Privacy Policy
Last updated: October 22, 2026
DonorSend is operated by Donor Send LLC, a California limited liability company ("DonorSend", "we", "us"), providing donor-relationship software for nonprofit organizations at donorsend.app and donorsend.org. This policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the people who use DonorSend (account holders), visitors to our websites, and — in the limited way described below — the donors whose information organizations store in DonorSend.
Two kinds of data
Account data is information about the people who use DonorSend. We decide how it is used, and this policy describes how.
Donor data is information an organization stores about its donors and contacts — names, contact details, mailing addresses, photos, church affiliation, household members, giving history and pledges, notes, message logs, and recorded video messages. It belongs to that organization. We store and process it only to provide, secure and improve the service, on the organization's instructions, as its service provider (processor). We never sell it, share it across organizations, or use it for advertising. We may create de-identified and aggregated information from it, as described below. Donors should contact the organization that holds their record with questions or requests; we help organizations honor them.
Account data we collect
- Information you give us: your name, email address, mobile phone number, password (stored only in hashed form) or sign-in through Apple or Google, your organization's details (name, address, EIN), your role, and anything you send us when you ask for help.
- Terms acceptance records: when you accept our Terms of Service, the version you accepted, the date and time, the exact statement you agreed to, your mobile number, and the IP address and device (browser or app) information sent with that request.
- Billing information: your plan, billing status and invoices. Payments are processed by Stripe; we never see or store your card number.
- Device and usage information: the app's error and security logs (including browser or device type and the screen where an error happened; our hosting providers' request logs also record IP addresses), a record of actions taken in your organization's account, and — if you allow notifications — a push notification token for your device.
- Website visits: our public website counts page views with Vercel Web Analytics, which sets no cookies, keeps only anonymized data, and cannot recognize a visitor from one day to the next. The app itself carries no analytics or advertising trackers.
How we use account data
We use account data to provide and secure the service; to create and manage your account and sign you in; to bill you; to contact you about your account and the service, by email, text message, phone call and push notification, as described in our Terms of Service; to keep a record of your agreement to our terms; to answer support requests; to fix errors, improve reliability and develop the service; to prevent fraud and abuse; and to comply with law. We do not use account data for advertising, and we do not sell or share it for cross-context behavioral advertising.
Text messages and videos
Texting works two ways. By default, texts you compose are sent from your own phone through your own carrier — we log what you write in your organization's account but do not transmit the message. Organizations can optionally add a dedicated texting number, in which case messages are transmitted through Twilio, our text-messaging provider; texts and photos that donors send to that number are received by the service and stored in the donor's record for your organization. Opt-out requests (such as replying STOP) are honored and recorded in the consent audit trail.
Phone numbers and text-message opt-in and consent information — both donors' and account holders' — are used only to send and receive the service's messages. No mobile information is shared with third parties or affiliates for marketing or promotional purposes; text-messaging originator opt-in data and consent are not sold, rented, or shared with any third party.
Recorded video messages are stored for your organization's configured retention period (7 to 40 days) and then automatically deleted. Video links you send are publicly accessible to anyone with the exact link.
When an organization sends email to its donors through DonorSend, we record delivery, open and click events for those emails so the organization can see what was received. These records are deleted after 400 days.
Online donations
Organizations can accept online donations through a giving page. Those payments are processed by Stripe under the organization's own Stripe account; we receive and store the resulting gift records (donor, amount, date, fund) but never see or store card numbers.
Optional integrations you control
Your organization's administrators can connect outside services, and we exchange data with them only on your instruction: QuickBooks Online (we send donation records — date, amount, fund, method — to Intuit to create entries in your own QuickBooks company) and Planning Center Giving (we import donation records into your account). Access credentials for connected services are stored server-side, are never exposed to the browser, and are revoked when you disconnect the integration.
Signing in with Apple or Google
If you sign in with Apple or Google, we receive your name and email address (or the private relay address Apple provides) to create and sign in to your account. We do not receive your password or any other data from those accounts.
