Privacy Policy

1. Who we are

Apsida Foundation (“we”, “us”, “our”) operates the crowdfunding Platform at apsidafoundation.org. We provide technology that lets approved organizations publish campaigns and receive donations through third-party payment processors. We are the controller of personal information we collect through the Platform, except where a fundraising organization or a payment processor is independently responsible for data it collects under its own policies.

2. Information we collect

Depending on how you use the Platform, we may collect:

• Account & profile data — name, email address, password (stored hashed), phone number if provided, and organization profile fields submitted by fundraisers.
• Donation & giving data — donation amount, currency, campaign identifiers, name-privacy preference, optional message, email for receipts/updates, and related timestamps. We do not store full payment card numbers or bank account credentials on our servers.
• Payment metadata — limited processor references (for example Stripe payment or Connect account identifiers), status, and fee-related metadata needed for reconciliation and support.
• Technical & usage data — IP address, browser/device type, pages viewed, referring URLs, and approximate location derived from IP where available.
• Marketing attribution — UTM parameters and similar campaign tags when you arrive from a shared link or embed.
• Support communications — messages you send via Contact Support and related ticket metadata.
• Cookies and similar technologies — as described in our Cookie Notice.

3. How we use information

• Operate, secure, and improve the Platform
• Create and administer user and organization accounts
• Facilitate donations through payment processors and display campaign progress
• Send transactional messages (receipts, verification, password reset, support)
• Send campaign update emails where you have opted in or where permitted under our campaign email terms
• Detect fraud, abuse, and security incidents
• Comply with law, enforce our Terms, and respond to lawful requests
• Produce aggregated, de-identified statistics that do not identify you

4. Payment processing — important

Online payments are processed by independent payment providers (currently Stripe, Inc. and its affiliates via Stripe Connect; other providers such as PayPal may be offered later). Card data and bank details are collected and processed by those providers under their own privacy and security practices. Apsida Foundation does not operate as a bank, money transmitter holding donor funds in custody, or intermediary wallet for campaign donations. See our Payments & Funds Disclaimer.

5. Sharing of information

We may share personal information with:

• Fundraising organizations — donor-facing information they need to acknowledge gifts, run campaigns, and meet their own recordkeeping obligations (subject to your name-privacy choices where available).
• Service providers — hosting, email delivery, analytics, security, and customer-support tools under contracts that limit use of data to providing services to us.
• Payment processors — to initiate and settle transactions and Connect onboarding.
• Legal & safety — when required by law, court order, or to protect rights, safety, and integrity of the Platform, users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.

We do not sell personal information for money. See also our California Privacy Notice regarding “sale”/“sharing” definitions under California law.

6. Retention

We retain personal information only as long as reasonably necessary for the purposes described above, including to maintain accounts, complete transactions, resolve disputes, prevent fraud, enforce agreements, and meet legal, tax, accounting, and audit requirements. Typical retention includes:

• Account data — for the life of the account, then for a limited wind-down period
• Donation and financial records — generally for at least seven (7) years or longer if required by applicable law or ongoing disputes
• Support tickets — for a reasonable period after resolution
• Security and server logs — for shorter operational periods unless needed for investigations

7. Storage, security, and deletion

We store Platform data on systems operated by us and our hosting providers. We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission or storage is 100% secure.

Deletion and account closure. You may request deletion of your personal information or closure of your account by emailing privacy@apsidafoundation.org or using Contact Support. We will honor requests as required by applicable law, subject to exceptions such as retaining records needed for legal compliance, fraud prevention, security, tax, accounting, completing pending transactions, or resolving disputes. Where we must retain data, we will limit further processing to those purposes. Aggregated or de-identified data that cannot reasonably identify you may be retained.

Fundraising organizations and payment processors may retain their own copies of information under their independent policies; we will inform you when a request must also be directed to them.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of personal information, to opt out of certain sharing, and to appeal a denial. California residents: see our California Privacy Notice. To exercise rights, contact privacy@apsidafoundation.org. We may need to verify your identity before fulfilling a request.

9. Children

The Platform is not directed to children under 13 (or under 16 where a higher age applies). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

10. International users

The Platform is operated from the United States. If you access it from another country, you understand that your information may be processed in the United States, where privacy laws may differ from those of your jurisdiction.

11. Changes

We may update this Privacy Policy from time to time. The “Effective date” above will change when we post a revision. Material changes will be highlighted on the Platform or notified by email where appropriate.

12. Contact

Privacy inquiries and deletion requests: privacy@apsidafoundation.org. General support: Contact Support on this website.