Fundraiser Platform

1. Information We Collect

1.1 Account Information

When you register for an account, we collect your name, email address, phone number, organization name, and other information you provide during the registration process.

1.2 Payment Information

Payment processing is handled by Stripe, our third-party payment processor. We do not store credit card numbers, bank account numbers, or other sensitive financial information on our servers. Stripe collects and processes your payment details in accordance with their own privacy policy and PCI-DSS compliance standards.

1.3 Usage Data

We automatically collect information about how you use the Service, including pages visited, features used, campaign activity, messaging statistics, and interaction patterns. This data helps us improve the Service and provide support.

1.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how the Service is used. See Section 7 for more details on our cookie practices.

2. How We Use Information

We use the information we collect to:

• Provide the Service: Operate your account, process campaigns, manage participants, and deliver fundraising tools
• Process billing: Calculate subscription and usage fees, process payments, and manage payouts
• Communicate with you: Send service-related notifications, billing alerts, campaign updates, and respond to your support requests
• Improve the Service: Analyze usage patterns to develop new features, fix issues, and enhance the overall experience
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access to the Service
• Comply with legal obligations: Meet regulatory requirements, respond to legal requests, and enforce our Terms of Service

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

• Payment processors: We share necessary transaction data with Stripe to process payments, payouts, and refunds
• Email and messaging providers: We use third-party services to deliver emails and SMS messages on your behalf as part of campaign outreach
• Authentication providers: If you sign in using a third-party provider, we receive basic profile information from that provider
• Legal requirements: We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change

Third-Party Service Providers

We use the following third-party service providers to operate the Service:

• Stripe (stripe.com) — Payment processing. When you make a donation or purchase, Stripe processes your payment information. See Stripe's Privacy Policy at https://stripe.com/privacy
• Twilio (twilio.com) — SMS messaging. Phone numbers and message content are processed by Twilio for campaign text messages. See Twilio's Privacy Policy at https://www.twilio.com/legal/privacy
• Resend (resend.com) — Email delivery. Email addresses and message content are processed by Resend for campaign email communications. See Resend's Privacy Policy at https://resend.com/legal/privacy-policy
• Google — If you sign in with Google, we receive your name, email address, and profile photo from Google. See Google's Privacy Policy at https://policies.google.com/privacy
• Microsoft — If you sign in with Microsoft, we receive your name and email address from Microsoft. See Microsoft's Privacy Policy at https://privacy.microsoft.com

4. Data Security

We take reasonable measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Secure hosting infrastructure with regular security updates
• Access controls that limit employee access to personal data on a need-to-know basis
• Regular security assessments and monitoring for unauthorized access

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to following industry best practices.

In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law, including Missouri's data breach notification statute.

5. Data Retention

We retain your information according to the following schedule:

• Active accounts: Your data is retained for as long as your account remains active and in good standing
• Closed accounts: When you close your account or your account is terminated, we retain your data for 30 days to allow for data export or account reactivation. After 30 days, your data is permanently deleted
• Legal obligations: Certain records may be retained longer as required by law, such as financial transaction records for tax and regulatory compliance

6. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request that we correct any inaccurate or incomplete information
• Deletion: You may request that we delete your personal data, subject to our legal retention obligations
• Portability: You may request an export of your data in a commonly used, machine-readable format
• Opt-out: You may opt out of non-essential communications at any time

To exercise any of these rights, please contact us at support@findmyfundraiser.com. We will respond to your request within 30 days.

7. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and core Service functionality. These cannot be disabled.
• Analytics cookies (optional): Help us understand how the Service is used so we can improve it. These cookies are only placed with your consent and can be disabled in your browser settings.

When you first visit the Service, a cookie consent banner will ask whether you accept or decline analytics cookies. Your choice is stored in a cookie (fmf_cookie_consent) for 365 days. You can change your preference at any time by clearing your cookies and revisiting the site. You can also control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

Do Not Track

Some browsers offer a "Do Not Track" feature. We currently do not respond to Do Not Track signals. However, you can manage your cookie preferences through your browser settings.

8. Children's Privacy

The Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

8a. Children Under 13 (COPPA Compliance)

In compliance with the Children's Online Privacy Protection Act (COPPA), FindMyFundraiser does not knowingly collect personal information from children under the age of 13. Children under 13 may not create accounts on the Service.

If your organization includes members under 13 (such as youth sports teams, elementary school groups, or scouting troops), a parent or guardian must create and manage the participant account on the child's behalf. The parent or guardian is responsible for all activity on the account, including adding contacts and sending messages.

If we discover that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@findmyfundraiser.com.

8b. Minor Participants (Ages 13–17)

Minors aged 13–17 may use the Service as campaign participants under the supervision of their school, team, club, or parent/guardian organization. The organization that creates the campaign is responsible for obtaining appropriate parental or guardian consent for minor participants.

FindMyFundraiser collects the following information from minor participants: first name, last name, email address, phone number, and optionally a photo. We do not knowingly collect sensitive personal information from minors beyond what is necessary for campaign participation.

Parents or guardians may request access to, correction of, or deletion of their minor's data by contacting us at support@findmyfundraiser.com.

9. Your State Privacy Rights

California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information.

Categories of personal information we collect:

• Identifiers (name, email address, phone number)
• Commercial information (purchase and donation history)
• Internet or network activity (usage data, pages visited, interaction patterns)
• Photos (optionally uploaded by participants)

Sources of personal information:

• Directly from you when you create an account or participate in a campaign
• From organizations that add you as a participant
• From contacts who enter your information as part of campaign outreach

Purpose of collection: To operate the fundraising platform, process transactions, send campaign communications, and improve the Service.

Third parties receiving personal information: Stripe (payments), Twilio (SMS), Resend (email) — see Section 3 for details.

Your rights under CCPA/CPRA:

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information, subject to legal exceptions
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information
• Right to opt out of the sale or sharing of personal information
• Non-discrimination: We will not discriminate against you for exercising your privacy rights

Do Not Sell or Share My Personal Information: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

To exercise your rights, contact us at support@findmyfundraiser.com.

Other State Residents: Depending on your state of residence, you may have additional privacy rights. Contact us to learn more about your specific rights.

10. Governing Law

This Privacy Policy is governed by the laws of the State of Missouri, without regard to conflict of law principles.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or a prominent notice within the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically for the latest information on our privacy practices.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: