Privacy Policy

Information you provide: your name, phone number, optional email address, optional billing address, donation note, fund selection, donation amount, payment type, and recurring or split-payment instructions.

Payment information: card or bank details are entered into secure Cardknox/Sola iFields and tokenized by the payment provider. Our form receives a payment token and limited payment metadata, such as card brand and last four digits. We do not intentionally store full card numbers, security codes, or full bank account numbers in our application database.

Transaction information: transaction references, schedule identifiers, payment status, timestamps, installment details, receipts, and information needed to prevent duplicate charges.

Technical information: IP address, browser and device information, referring pages, application logs, security events, and basic website analytics.

• Process one-time, recurring, split, card, and ACH donations.
• Create or match payment-customer records and payment methods.
• Send receipts and service communications.
• Apply a donation to the selected fund and communicate with authorized fund contacts.
• Prevent duplicate charges, fraud, abuse, and security incidents.
• Maintain accounting, tax, compliance, dispute, and audit records.
• Operate, troubleshoot, measure, and improve the website.
• Comply with law and enforce our Terms of Service.

We may disclose information to:

• Payment and banking providers, including Cardknox/Sola, to process payments, store payment methods, manage schedules, and send receipts.
• Hosting and data providers, including Vercel and Supabase, to host the application, maintain records, and provide security and operational services.
• Authorized fund contacts and charitable recipients, when needed to administer a donation, provide a receipt, maintain records, or address a donor request.
• Professional advisers and authorities, when reasonably necessary for legal, accounting, tax, fraud-prevention, security, or compliance purposes.
• A successor organization, if responsibility for the service or relevant charitable operations is reorganized or transferred, subject to applicable law.

We do not sell personal information or share it for cross-context behavioral advertising.

If you provide an email address, it may be used to send your receipt. An authorized email address associated with the selected fund may also receive transaction or receipt information for fund administration. Do not place sensitive personal information in the optional donation note.

We may use essential browser storage to remember interface preferences and maintain service functionality. Vercel Analytics and hosting logs may collect limited usage and device data to help us understand performance and reliability. We may add security tools that evaluate browser and network signals to distinguish legitimate donors from automated abuse.

We retain donation, receipt, accounting, and payment-schedule records for as long as reasonably needed for charitable administration, tax and accounting obligations, fraud prevention, disputes, and legal compliance. Security and application logs may be retained for shorter operational periods. Payment providers may retain information under their own legal obligations and policies.

We use administrative, technical, and organizational safeguards appropriate to the information we handle. Payment fields are tokenized by the payment provider, access to application data is restricted, and secure transport is used. No internet transmission or storage system can be guaranteed completely secure.

You may ask to access, correct, or delete personal information we maintain, subject to identity verification and exceptions for transaction, tax, legal, security, and recordkeeping obligations. You may also ask questions about a receipt or recurring schedule. Contact us using the information below.

Depending on where you live, applicable law may provide additional privacy rights. We will respond to valid requests as required by law and will not discriminate against you for exercising those rights.

The website is not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13 without appropriate authorization. Contact us if you believe a child provided information improperly.

Fund descriptions and other parts of the website may link to third-party websites. Their privacy practices are governed by their own policies. Payment and infrastructure providers also process information under their own terms and privacy notices.

We may update this Privacy Policy when our practices, providers, or legal obligations change. We will publish the revised Policy and update the effective date above.