another country it is subject to that country's laws, and the courts, law enforcement agencies, and national security authorities of that country may be able to obtain access to it. We use contractual protections with our providers, but they cannot override those laws. If you would like more detail about our practices for handling information across borders, write to legal@fundlevel.co.

7. How long we keep it

We keep information for as long as your workspace is active. After you close a workspace we keep the data for a short grace period so it can be restored or exported, then delete or anonymise it. Financial records are kept for the period Canadian tax and corporate law requires, which is generally six years. Call recordings and synced mail can be deleted earlier on request, and you can delete lead data yourself at any time.

We keep advertising click identifiers, encrypted advertising match data, and detailed video viewing records for no more than 90 days. After that period the identifiers and match data are deleted or irreversibly removed from the conversion record. We retain non-identifying conversion totals and consent records for audit, security, and reporting purposes.

8. Security

We protect information with encryption in transit and at rest, separately encrypted mailbox credentials, role based access controls within a workspace, tenant isolation on every query, audited access to production systems, and least privilege for our own staff. No system is perfectly secure, so we do not promise absolute security.

If a breach creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify the people affected as soon as feasible, and we keep records of security breaches as PIPEDA requires. You can report a suspected vulnerability to legal@fundlevel.co.

9. Your rights

Under PIPEDA you may:

  • ask what personal information we hold about you and how it has been used and disclosed;
  • ask us to correct information that is wrong or incomplete;
  • withdraw your consent, subject to legal and contractual limits, understanding that this may mean we can no longer provide the service;
  • ask us to delete information we no longer need;
  • complain about how we have handled your information.

Write to legal@fundlevel.co and we will respond within thirty days, which is the period PIPEDA sets. We may need to verify your identity first. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

If you are in the European Economic Area or the United Kingdom, you also have the rights given by the General Data Protection Regulation, including access, rectification, erasure, restriction, portability, and objection. The same address reaches us.

10. Cookies and tracking

The application uses cookies that are strictly necessary to keep you signed in. The marketing site additionally uses analytics cookies and server side tagging to understand which content brings people to us. We do not put email addresses or other directly identifying information into analytics URLs. When you save a tracking preference, we keep a pseudonymous server side record of the choice, the version of this notice, and when it was made. You can block cookies in your browser, though the application will not work properly without the sign in cookie.

When you allow advertising tracking, we use the Meta Pixel and Meta Conversions API to measure page visits and conversions. Meta may receive browser identifiers, IP address, browser information, and hashed contact identifiers for matching and attribution. Browser and server copies of the same conversion use an event identifier so Meta can deduplicate them.

Separately, emails sent through the platform by our customers may contain an open tracking pixel and rewritten links, which is a feature those customers control.

When an affiliate link is used, Dub and Scheduler Zero record link and referral identifiers to measure the visit and prevent fraud. Referral context may remain in the browser for 90 days, but is eligible for commission attribution only for 30 days. An explicit analytics opt-out prevents new affiliate analytics capture.

11. Children

The service is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact legal@fundlevel.co and we will delete it.

12. Changes to this policy

We may update this policy. If a change is significant we will tell you by email or in the product before it takes effect. The date at the top of this page shows when it was last changed.

13. Contact us

Fundlevel Digital Limited
86 Ringwood Drive, Unit 212, Whitchurch-Stouffville, Ontario, Canada, L4A 1C3
legal@fundlevel.co