Privacy Policy

Information we collect

• Account information — the email address and password you provide when you sign up.
• Data you enter into the service — the donor records you add (names, contact details, donation amounts and dates) and organization details such as your EIN, used to generate receipts and year-end giving statements. This data belongs to you and your organization; we process it only to provide the service.
• Payment information — handled by Stripe. We never see or store your full card number; Stripe processes the payment and returns only a token and status to us.
• Usage analytics — we record basic first-party usage (such as which pages you visit and how you arrived) on our own servers. We do not use Google Analytics or third-party advertising trackers.

How we use your information

To provide and maintain the service, process your subscription, send transactional email (receipts and account notices) via Resend, respond to support requests, and improve the product.

Who we share it with

We do not sell your data. We share only what is necessary with Stripe (payments) and Resend (transactional email). Your account and donor data is stored in our own database on our own servers — not a third-party cloud database.

Cookies & local storage

We use first-party cookies and browser local storage that are essential to the service (keeping you signed in and remembering how you first found us). We do not use third-party advertising cookies or Google Analytics.

Data retention

We keep your data while your account is active. You can delete your data or your account at any time; after deletion we remove it from our systems within 30 days, except where we must retain limited records for legal or tax purposes.

Your rights

You may access, correct, export, or delete your data at any time — email supportbfcbrilliance@gmail.com. Depending on where you live (for example, under the EU/UK GDPR or California’s CCPA/CPRA), you may have additional rights, including the right to opt out of certain processing.

Security

Data is encrypted in transit (HTTPS) and access is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

The service is not directed to children under 16, and we do not knowingly collect their information.

Changes to this policy

We may update this policy and will post any changes here with a revised effective date.