Privacy Policy

Pledgy (“we,” “us,” or “our”) operates the website at pledgy.com and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

1. Information We Collect

Information You Provide

• Account information — name, email address, phone number, and password when you create an account or make a donation as a guest.
• Organization information — school name, address, tax-exempt status, and administrator contact details when registering an organization.
• Payment information — when you make a donation, your payment card number, billing address, and related details are collected and processed directly by our payment processor, Stripe, Inc. We do not store full card numbers on our servers.
• Donation information — donation amounts, recipient campaigns or participants, and any optional messages you include.
• Communications — any messages, feedback, or support requests you send to us.

Information Collected Automatically

• Device and usage data — IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
• Cookies and similar technologies — we use cookies and local storage to maintain your session, remember preferences, and analyze usage patterns. See Section 9 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Process donations and facilitate payouts to organizations.
• Create and manage your account.
• Send transactional communications such as donation confirmations, payout notifications, campaign updates, and account alerts via email or SMS.
• Respond to your inquiries and provide customer support.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations, including tax reporting requirements.
• Analyze aggregated, de-identified usage data to improve the platform.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Payment processing— we share payment details with Stripe to process donations. Stripe's use of your data is governed by the Stripe Privacy Policy.
• Organizations — when you donate, the receiving organization can see your name, donation amount, and any message you include. Your email and payment details are not shared with organizations.
• Service providers — we use third-party providers for hosting (AWS), email delivery (AWS SES), authentication (AWS Cognito), and analytics. These providers process data on our behalf under contractual obligations to protect it.
• Legal requirements — we may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers — if Pledgy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Payment Processing and Security

All payment transactions are processed through Stripe, a PCI DSS Level 1 certified payment processor. When you enter payment information, it is transmitted directly to Stripe via their secure, encrypted connection. We receive only a tokenized reference, the last four digits of your card, and the card brand — never your full card number or CVV.

We implement industry-standard security measures including TLS encryption in transit, encrypted data at rest, and role-based access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Donation records are retained for a minimum of seven (7) years to comply with tax and financial reporting obligations. You may request deletion of your account at any time, subject to our legal retention requirements.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing of your data.
• Request a portable copy of your data.
• Withdraw consent where processing is based on consent.
• Opt out of promotional communications at any time.

To exercise any of these rights, contact us at privacy@pledgy.com. We will respond within 30 days.

7. Guest Donors

You may make a donation without creating an account. When you donate as a guest, we collect your name, email address, and payment information to process the transaction and send a donation confirmation. Guest donor data is retained in accordance with Section 5 and is subject to the same protections described in this policy.

8. SMS and Text Messages

If you provide a phone number, we may send you transactional text messages related to your donation or campaign activity (such as confirmations or status updates). Message and data rates may apply. You can opt out of SMS communications at any time by replying STOP or by contacting us. Opting out of SMS does not affect transactional emails.

9. Cookies and Tracking

We use the following types of cookies:

• Essential cookies — required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the Service so we can improve it. You can opt out of analytics cookies through your browser settings.

We do not use advertising cookies or participate in cross-site behavioral advertising networks.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. Student participation in fundraising campaigns is managed by their school organization, and students are not required to create accounts on Pledgy. If you believe we have inadvertently collected information from a child under 13, please contact us immediately so we can delete it.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date at the top of this page and, where appropriate, notify you by email or through the Service.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@pledgy.com
• Mail: Pledgy, Olathe, KS 66062