Privacy Policy

Last Updated: June 28, 2026

1. Introduction

OpportunityToServe ("we," "our," or "us") provides this Privacy Policy to explain how we collect, use, and disclose information about you when you interact with our platform, including when you create an account, post a campaign, make a donation, or otherwise use our services (collectively, the "Services").

By using any part of the Services, you acknowledge that you have read and understood how we collect, use, and disclose information about you as described in this Policy. Please read it carefully before using the Services.

This Policy does not cover the privacy practices of campaign organizers or beneficiaries on our platform. We are not responsible for their handling of your information, which may be subject to their own privacy practices.

2. Our Platform is Public

Campaign pages, donation activity (unless you choose to donate anonymously), and any content you post on publicly accessible areas of the Services are visible to anyone — including visitors without an account and search engines such as Google.

Information you choose to share publicly is not afforded the same legal protections that apply to non-public personal data under certain privacy laws. Please consider what personal details you include in publicly available content before posting.

3. Information We Collect

We collect information in three ways:

A. Information You Provide Directly

  • Account & Profile Information: Your name, email address, phone number, zip code, country, profile photo, and any other information you provide when you register or update your profile.
  • Campaign Information: A campaign title, description, images, goal amount, location, and category when you create a campaign or need.
  • Financial Information: Payment details (e.g., credit card number, card brand, expiration date) when you make a donation. We do not store full card numbers. All payment processing is handled by our third-party payment processors (see Section 5).
  • Communications: Any messages, comments, feedback, or support requests you send to us or other users through the Services.

B. Information Collected Automatically

  • Device & Usage Data: Your IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and other interaction data when you access the Services.
  • Cookies & Similar Technologies: We use cookies and similar tracking technologies to operate the Services, remember your preferences, and analyze usage patterns. See Section 7 for details.
  • Location Data: We use your IP address to infer a general location (city, state, country) for purposes such as suggesting relevant campaigns and optimizing your experience.

C. Information from Third Parties

  • Social Sign-In: If you log in via Google or another third-party service, we receive basic profile information (name, email, profile photo) that you have authorized that service to share with us.
  • Payment Processors: Our payment processors provide us with transaction confirmation data, including partial payment method details, to verify and record donations.

4. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and provide the Services.
  • Process donations and other financial transactions.
  • Send you transactional emails (donation confirmations, receipts, account notifications).
  • Send you marketing and campaign update emails, where you have consented or opted in.
  • Detect and prevent fraud, abuse, and unauthorized activity.
  • Monitor and analyze usage trends to improve the Services.
  • Respond to your questions, requests, and support inquiries.
  • Comply with applicable laws and legal obligations.
  • Enforce our Terms of Service and other policies.

5. Disclosure of Your Information

We do not sell your personal information. We may share it in the following limited circumstances:

A. Payment Processors

We use Braintree (a PayPal service) to process card, Venmo, and Google Pay donations, and PayPal for additional payment options. These processors receive your payment and billing information directly and operate under their own privacy policies:

B. Campaign Organizers & Beneficiaries

When you donate to a campaign, we share your name, email address, donation amount, and transaction date with the campaign organizer so they can send a thank-you message, provide a receipt, and administer the campaign. If you donate anonymously, your name will appear as "Anonymous" on the public campaign page, but the organizer and our platform administrators will still be able to see your donation details for fraud prevention, legal compliance, and administrative purposes.

C. Service Providers

We share information with vendors that help us operate the Services, including email delivery (Resend), database hosting, analytics, and customer support. These vendors are contractually prohibited from using your information for any purpose other than providing services to us.

D. Legal Requirements

We may disclose your information to courts, law enforcement, government authorities, or other parties if required by law, subpoena, or court order, or if we believe disclosure is reasonably necessary to protect our rights, your safety, or the safety of others.

E. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change via the email address on your account or by a prominent notice on the Services before your information is transferred or becomes subject to a different privacy policy.

F. Public Activity

If you make a donation or take other actions on a public campaign page without choosing to remain anonymous, your name and the action may be visible to other users of the Services.

6. Anonymous Donations

When making a donation, you may choose to not display your name or profile publicly on the campaign page. If you select this option, your donation will appear as "Anonymous" in the public activity feed and your profile will not be linked to the donation on the public page.

However, anonymous donations are limited to the public-facing activity feed only. Your name, email address, donation amount, and other details will still be visible to OpportunityToServe staff, the campaign organizer, their team members, and the beneficiary for administrative, fraud prevention, tax reporting, and legal compliance purposes, and will otherwise be processed in accordance with this Policy.

7. Cookies & Analytics

We use cookies and similar technologies to operate the Services, remember your session and preferences, and understand how users interact with our platform.

  • Essential Cookies: Required for the Services to function (e.g., session authentication). These cannot be turned off.
  • Analytics Cookies: We use Google Analytics (with IP anonymization) to understand how visitors use the site. This helps us improve the Services. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
  • Advertising Cookies: We may use Google Ads conversion tracking on certain pages to measure the effectiveness of our advertising. This does not involve selling your personal information.

You can control cookies through your browser settings. Disabling non-essential cookies may affect some functionality of the Services.

8. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use the Services or submit any personal information through the Services.

If you are the parent or guardian of a child and believe your child has provided us with personal information, please contact us at privacy@opportunitytoserve.org and we will promptly delete that information.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services, comply with our legal obligations (including tax and financial record-keeping requirements), resolve disputes, and enforce our agreements.

Donation transaction records may be retained for a minimum of seven (7) years to comply with applicable tax and financial regulations, even after an account is deleted. When we no longer need your information, we will securely delete or anonymize it.

10. Security of Your Information

We use administrative, technical, and physical security measures — including encrypted connections (HTTPS), access controls, and secure third-party payment processing — to protect your personal information. While we take reasonable steps to secure your data, no security system is impenetrable, and we cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed.

In the event of a data breach that affects your rights or freedoms, we will notify affected users as required by applicable law.

11. Links to Other Websites

The Services may contain links to third-party websites not operated by us. This Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit. We have no control over and assume no responsibility for the content, privacy practices, or conduct of any third-party sites.

12. Your Privacy Rights

Depending on your location, you may have the following rights with respect to your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we update or correct inaccurate information.
  • Deletion: Request that we delete your personal information, subject to certain legal retention requirements (e.g., transaction records).
  • Portability: Request that we provide your personal information in a portable, commonly used format.
  • Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email we send, or by contacting us directly. Opting out of marketing does not affect transactional emails (e.g., donation confirmations and receipts).
  • Account Termination: You may request deletion of your account by contacting us. Note that donation transaction records required for legal or tax compliance may be retained after account deletion.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to correct it, the right to opt out of its sale or sharing, and the right not to be discriminated against for exercising these rights. We do not sell your personal information as defined under the California Consumer Privacy Act.

To submit a data access, deletion, or correction request, please email privacy@opportunitytoserve.org with the subject line "Privacy Request" and include your name and the email address associated with your account. We will respond within 45 days as required by applicable law.

Other U.S. State Residents

Residents of Colorado, Virginia, Connecticut, Texas, Oregon, and other states with enacted consumer privacy laws have similar rights to access, correct, delete, and port their personal information. To exercise these rights, contact us using the information in Section 14 below.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Policy on this page with a revised "Last Updated" date, and, where appropriate, by sending you an email notification. We encourage you to review this Policy periodically.

Your continued use of the Services after any update constitutes your acknowledgment of the revised Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Team:

For data subject requests (access, deletion, correction), please use the subject line "Privacy Request" and include your full name and account email address so we can verify your identity and locate your information.