Privacy Policy

Donor Moves LLC ("we," "us," or "our") operates the DonorMoves platform — a donor relationship management and moves management tool for nonprofit organizations — accessible at donormoves.net and app.donormoves.net (the "Service").

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. We take privacy seriously, particularly because our platform is used by nonprofit organizations to manage sensitive donor relationships.

1. Who This Policy Covers

This policy applies to two distinct groups:

Users — The nonprofit organization administrators, development officers, and team members who create and use a DonorMoves account.

Donor Data Subjects — The individual donors whose information is entered into the platform by Users. DonorMoves processes this data on behalf of Users. Users are responsible for their own compliance with applicable laws governing their collection and use of donor information.

2. Information We Collect

2.1 Account Information

When you register for DonorMoves, we collect:

• Email address — used to sign in and receive account communications
• Password — stored in encrypted form; never stored in plain text
• Recovery email address — used for password reset and weekly digest delivery

2.2 Organization Settings

When you configure your account, we collect:

• Organization name
• Time zone
• Fiscal year end date
• Annual fundraising goal

2.3 Team Member Information

When an organization administrator adds team members, we collect:

• Team member full name
• Team member email address
• Initial password set by the administrator (stored encrypted)

2.4 Donor Data (Uploaded by Users)

Users enter or import data about their donors into the platform. This data may include:

• Donor first and last name
• Mailing address (street, city, state, ZIP)
• Pipeline stage and stage history
• Ask amount and gift type
• Interaction history (type, date, notes, outcome, next action)
• Gift history (amount, date, gift type, notes)
• Next step and due date
• Assigned staff member
• Free-form notes

Important: This donor data is owned by the User (the nonprofit organization). DonorMoves processes it solely to provide the Service. We do not use, sell, or analyze donor data for any purpose beyond delivering the platform to Users.

2.5 Payment Information

Subscription payments are processed through Stripe, a third-party payment processor. We do not collect or store credit card numbers, bank account numbers, or other payment credentials. Stripe's privacy policy governs the handling of payment data. We retain records of subscription status, billing dates, and invoice history.

2.6 Usage Data

We may automatically collect certain technical data when you use the Service, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and features used within the platform
• Date and time of access
• Referring URLs

2.7 Email Communications

We send the following emails:

• Weekly Digest Email — sent every Monday to the recovery email address on file, listing donors with overdue next steps. Contains one-click action links (mark complete, snooze) that function without requiring login.
• Welcome Email — sent to new team members when added to an account.
• Billing Alerts — sent when a trial is ending or a payment fails.
• Password Reset Emails — sent upon request.

2.8 Bug Reports and Support Submissions

If you use the in-app "Report a Bug" feature, we collect the information you choose to submit and certain technical details sent with it:

• Your description of the problem and any steps to reproduce it
• Technical details — app version, platform and operating system version, the screen you were on when you opened the report, and your browser or device User-Agent string

Each report is linked to your account and your organization so we can follow up with you, and includes the email address on your account and your organization's name. Bug reports are visible only to authorized DonorMoves personnel. See Section 5 for how long we keep them. We use this information only to diagnose and fix problems and to respond to your support request. We do not collect screenshots, device logs, crash reports, or device identifiers through this feature.

Please do not include donor names, contact details, or other donor personal information in your description. It is not needed to investigate a problem.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service — deliver platform features, process data, and manage accounts
• Process payments — manage subscriptions through Stripe
• Send service communications — weekly digests, billing alerts, password resets, and welcome emails
• Provide support and fix problems — diagnose bug reports and respond to support requests
• Maintain security — detect fraud, unauthorized access, and abuse
• Improve the platform — understand how the Service is used to inform product development
• Comply with legal obligations — respond to lawful requests from government authorities

We do not use your data or your donors' data for advertising, marketing to third parties, or sale to data brokers.

4. Sharing and Disclosure

We do not sell personal information. We share information only in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party vendors who help us operate the Service:

All service providers are contractually required to handle data only as directed by us and in accordance with applicable law.

4.2 Legal Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

4.3 Business Transfers

If Donor Moves LLC is acquired, merges with another company, or transfers substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to any such transfer.

