Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use our Platform, you may provide:

• Name, email address, and contact information
• Payment information (processed securely through Stripe — we never store full card numbers)
• Profile information including photos and biographical details
• Campaign content, updates, and communications

1.2 Information Collected Automatically

When you use our Platform, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• Usage data (pages visited, features used, interaction patterns)
• IP address and approximate location data

1.3 Identity Verification (KYC)

For fundraisers withdrawing funds, we may collect:

• Government-issued identification documents
• Proof of address
• Tax identification numbers
• Business registration documents (for organizational accounts)

1.4 Cookies and Tracking

We use essential cookies for authentication and session management, and optional analytics cookies to improve our Platform. You can manage cookie preferences through your browser settings.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Platform
• Process donations and manage campaigns
• Verify identities and prevent fraud
• Send transactional emails (receipts, updates, security alerts)
• Provide customer support
• Analyze usage patterns to improve user experience
• Comply with legal obligations
• Enforce our Terms of Service
• Facilitate the Ambassador referral program

3. How We Share Your Information

We may share your information with:

• Payment processors (Stripe) to process transactions
• Identity verification providers for KYC compliance
• Cloud infrastructure providers (Cloudflare) for hosting and security
• Law enforcement or government agencies when required by law or to protect our rights

We never sell your personal information to third parties for marketing purposes.

4. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between you and our Platform is encrypted using TLS/SSL
• Payment data is handled by PCI DSS-compliant processors
• We use secure, hashed password storage with modern algorithms
• Regular security audits and vulnerability assessments are conducted
• Access to personal data is restricted to authorized personnel only
• Two-factor authentication (2FA) is available for all accounts

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Opt out of non-essential data processing

To exercise these rights, contact us at privacy@shareagoal.com. We will respond within 30 days.

6. Data Retention

We retain your data for as long as necessary to:

• Maintain your account and provide our services
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain financial records as required by tax and accounting laws
• Transaction records are retained for 7 years
• KYC documents are retained for 5 years after account closure
• You may request account deletion at any time through your settings

When data is no longer needed, it is securely deleted or anonymized.

7. International Data Transfers

Our Platform is hosted on Cloudflare's global network. Your data may be processed in countries outside your country of residence. We ensure adequate protection through:

• Standard Contractual Clauses approved by relevant data protection authorities
• Data Processing Agreements with all third-party providers
• Compliance with applicable data protection frameworks
• Regular assessment of third-party data protection practices

8. Children's Privacy

Our Platform is not intended for children under 18. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal information, we will promptly delete it.

9. Third-Party Services

Our Platform integrates with third-party services that have their own privacy policies:

• Stripe (payment processing)
• Google (OAuth authentication)
• Cloudflare (hosting, CDN, security)
• Resend/Brevo (email delivery)
• Analytics providers (anonymized usage data)

We encourage you to review the privacy policies of these services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the Platform at least 30 days before they take effect. Your continued use of the Platform constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States, consistent with applicable data protection regulations in the jurisdictions where we operate.

12. Contact Us

For privacy-related questions or to exercise your data rights, contact us at:

• Email: privacy@shareagoal.com
• Website: shareagoal.com/contact