AI-assisted drafting
When you use the message-drafting assistant, the relevant context (for example the donor's name and recent conversation) is sent to Anthropic, our AI provider, to generate a suggestion. Under Anthropic's commercial terms, that content is not used to train their models. Suggestions are drafts — nothing is sent to a donor unless you send it.
People we contact about DonorSend
We tell missionaries, ministry workers and nonprofit leaders about DonorSend. To do that we collect business contact information — name, organization, role, and a published email address or phone number — from public sources such as organization and ministry websites, and from people who refer us. We may use AI tools (Anthropic) to research and draft outreach, and we keep a record of the emails we exchange, including whether an email was opened or a link in it was clicked. We use this information only to contact you about DonorSend and to follow up if you are interested; we do not sell it. Every outreach email includes a way to unsubscribe, and you can ask us at any time to stop contacting you or to delete your information by emailing TOS@donorsend.app. We keep it until you ask us to stop or it is no longer useful for that purpose, and we delete link-click records after 24 months.
De-identified and aggregated information
We may create de-identified or aggregated information from the data in DonorSend — account data, donor data and how the service is used — so that it no longer identifies, and cannot reasonably be linked to, any person, household or organization. For example, we may calculate typical giving patterns, message response rates or feature use across many organizations. We use and may share this information for lawful business purposes, including operating, improving and developing our products and services (including AI features), research and analytics, and publishing benchmarks and reports. It is not personal information. We maintain and use it only in de-identified form, take reasonable measures to ensure it cannot be linked to a person or household, do not attempt to re-identify it (except to test that our de-identification works), and contractually require anyone we share it with to do the same.
How we share information
We share personal information only in these ways:
- Within your organization. Information in your organization's account is visible to its users according to the roles your administrators assign.
- With service providers who run parts of the service for us: Supabase (database, authentication, file storage), Vercel (hosting, and cookieless visit counts for our public website), Stripe (billing and donation processing), Twilio (text delivery for organizations with a dedicated number), Resend (email delivery), Apple (app push notifications and Sign in with Apple), your web browser's push service (web push notifications, if you turn them on), Anthropic (AI drafting), and Google (optional sign-in). Intuit (QuickBooks Online) and Planning Center receive or provide data only for organizations that connect those integrations. Each may use the information only to provide its service to us, under agreements that require it to protect the information at least as well as this policy does.
- For legal reasons, when we believe in good faith that the law requires it, or to protect the rights, safety or security of our users, the public or DonorSend.
- With your consent or at your direction, such as when an administrator connects an integration.
- In a business transfer, such as a merger or sale of assets, in which case this policy continues to apply to the information transferred.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Where information is stored
DonorSend is operated from the United States, and information is stored and processed in the United States. If you use DonorSend from another country, your information is transferred to and processed in the United States.
How long we keep information
| Information | How long we keep it |
|---|---|
| Account, organization and donor data | While the account exists. Deleting your organization's account permanently deletes its data. |
| Deleted donors | 30 days, during which your organization can restore them; then permanently deleted, including profile, notes, giving history and message logs. |
| Recorded videos | 7 to 40 days, per your organization's retention setting. |
| Terms acceptance records | While your user account exists. |
| Error and security logs | 90 days. |
| Email delivery, open and click events | 400 days. |
| Billing records | As long as tax and accounting law requires; card details are held by Stripe, not by us. |
| Backups | Kept for a limited period for disaster recovery, then overwritten. |
Archiving a donor instead of deleting keeps the record but removes it from active lists and reminders.
Security
Data is encrypted in transit (TLS) and at rest, with per-organization row-level security enforced at the database layer. Consent changes for texting are recorded in a tamper-resistant, append-only audit trail. Access to your account by our support staff requires your organization's permission and is logged and visible to you. Before we release changes, we test them in a separate, access-controlled copy of our system that may hold a copy of production data and is protected the same way. No system is perfectly secure; if we become aware of a data breach affecting your information, we will notify affected organizations and people without undue delay as required by law.
Your choices
- Access and correct your account information in the app, in Settings.
