Privacy Policy

GeoGiving is operated by Prism AI Apps LLC. It handles personal information in two distinct roles, and which one applies depends on who you are.

If you work for a nonprofit that uses GeoGiving, we are the controller of your account information — we decide what we collect to run the service and are directly answerable to you for it.

If you donated to a nonprofit or bought a ticket, we are a processor acting on that organization’s instructions. You have a relationship with them, not with us. We do not decide what to do with your information, we do not use it for our own purposes, and requests about it are best made to the organization you gave to — though you may contact us and we will pass it on and assist.

Account information for the people who use the software: name, email address, the organizations they belong to and their role in each, and a record of administrative actions they take — who invited whom, who published what, who changed a setting. That record exists so an organization can see what happened in its own account.

Donor and attendee information, on behalf of the organization: name, email address, the amount and date of a payment, what it was for, and — for an event — the names of the people attending. A supporter who runs a peer-to-peer page also has the page they created and the text they wrote on it.

Card details: never. Payment details are entered directly with Stripe. They do not pass through, and are not stored on, GeoGiving’s systems. We receive only a reference to the payment and its amount, currency and status.

To run the service: show an organization its own campaigns, donations, events and supporters; send transactional messages such as sign-in and receipt-related mail; and keep the records an organization needs for its own accounting and reporting.

We do not sell personal information. We do not share it with other organizations on the platform — the separation between organizations is enforced by the database itself, not only by the application. We do not use donor information to market anything of our own.

Stripe, which processes payments and performs its own identity and fraud checks, under its own privacy policy.

Supabase, which hosts the database, and Vercel, which hosts the application. Both act as our infrastructure providers and process data on our instructions.

[ To be completed as they are added: the transactional email provider, and any analytics. Nothing should appear here that is not actually in use, and nothing should be in use that is not listed here. ]

Donation and ticket records are financial records and are retained for as long as the organization needs them, which is generally governed by its own reporting and tax obligations rather than by us. We do not delete an organization’s records because it stopped paying for an optional subscription.

[ To be settled with counsel: specific retention periods, and what happens to records when an organization closes its account. ]

If you work for an organization using GeoGiving, you can see and correct your account information in the product, and export your organization’s data at any time.

If you are a donor, contact the organization you gave to — they control their donor records and can act on a request directly. If that is not practical, write to us and we will help.

Depending on where you live you may have rights to access, correct, delete or object to the handling of your information. [ To be completed with counsel: the specific rights and the response process, which depend on where GeoGiving operates and solicits. ]

GeoGiving is not directed at children and we do not knowingly collect information from them. Where an organization uploads photographs of children, it is responsible for holding permission to use them.

Prism AI Apps LLC — admin@geogiving.com