Privacy Policy

Effective: April 2026  ·  Last updated: April 2026

1. What we collect

We collect the following information:

  • Email address (when you create an account or make a donation)
  • Name (optional, when creating an account)
  • Donation history (fund, amount, date)
  • Feedback submissions (type, message, email)
  • Basic usage data (page views, via Vercel Analytics if enabled)

We do not collect payment card information. All payments are processed by Stripe, which has its own privacy policy.

2. How we use it

We use your information to:

  • Process and record your donations
  • Send donation receipts to your email
  • Notify you of account activity
  • Respond to feedback you submit
  • Improve the platform

We do not sell your data. We do not share your data with third parties except as described in this policy.

3. Third parties we share data with

  • Supabase (database hosting) — stores your account and donation data
  • Stripe (payment processing) — processes payments; does not share card data with us
  • Resend (email delivery) — sends receipts and notifications
  • Every.org (donation routing, when enabled) — receives donation information to route funds to charities
  • Vercel (website hosting) — serves the website

4. Your rights (GDPR)

If you are in the European Union or United Kingdom, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Export your data in a portable format

To exercise these rights, contact us via our feedback form and we will respond within 30 days.

5. Data deletion

You can delete your account at any time from your dashboard settings. This will permanently delete your account and personal information. Donation records may be retained for legal and tax compliance purposes.

6. Cookies

We use essential cookies only — required for authentication and session management. We do not use advertising or tracking cookies.

7. Children

This service is not directed at children under 13. We do not knowingly collect data from children under 13.

8. California residents (CCPA)

GiveFolio does not sell personal information and is not currently subject to the California Consumer Privacy Act (CCPA) based on current scale. As we grow, we will update this policy accordingly. California residents may contact us to request information about data we hold.

9. Contact

For privacy questions, contact us via our feedback form.