Privacy Policy

Donor Moves LLC ("we," "us," or "our") operates the DonorMoves platform — a donor relationship management and moves management tool for nonprofit organizations — accessible at donormoves.net and app.donormoves.net (the "Service").

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. We take privacy seriously, particularly because our platform is used by nonprofit organizations to manage sensitive donor relationships.

1. Who This Policy Covers

This policy applies to two distinct groups:

Users — The nonprofit organization administrators, development officers, and team members who create and use a DonorMoves account.

Donor Data Subjects — The individual donors whose information is entered into the platform by Users. DonorMoves processes this data on behalf of Users. Users are responsible for their own compliance with applicable laws governing their collection and use of donor information.

2. Information We Collect

2.1 Account Information

When you register for DonorMoves, we collect:

• Email address — used to sign in and receive account communications
• Password — stored in encrypted form; never stored in plain text
• Recovery email address — used for password reset and weekly digest delivery

2.2 Organization Settings

When you configure your account, we collect:

• Organization name
• Time zone
• Fiscal year end date
• Annual fundraising goal

2.3 Team Member Information

When an organization administrator adds team members, we collect:

• Team member full name
• Team member email address
• Initial password set by the administrator (stored encrypted)

2.4 Donor Data (Uploaded by Users)

Users enter or import data about their donors into the platform. This data may include:

• Donor first and last name
• Mailing address (street, city, state, ZIP)
• Pipeline stage and stage history
• Ask amount and gift type
• Interaction history (type, date, notes, outcome, next action)
• Gift history (amount, date, gift type, notes)
• Next step and due date
• Assigned staff member
• Free-form notes

Important: This donor data is owned by the User (the nonprofit organization). DonorMoves processes it solely to provide the Service. We do not use, sell, or analyze donor data for any purpose beyond delivering the platform to Users.

2.5 Payment Information

Subscription payments are processed through Stripe, a third-party payment processor. We do not collect or store credit card numbers, bank account numbers, or other payment credentials. Stripe's privacy policy governs the handling of payment data. We retain records of subscription status, billing dates, and invoice history.

2.6 Usage Data

We may automatically collect certain technical data when you use the Service, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and features used within the platform
• Date and time of access
• Referring URLs

2.7 Email Communications

We send the following emails:

• Weekly Digest Email — sent every Monday to the recovery email address on file, listing donors with overdue next steps. Contains one-click action links (mark complete, snooze) that function without requiring login.
• Welcome Email — sent to new team members when added to an account.
• Billing Alerts — sent when a trial is ending or a payment fails.
• Password Reset Emails — sent upon request.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service — deliver platform features, process data, and manage accounts
• Process payments — manage subscriptions through Stripe
• Send service communications — weekly digests, billing alerts, password resets, and welcome emails
• Maintain security — detect fraud, unauthorized access, and abuse
• Improve the platform — understand how the Service is used to inform product development
• Comply with legal obligations — respond to lawful requests from government authorities

We do not use your data or your donors' data for advertising, marketing to third parties, or sale to data brokers.

4. Sharing and Disclosure

We do not sell personal information. We share information only in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party vendors who help us operate the Service:

All service providers are contractually required to handle data only as directed by us and in accordance with applicable law.

4.2 Legal Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

4.3 Business Transfers

If Donor Moves LLC is acquired, merges with another company, or transfers substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to any such transfer.

4.4 With Your Consent

We may share information for any other purpose with your explicit consent.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription:

• Your data remains accessible for up to 90 days to allow you to export it
• We will send you a reminder email at day 83 of your retention window
• After up to 90 days, your account and all associated data are permanently and irreversibly deleted — including all donor records, interactions, gifts, stage history, and team member accounts
• You may request earlier deletion (see Section 7)

Billing records: Invoice and payment transaction history is retained by Stripe, our payment processor, on their servers under their own retention policy (approximately 7 years for financial records). Our database retains only a minimal audit log entry (organization name, contact email, and deletion date) for internal record-keeping purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage
• Access controls limiting data access to authorized personnel
• Regular security reviews

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data using reasonable and appropriate safeguards.

If you believe your account has been compromised, contact us immediately at privacy@donormoves.net.

7. Your Rights

7.1 California Residents — CCPA / CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — You may request a list of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete — You may request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct — You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — We do not sell or share personal information for cross-context behavioral advertising. No opt-out is necessary, but you may contact us to confirm.
• Right to Limit Use of Sensitive Personal Information — We do not use sensitive personal information beyond what is necessary to provide the Service.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, submit a request to privacy@donormoves.net. We will respond within 45 days. We may need to verify your identity before processing your request.

7.2 All Users

Regardless of location, you may:

• Access or update your account information by logging into your account settings
• Export your data at any time from the Account tab (Donors, Interactions, Gifts, Stage History)
• Delete your account by contacting us at privacy@donormoves.net
• Unsubscribe from non-essential emails by contacting us (note: transactional emails such as billing alerts and password resets cannot be opted out of while your account is active)

8. CAN-SPAM Compliance

All marketing emails from DonorMoves will:

• Clearly identify DonorMoves as the sender
• Include a valid physical mailing address
• Include a clear and easy way to opt out
• Honor opt-out requests within 10 business days

Transactional emails (billing alerts, password resets, weekly digests, welcome emails) are service communications and are not subject to CAN-SPAM opt-out requirements while your account is active.

9. Cookies and Tracking Technologies

We use cookies solely to operate the Service and maintain your logged-in session. We do not use cookies for advertising, analytics, or cross-site tracking.

Cookies we use:

We do not use Google Analytics, Meta Pixel, Hotjar, Mixpanel, Amplitude, Segment, or any other analytics or tracking service. No session recording, behavioral tracking, or advertising cookies are present.

You may configure your browser to refuse cookies, but doing so will prevent you from remaining logged in to the Service.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly. If you believe we may have collected such information, contact us at privacy@donormoves.net.

11. Third-Party Links

The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy at donormoves.net/privacy
• Update the "Last Updated" date at the top of this policy
• Notify you by email at least 14 days before changes take effect

Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, requests, or concerns:

Donor Moves LLC
1534 Plaza Ln. #271, Burlingame, CA 94010-3204
Email: privacy@donormoves.net
Website: donormoves.net