Privacy

Who we are

Donafly is operated by Ely Rosenstock, an individual doing business as Donafly in East Brunswick, New Jersey ("Donafly," "we," "us"), who is responsible for the information described in this policy. This policy covers donafly.com and the emails we send. Effective date: [launch date].

What we collect

• Your account: your name, email address, and profile photo (if you sign in with Google). We don't use passwords: you sign in with Google or a code we email you.
• Your page: your page name, the causes you list, why they matter to you, and your settings.
• Donaflys: who sent them, who they were for, the amount, the note, the charities chosen, and their status.
• Invitations: the names and email addresses of people you invite, which we receive from the sender, so we can send them their invitation and up to two reminders. If an invitation goes unanswered, we delete that person's name and email within 90 days after it expires, except that we keep the email address of anyone who asks not to hear from us again, only so we can honor that request.
• The waitlist: the email address and page name you reserved.
• Charity searches and requests: when a charity search finds nothing, we save the words and state you searched for, without your name or account. If you ask us about a charity you couldn't find, we save what you told us about it and who asked, so we can contact the charity (without telling them who you are) and email you when it's ready to add.
• How the site is used: pages visited, clicks, device and browser type, your internet (IP) address, and the rough location it suggests. See "Analytics" below.

What we don't collect

Your payment details. When you pay, you're on the site of Every.org, a 501(c)(3) nonprofit and our Donation Processor. It and its payment companies handle your card, bank, PayPal or Venmo details.

What we receive from our Donation Processor

When a payment is completed, our Donation Processor sends us the amount, the amount after fees, the type of payment method, the date and a transaction reference, so we can confirm your gift. If you choose on its checkout to share your information with the fundraiser's organizer (Donafly), we also receive your name and email address, and sometimes your mailing address. If you don't, we receive only the payment details, listed under an anonymous name. We use this information only to confirm your gift, and we never receive your full card, bank or wallet details. We keep only the transaction reference, amounts, date and status, and we don't store your name, email address or mailing address from this notice.

What's public

• Your page (donafly.com/yourname) shows your name, photo, causes, why they matter to you, and the total raised. You can hide the total, and choose whether people can find you by searching, in Settings.
• On Donafly, we never show publicly how much any one person gave. People you celebrate see that you sent a Donafly and your note, not the amount.
• Each gift also has its own page on our Donation Processor's website, titled "A Donafly gift." Anyone with the link can see it. It shows the amount of that gift and the charities chosen, but not the names of the sender or the recipients, unless a donor chooses on the Donation Processor's checkout to be listed publicly.

How we use it

• To run Donafly: show your page, send Donaflys and invitations, and email you sign-in codes, activity confirmations and reminders.
• To keep Donafly safe and fix problems.
• To understand what's working and improve Donafly.
• To send occasional Donafly news, only if you leave that turned on in Settings.

We never sell or rent your information, and we don't use it for advertising. We don't allow advertising companies to collect information about your activity on Donafly.

Analytics

We use PostHog and Vercel Web Analytics to understand how people use Donafly: which pages are visited, what is clicked, and the device and browser used. We do not record your sessions. These tools use cookies or similar storage to tell visits apart. We do not respond to "Do Not Track" browser signals.

Who we share it with

Only the services that help run Donafly, and only what each one needs:

• Our Donation Processor: the donation amount and the charities, to process your gift and send your tax receipt.
• Vercel (hosting), Supabase (database) and Linode (charity search).
• Resend (sending email) and Google (if you sign in with Google).
• PostHog and Vercel (analytics).

We may also share information if the law requires it, or to protect people from fraud or harm. If Donafly is transferred to a company formed to operate it, or is merged or sold, your information will move with it and stay protected by this policy.

How we protect it

We use reasonable safeguards, such as encryption in transit and limited access to our systems, to protect your information, which is stored in the United States. No website is completely secure, so we can't guarantee security. If a security incident affects your information, we will notify you as the law requires.

Keeping and deleting it

You can delete your account anytime in Settings. That removes your page, causes, and sign-in. Records of gifts that were already paid are kept without your name, because the charities received that money and those records matter for taxes and accounting. PostHog keeps analytics data for one year and then deletes it. Vercel keeps page-view data under its own retention policy.

Your choices

• Change your page, settings and emails anytime.
• Ask for a copy of your information, or for us to correct or delete it, by emailing us at hello@donafly.com. We will respond within 45 days and may first need to confirm your identity.

Children

Donafly is only for adults 18 and older. We don't knowingly collect information from anyone under 18, and if we learn that we have, we will delete it.

Changes

If we change this policy in an important way, we'll tell you by email or on the site first and update the date at the top of this page. We won't use information we already have in a materially different way without your consent.

Contact

Questions or requests? Email hello@donafly.com.