Effective date: [DATE] · Last updated: [DATE]

Privacy Policy

This Privacy Policy explains how [ENDOWFUND LLC] (“EndowFund,” “we,” “us”) collects, uses, and shares personal information when you use the EndowFund website and services (the “Service”).

1. Information We Collect

• Account information: name and email address of Fundraiser Leaders and Members; and, for Members, a phone number if provided for the messaging feature.
• Campaign information: fundraiser names, descriptions, goals, join codes, and participation details.
• Donor contact information: names, email addresses, and/or phone numbers of prospective donors that Members choose to add. Members are responsible for having an appropriate relationship with, and basis for contacting, these individuals.
• Payment information: payments are processed by Stripe. We do not collect or store full payment-card numbers; that information is handled directly by Stripe.
• Usage information: basic technical information such as log data necessary to operate and secure the Service.

2. How We Use Information

We use personal information to: create and manage accounts; operate fundraising campaigns; enable Members to generate and share payment links; process donations through Stripe; send necessary account and transactional emails; provide support; and maintain the security and integrity of the Service. We do not sell personal information.

3. How We Share Information

We share information with service providers who process data on our behalf, only as needed to provide the Service:

• Stripe — payment processing.
• Supabase — database hosting and authentication.
• Resend — transactional and confirmation email delivery.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer.

4. Children’s Privacy

EndowFund is used by minors as participants, but only with the consent of a parent or legal guardian. We collect a minor’s personal information only in connection with that consent. We do not knowingly collect personal information from children under 13 without verifiable parental consent as required by applicable law (including the U.S. Children’s Online Privacy Protection Act, “COPPA”). If you believe a child has provided personal information without appropriate consent, contact us at [CONTACT EMAIL] and we will take appropriate steps.

5. Data Retention and Security

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes, then delete or de-identify it. We use reasonable administrative and technical safeguards to protect personal information; however, no method of transmission or storage is completely secure.

6. Your Choices and Rights

You may request access to, correction of, or deletion of your personal information by contacting [CONTACT EMAIL]. A parent or guardian may request access to or deletion of their minor’s information. Depending on where you live, you may have additional rights under applicable privacy laws.

7. Changes; Contact

We may update this Privacy Policy from time to time and will post the updated version with a new effective date. For any privacy questions or requests, contact [CONTACT EMAIL].