Privacy Policy

1. Our Role

This platform is operated for school fundraising and is intended for use by adult donors. We do not knowingly collect personal information directly from children under age 13.

• Student information is used only for donation attribution and fundraiser operations.
• We do not use student data for commercial marketing activities.
• The platform is designed to support school privacy obligations, including student-data protections where applicable.

2. Information We Collect

• Donor details: name, email, phone, address, donation amount, and optional donor note.
• Student attribution inputs: search terms and student public identifiers used to credit donations.
• Technical and transaction data: Stripe references, confirmation IDs, and security/operational telemetry.

3. Student Privacy & Exact Match Logic

• No public student directory is provided.
• Public donation links are shown only after a single exact, unambiguous student match.
• Search does not provide partial-match suggestions for student discovery.
• Public pages use opaque student identifiers rather than numeric database IDs.
• When multiple family students are shown in the donation flow, non-matched students are displayed in obfuscated form.

4. Prohibited Uses

• No targeted advertising based on donor or student data.
• No student profiling for non-school or commercial purposes.
• No sale or rental of donor or student information.

5. Security & Data Protection

• Traffic is protected with HTTPS, and HSTS is enabled in production.
• Card payments are processed by Stripe Checkout; card numbers and CVC are not stored by this application.
• Administrative access is authenticated and restricted by role/permission policies.
• Stripe webhooks are signature-validated before processing.

6. How Information Is Shared

We share information only as needed to operate the fundraiser, including with service providers for payment processing, email delivery, address verification, and security/operations monitoring, and with authorities when required by law. We do not sell donor or student information.

7. Parental Rights & Public Search Opt-Out

Parents/guardians may request public-search opt-out by contacting the school office or by emailing amiller@uniongroveonline.com.

After opt-out is processed, public search will not confirm enrollment for that family; donations can still be accepted and manually associated by school administrators.

8. Data Retention

Donation and related operational records are retained as needed for fundraiser administration, accounting, tax documentation, legal compliance, and dispute resolution.