Privacy Policy

Effective date: July 19, 2026

1. Introduction

DonorStride ("we," "our," or "us") provides a cloud-based fundraising moves management platform for nonprofit organizations. This Privacy Policy explains how we collect, use, and protect your information when you use our service at donorstride.com.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, organization name, and password.

Donor Data: You may store information about your organization's donors, including names, contact details, giving history, and communication records.

Usage Data: We collect standard usage information such as login times, feature usage, and browser type to improve our service.

3. Google API Usage

DonorStride offers optional Gmail integration to help you track donor communications. Our use of Google APIs is limited and specific:

• Scopes used: We request only gmail.metadata and gmail.labels scopes.
• What we access: Email metadata only, including sender addresses, recipient addresses, dates, subject lines, and labels. This allows us to log which donors you have communicated with and when.
• What we do NOT access: We never read email bodies, message content, or attachments. We cannot see the substance of your communications.
• Purpose: Metadata is used solely to automatically track donor touchpoints within your DonorStride account.
• Storage: We store only the metadata needed to display communication history (sender, recipient, date). Raw API responses are not persisted.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

• Providing and maintaining the DonorStride platform
• Tracking donor relationships and communication history
• Generating reports and insights about your fundraising activities
• Sending service-related notifications (account alerts, feature updates)
• Improving our platform based on aggregate usage patterns

5. Data Storage and Security

All data is stored on Amazon Web Services (AWS) infrastructure in the United States. Data is encrypted at rest using AWS Key Management Service (KMS) and encrypted in transit using TLS 1.2+.

We implement industry-standard security measures including access controls, audit logging, and regular security reviews.

6. Data Sharing

We do not sell, rent, or share your personal data or donor data with third parties for marketing purposes.

We may share data only in these limited circumstances:

• With service providers who assist in operating our platform (e.g., AWS for hosting), bound by confidentiality agreements
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of DonorStride or our users

7. Data Retention and Deletion

You retain full control over your data. You can disconnect integrations (Gmail, Calendar) at any time from your account settings, which stops further data collection from those sources.

You can delete your account and all associated data at any time by contacting us. Upon account deletion, all your data (including donor records, communication logs, and integration tokens) is permanently removed within 30 days.

8. Cookies

We use essential cookies and local storage for authentication and session management. We do not use third-party tracking cookies or advertising pixels.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: devin.limo@gmail.com