4.4 With Your Consent

We may share information for any other purpose with your explicit consent.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription:

• Your data remains accessible for up to 90 days to allow you to export it
• We will send you a reminder email at day 83 of your retention window
• After up to 90 days, your account and all associated data are permanently and irreversibly deleted — including all donor records, interactions, gifts, stage history, and team member accounts
• You may request earlier deletion (see Section 7)

Bug reports: Bug reports you submit (Section 2.8) are kept after an individual account is deleted, because they are tied to your organization rather than to your login. They are deleted when your organization's data is permanently deleted (as described above). Reports we have resolved are also deleted through an automated cleanup process that targets roughly 12 months after resolution; because this process runs on a schedule, actual deletion may occur somewhat later. Until then, a report may still contain the email address and description its author submitted. To request earlier removal of a bug report, email privacy@donormoves.net.

Billing records: Invoice and payment transaction history is retained by Stripe, our payment processor, on their servers under their own retention policy (approximately 7 years for financial records). Our database retains only a minimal audit log entry (organization name, contact email, and deletion date) for internal record-keeping purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage
• Access controls limiting data access to authorized personnel
• Regular security reviews

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data using reasonable and appropriate safeguards.

If you believe your account has been compromised, contact us immediately at privacy@donormoves.net.

7. Your Rights

7.1 California Residents — CCPA / CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — You may request a list of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete — You may request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct — You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — We do not sell or share personal information for cross-context behavioral advertising. No opt-out is necessary, but you may contact us to confirm.
• Right to Limit Use of Sensitive Personal Information — We do not use sensitive personal information beyond what is necessary to provide the Service.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, submit a request to privacy@donormoves.net. We will respond within 45 days. We may need to verify your identity before processing your request.

7.2 All Users

Regardless of location, you may:

• Access or update your account information by logging into your account settings
• Export your data at any time from the Account tab (Donors, Interactions, Gifts, Stage History)
• Delete your account directly from the Service — select Delete My Account in the Account tab (available on web and in the mobile app) and re-enter your password to confirm. What happens next depends on your role:
  • Team members — your login and profile are removed immediately. Your organization, its donor data, and other team members are unaffected.
  • Administrators, if other active team members remain — you will first be prompted to transfer administrator rights to another active team member. Once transferred, your own account is deleted immediately as described above for team members.
  • Administrators who are the sole active user on the account — your account is deactivated and any active subscription is canceled immediately. Your organization's data then follows the same retention process described in Section 5: it remains available to export for up to 90 days, with a reminder email at day 83, before being permanently and irreversibly deleted.

  Bug reports you previously submitted are not removed when an individual account is deleted; they follow the retention schedule in Section 5.

  In every case, deleting your account immediately ends your active login sessions. If you're unable to access your account to use this self-service option, you may instead request deletion by emailing privacy@donormoves.net.

• Unsubscribe from non-essential emails by contacting us (note: transactional emails such as billing alerts and password resets cannot be opted out of while your account is active)

8. CAN-SPAM Compliance

All marketing emails from DonorMoves will:

• Clearly identify DonorMoves as the sender
• Include a valid physical mailing address
• Include a clear and easy way to opt out
• Honor opt-out requests within 10 business days

Transactional emails (billing alerts, password resets, weekly digests, welcome emails) are service communications and are not subject to CAN-SPAM opt-out requirements while your account is active.

9. Cookies and Tracking Technologies

We use cookies to operate the Service, maintain your logged-in session, and understand how our website and app are used through Google Analytics. We do not use cookies for advertising or cross-site behavioral tracking.

Cookies we use:

Analytics. We use Google Analytics 4, a web analytics service provided by Google LLC, on our marketing website (donormoves.net) and our web app (app.donormoves.net). Google Analytics collects usage information such as pages viewed, links clicked, approximate location, browser and device type, referring source, and whether you start or complete sign-up, and Google processes it on our behalf under Google's privacy policy. We use this information only to measure and improve our website and Service. We do not send donor records or the contents of your organization's data to Google Analytics. You can opt out by using the Google Analytics Opt-out Browser Add-on, by blocking cookies in your browser, or by enabling a Global Privacy Control or Do Not Track signal where your browser supports it.

We do not use Meta Pixel, Hotjar, Mixpanel, Amplitude, Segment, or session-recording tools, and we do not use advertising cookies.

You may configure your browser to refuse cookies. Refusing essential cookies will prevent you from remaining logged in to the Service; refusing analytics cookies will not affect the Service.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly. If you believe we may have collected such information, contact us at privacy@donormoves.net.

11. Third-Party Links

The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy at donormoves.net/privacy
• Update the "Last Updated" date at the top of this policy
• Notify you by email at least 14 days before changes take effect

Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, requests, or concerns:

Donor Moves LLC
1534 Plaza Ln. #271, Burlingame, CA 94010-3204
Email: privacy@donormoves.net
Website: donormoves.net