Privacy Policy

This Privacy Policy explains how OpenFundraise collects, uses, discloses, and retains information when nonprofits, their team members, donors, website visitors, and other users interact with our websites, fundraising tools, hosted pages, dashboards, communications, and integrations.

A nonprofit customer may control the donor and supporter data that OpenFundraise processes on its behalf. If your request concerns information connected to a particular nonprofit, that nonprofit may be the best first point of contact and we may need to coordinate with it.

The information we collect depends on how you use OpenFundraise. It may include the following categories:

• Account and organization information, such as names, work email addresses, phone numbers, roles, login and session information, organization details, websites, mailing addresses, tax or registration information, and onboarding or verification materials.
• Donor and transaction information, such as contact details, billing address, gift amount, designation, campaign, recurring-gift status, receipt details, communication history, and related payment or processor identifiers.
• Fundraising and attribution information, such as referral source, campaign and link identifiers, pages viewed, checkout activity, device and browser details, approximate location derived from network information, and interaction or conversion events.
• Communications and support information, including demo requests, support messages, survey responses, preferences, and the contents of messages you send to us.
• Integration information received from or sent to services that a customer chooses to connect, such as payment processors, communications providers, customer relationship management systems, analytics tools, and advertising platforms.
• Technical and usage information, such as IP address, user agent, timestamps, logs, cookie or local-storage identifiers, product activity, error reports, and security signals.

Payments are processed by connected providers such as Stripe, PayPal, Square, or another processor selected by the nonprofit. OpenFundraise receives transaction details, status information, tokens, and processor identifiers needed to operate the platform, but does not store raw payment-card numbers as part of its ordinary platform flow.

Payment providers process information under their own terms and privacy notices. A nonprofit's choice of processor may affect which provider receives a donor's information.

We use information to operate and improve OpenFundraise, including to:

• Provide donation forms, hosted checkout, receipts, donor portals, campaign tools, communications, reporting, attribution, recurring-gift management, and customer support.
• Authenticate users, administer accounts, verify organizations, prevent fraud and abuse, protect the platform, and enforce our terms and policies.
• Process transactions and synchronize data with services a customer has connected or instructed us to use.
• Measure product performance, diagnose errors, understand usage, test improvements, and develop fundraising insights and features.
• Send service, transactional, support, and permission-based marketing communications and honor communication preferences.
• Comply with law, respond to valid legal requests, resolve disputes, and protect the rights and safety of users, customers, donors, OpenFundraise, and others.

OpenFundraise and its service providers use cookies, local storage, session storage, and similar technologies for authentication, security, saved settings, cart or checkout continuity, attribution, analytics, and product performance.

We use analytics and interaction tools such as PostHog and Microsoft Clarity. These tools may process page views, clicks, device and browser data, identifiers, and session interaction data. PostHog is configured to exclude OpenFundraise donor checkout, donor management, donor portal, and API routes from its client-side capture, and to mask or block designated sensitive content. Other services may apply their own privacy protections and retention settings.

You can control cookies through your browser, but blocking some storage may affect authentication, checkout continuity, saved preferences, or other product functions.

We disclose information when needed to provide the service, follow a customer's instructions, or meet legal and security obligations. Recipients may include hosting, infrastructure, authentication, communications, analytics, observability, security, and support providers; payment processors; and integrations enabled by a nonprofit customer.

When a customer enables an integration, information may be shared with services such as Stripe, PayPal, Square, Twilio, Constant Contact, Bloomerang, HubSpot, Salesforce, or Meta at that customer's direction. Those services process information under their own terms and privacy notices.

We may also disclose information during a corporate transaction, to professional advisers, or when we reasonably believe disclosure is necessary to comply with law, protect rights or safety, investigate abuse, or secure the platform.

OpenFundraise does not independently sell donor personal information for money. If a nonprofit enables an advertising or analytics integration, limited event information may be sent to that integration at the nonprofit's direction.

You can opt out of marketing email using the unsubscribe method in the message or by contacting us. Our Anti-Spam Policy explains our permission, list, and complaint-handling rules. You may still receive receipts, account notices, security messages, or other non-marketing communications that are necessary to provide the service.

For applicable SMS messages, you can use the opt-out instructions in the message, including replying STOP where supported. Account and product settings may provide additional communication controls.

We retain information for as long as reasonably needed to provide the service, maintain business and transaction records, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and protect the platform. Retention periods vary by the type of information, the customer's instructions, and applicable requirements.

We may retain limited suppression records, such as an email address and opt-out reason, so that we can continue honoring unsubscribe, complaint, and do-not-contact requests.

We use technical and organizational safeguards designed to protect information, including access controls, authentication, monitoring, and use of tokenized payment integrations. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If you believe information or an OpenFundraise account may have been compromised, contact [email protected] promptly.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding personal information. You can submit a request to [email protected]. We may verify your identity and authority before completing a request.

If OpenFundraise processes the information for a nonprofit customer, we may direct the request to that customer or work with it to respond. Some information may be retained where permitted or required for legal, security, fraud-prevention, accounting, or suppression purposes.

We may update this Privacy Policy as our services or legal requirements change. We will post the updated policy here and revise the effective date above.

Privacy questions and requests can be sent to [email protected]. For other ways to reach us, visit our Contact page.