- Delete your account: an administrator can delete the organization's account in the app (Settings → Account → Delete account). This permanently deletes the organization's data.
- Notifications: choose which notifications you get, and how, in Settings; reply STOP to any text from us to stop texts.
- Integrations: disconnect QuickBooks or Planning Center at any time in Settings, which stops the data exchange and revokes our access.
- Donors who wish to stop receiving texts can reply STOP or ask the organization, which records the opt-out. Donors seeking access to or deletion of their information should contact the organization that holds their record; we will assist that organization in honoring the request.
Your privacy rights
We honor the rights below for all users in the United States, regardless of whether a particular law's thresholds apply to us.
California privacy rights
The California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives California residents specific rights over their personal information. In the past 12 months we have collected the following categories of personal information about account holders, website visitors, and people we contact about DonorSend:
- Identifiers — Name, email, phone number, IP address, device and push identifiers. Source: You; your device; public websites and referrals (for people we contact about DonorSend). Used for: Your account, sign-in, contacting you, security, record of agreement, telling people about DonorSend. Disclosed for a business purpose to: Service providers listed above.
- Customer records — Organization name and address, EIN. Source: You. Used for: Your account and billing. Disclosed for a business purpose to: Supabase, Stripe.
- Commercial information — Subscription plan, billing status. Source: You; Stripe. Used for: Billing. Disclosed for a business purpose to: Stripe.
- Internet or network activity — Error and security logs, anonymized website page views. Source: Your device. Used for: Security, reliability, website traffic counts. Disclosed for a business purpose to: Supabase, Vercel.
- Professional information — Organization, role. Source: You; your organization's administrators; public websites and referrals (for people we contact about DonorSend). Used for: Multi-user accounts; telling people about DonorSend. Disclosed for a business purpose to: Supabase, Resend, Anthropic.
We do not sell or share personal information as those terms are defined in the CCPA/CPRA, have not done so in the preceding 12 months, and have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not collect sensitive personal information about account holders for the purpose of inferring characteristics. Organizations may choose to store sensitive information in their donor records (for example a donor's church affiliation); we process it only on their instructions and only to provide the service.
Your rights
California residents may exercise the right to know what personal information we hold, to access it in a portable format, to correct it, to delete it, and to limit the use of sensitive personal information. Because we do not sell or share personal information, there is nothing to opt out of; we nonetheless treat an opt-out preference signal such as the Global Privacy Control, sent by your browser, as a valid request to opt out of sale and sharing for that browser and any account you are signed in to. We will never discriminate against you — in price, service level, or otherwise — for exercising any privacy right.
To exercise a right, use the controls in the app or email TOS@donorsend.app. We will confirm receipt within 10 business days and respond within 45 days (extendable once by 45 days where reasonably necessary, with notice). We verify requests by confirming control of the email address associated with the account, and may ask for additional information where needed. You may use an authorized agent to submit a request; we will require proof of the agent's written authorization and may verify your identity directly.
Shine the Light (Civil Code §1798.83)
California residents may request a list of third parties to whom a business has disclosed personal information for those parties' direct marketing purposes. We make no such disclosures, and will confirm this upon request to TOS@donorsend.app.
Do Not Track (CalOPPA)
We do not track users across third-party websites and do not serve third-party behavioral advertising, so we do not respond differently to browser "Do Not Track" signals — there is no tracking to disable. We honor the Global Privacy Control as described above.
Minors
DonorSend accounts are for adults; we do not knowingly collect personal information directly from anyone under 16 as an account holder. Your organization may choose to store limited information about children in a donor's household (for example, a child's first name and birthday to remind you to reach out) — this is donor data your organization enters and controls, and we process it only on your organization's instructions and behalf. California residents under 18 who believe content they posted appears in the service may request its removal via TOS@donorsend.app (Business and Professions Code §22581).
Changes to this policy
When we change this policy, we update the date at the top. For material changes we give notice by email or in the app before they take effect, and you will be asked to review and accept the updated policy before you can keep using the service.
Contact
Privacy questions and requests: Donor Send LLC, TOS@donorsend.app