Privacy Policy

This Privacy Policy describes how Donor Success (“we,” “us,” or “our”) collects, uses, and shares information in connection with the Donor Success platform (the “Service”). It covers two distinct kinds of information: information about the people who use our Service directly (our “Customers” and their staff), and donor information that our Customers upload to the Service about their own donors. These are treated differently, as described below.

When you create an account or use the Service, we collect:

• Account information: name, email address, organization, and role;
• Billing information, processed through our payment provider (Stripe) — we do not directly store full payment card numbers;
• Authentication tokens for any third-party integrations you choose to connect (Salesforce, Gmail, Outlook), stored encrypted, used solely to provide the integration you requested;
• Usage data, such as pages visited, actions taken, and log data, to operate and improve the Service; and
• Communications you send to us, such as support requests.

Our Customers (nonprofit organizations) upload information about their own donors to the Service — including names, contact information, giving history, and notes — in order to manage their donor relationships. With respect to this donor-level information, our Customer is the data controller and we act as a data processor, processing it only as instructed by our Customer and solely to provide the Service. We do not use donor data uploaded by one Customer for the benefit of any other Customer, and we do not sell donor data to third parties.

If you are a donor and have questions about how your information is being used within the Service, please contact the nonprofit organization directly, as they control that data; we can assist them in responding to your request.

If a Customer connects Salesforce, Gmail, Outlook, or a wealth-screening provider such as WealthEngine, we access and process data from those services solely as necessary to provide the requested integration (for example, syncing donor and gift records from Salesforce, or sending an email through a connected Gmail account). We do not access email inboxes beyond what is needed to send messages the Customer’s user specifically initiates. Data obtained from a wealth-screening provider is used solely to display the results to the requesting Customer and is not shared further.

We use the information described above to:

• Provide, maintain, and improve the Service;
• Process payments and manage subscriptions;
• Communicate with you about your account, including service and billing notices;
• Provide customer support;
• Detect, prevent, and address security incidents or misuse; and
• Comply with legal obligations.

We share information with service providers who help us operate the Service, including hosting (Vercel), database hosting (Neon), transactional email delivery (Resend), and payment processing (Stripe), each bound by contractual obligations to protect the information and use it only to provide services to us. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one.

We use industry-standard measures to protect information, including encryption of stored authentication tokens and credentials, encrypted connections (HTTPS/TLS) for data in transit, and access controls limiting who can view Customer Data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain account and Customer Data for as long as an account remains active, and for a reasonable period afterward to allow for account recovery, unless a Customer requests earlier deletion. Upon a Customer’s request following account termination, we will delete or anonymize Customer Data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information. Account users can exercise these rights for their own account information directly within the Service or by contacting us. For donor-level information, requests should generally be directed to the nonprofit organization that controls that data, though we will assist as needed.

The Service is intended for use by adult professionals at nonprofit organizations and is not directed to children. We do not knowingly collect personal information from children under 13 (or the relevant age of digital consent in your jurisdiction).

Our Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

We use essential cookies necessary for authentication and core functionality of the Service. We do not currently use third-party advertising or tracking cookies.

We may update this Privacy Policy from time to time. We will post the updated policy here with a revised “Last updated” date, and will provide more direct notice for material changes.

Questions about this Privacy Policy can be directed to privacy@donorsuccess.com.