Privacy Policy
Last Updated: January 18, 2026
1. Introduction
FundFlow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital donation platform.
2. Information We Collect
Account Information
- Name, email address, phone number
- Password (encrypted)
- Profile photo and bio (optional)
Identity Verification (KYC) for Fundraisers
- Date of birth
- Physical address
- Last 4 digits of Social Security Number
- Government-issued photo ID
Payment Information
- Payment card details (processed by Stripe, not stored by us)
- Bank account information for withdrawals
- Transaction history
Usage Information
- IP address, browser type, device information
- Pages visited, features used, time spent
- Location data (if permitted)
- Cookies and similar tracking technologies
3. How We Use Your Information
- Process donations and payments
- Verify identity and prevent fraud
- Comply with legal and regulatory requirements (AML, KYC, tax reporting)
- Provide customer support
- Send transactional emails and notifications
- Improve our Service and develop new features
- Send marketing communications (with your consent)
- Enforce our Terms of Service
4. Information Sharing and Disclosure
We may share your information with:
- Service Providers: Stripe (payment processing), Firebase (hosting/database), email providers
- Legal Authorities: When required by law, court order, or to prevent fraud/illegal activity
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize sharing
We do NOT sell your personal information to third parties.
5. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (HTTPS/TLS) and at rest
- Secure authentication and password hashing
- Regular security audits and monitoring
- Access controls and employee training
- PCI DSS compliance for payment data (via Stripe)
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data to comply with legal obligations (e.g., tax records for 7 years), resolve disputes, and prevent fraud. Anonymized data may be retained indefinitely for analytics.
7. Your Privacy Rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal information
- Object to or restrict processing of your data
- Data portability (receive your data in a structured format)
- Withdraw consent for marketing communications
- Opt-out of certain data collection (e.g., cookies)
To exercise these rights, contact us at privacy@fundflow.com
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance user experience, analyze usage, and remember preferences. You can control cookies through your browser settings, but disabling them may limit functionality.
9. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.
10. Children's Privacy
FundFlow is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover such data, we will delete it immediately.
11. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, delete personal information, and opt-out of the sale of personal information (we do not sell your data).
12. International Users
Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using FundFlow, you consent to such transfers. We comply with applicable data protection laws, including GDPR for EU users.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification. Your continued use of FundFlow after changes constitutes acceptance.
14. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@fundflow.com
Mail: FundFlow Privacy Team, [Address]