Privacy Policy

AltruNova ("we", "us") provides donation technology to nonprofits. It is not itself a charity.

Nonprofits use AltruNova to accept donations by card, bank account, cryptocurrency and stock, to manage their donors and funds, and to send donors receipts. This policy applies to:

• the AltruNova charity portal, used by nonprofit staff;
• donation pages and donation widgets that nonprofits publish using AltruNova, including a widget embedded on a nonprofit's own website;
• this website; and
• the email and text messages described in section 4.

When you donate, the nonprofit you give to also receives information about your gift and uses it under its own privacy policy. A nonprofit's own website, where our widget may be embedded, is governed by that nonprofit's policy, not this one.

Nonprofit staff and organizations

• Account details: name, work email address, password, profile photo, and the organization and role you belong to.
• Organization details: the organization's name, legal name, EIN, address, website, mission, logo, contact email and phone number.
• Verification: to confirm who you are and that you represent the organization, we use Plaid's identity verification; the documents you provide go to Plaid and are not stored by AltruNova. If an organization is verified manually, we collect its legal name, EIN, address and web domain, the applicant's name, title and business email, and its IRS determination letter.
• Payouts: the bank account the organization is paid into is entered in Stripe's onboarding form. To set up the organization's payout account, we pass Stripe the details Stripe requires about the person representing the organization, which can include name, date of birth, address and Social Security number.
• Team members: the name, work email address and role of colleagues an administrator invites.
• Content you upload: logos, images, text and colors for donation pages, and the name, title, photo and signature of the representative shown on donation receipts.

Donors

• Every donation: amount, frequency, the program or campaign you chose, your mobile phone number, which we confirm by sending a one-time code by text message, and whether you asked for your name not to be shown publicly.
• Card and bank donations: first and last name, email address and billing address. Card and bank details are entered directly into fields provided by our payment processor, Stripe, including when you pay with Apple Pay or Google Pay; we do not receive or store full card numbers. If you save a payment method, we keep a reference to it with its brand or bank name, last four digits and expiry date.
• Cryptocurrency donations: name, email address, the wallet address you give from or connect, and the details of the transaction, such as the network and transaction hash.
• Stock donations: stock donations are made through a brokerage account opened in your name, which requires an AltruNova donor account and the information brokerage regulations require: name, email address, date of birth, citizenship, Social Security number, home address, answers to the required declarations (for example, whether you work for a broker-dealer, are a director, officer or 10% shareholder of a public company, or hold or are related to someone who holds a senior public office) and any letter you upload for them, identity verification through Plaid, and details of the brokerage account and shares you are transferring.

Everyone

• Enquiries: anything you send us when you contact us.
• Technical information: IP address, browser and device type, and the pages requested, recorded in server logs to run and secure the service.

We use personal information to:

• process donations and deliver them to the nonprofit you chose;
• send donation receipts and the other messages described in section 4;
• create and secure accounts, including verification codes and password resets;
• verify nonprofits, their representatives and stock donors where the law or our partners require it, and prevent fraud and abuse;
• open and operate the brokerage account a stock donation is made through;
• give nonprofits the records and reports they need to manage donations and meet their obligations;
• answer your questions and provide support; and
• comply with legal, tax and regulatory requirements.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We use Social Security numbers and other sensitive information only to provide the service you asked for and to meet legal requirements.

AltruNova sends transactional email only: messages that someone triggered by creating an account, being invited by their organization, making a donation, resetting a password or contacting us. We do not send marketing email or newsletters, and we never buy, rent or share email lists.

We send text messages only to deliver the one-time codes that confirm a donor's phone number.

Our Email policy lists every message we send, how we get the addresses we send to, how to stop receiving email from us, and how we handle bounced messages and spam complaints.

We share personal information only as needed to provide the service:

• The nonprofit you donate to: receives your name, email address, phone number, city and state, the details of your donations, and the payment method type and last four digits, so it can acknowledge your gift and keep its records. It never sees your Social Security number.
• Service providers: that process information on our behalf, under contracts that limit how they may use it: Amazon Web Services (hosting and email delivery), Stripe (card and bank payments and nonprofit payouts), Plaid (identity verification and account connections), an SMS provider (verification codes), Apex Clearing (the brokerage account and share transfer for stock donations) and WalletConnect (connecting cryptocurrency wallets).
• Legal and safety: when required by law, legal process or a regulator, or to protect the rights, property or safety of AltruNova, our users or the public.
• Business transfers: if AltruNova is involved in a merger, acquisition or sale of assets, subject to the protections in this policy.

When our donation widget is embedded on a nonprofit's website, that website is told that a donation was made, but not who made it or how they paid.

Card and bank payment fields and the nonprofit payout onboarding form are provided by Stripe. Identity verification and brokerage account connections are provided by Plaid. Cryptocurrency wallet connections are provided by WalletConnect and the wallet you choose. When you use those parts of the service, those providers collect information directly from you, and may set their own cookies for security and fraud prevention, under their own privacy policies. Stock donors also accept Apex Clearing's customer agreement and privacy notice.

No other third party collects information about you through the service, and we do not allow advertising networks to track you across it.

We do not use advertising cookies or third-party analytics. To keep you signed in, and to keep a donation in progress if you reload the page, we store sign-in tokens and form details in your browser's local and session storage. A stock donation in progress can be saved in your browser for up to 30 days so you can finish it. Signing out clears this information. The payment and verification providers named in section 6 may set their own cookies.

We keep personal information for as long as your account is active or as needed to provide the service. Donation and receipt records are kept for as long as tax, accounting, brokerage and anti-fraud obligations require, because donors and nonprofits rely on them for years after a gift. When information is no longer needed, we delete or de-identify it.

Information is encrypted in transit. Social Security numbers, brokerage account numbers and passwords are encrypted in your browser before they are sent. We store information with Amazon Web Services. Access to personal information is limited to the people and systems that need it. No method of transmission or storage is completely secure; if a breach affects your information, we will notify you as the law requires. Our Security page has more detail.

You can review and update your account information by signing in. You can also ask us to:

• tell you what personal information we hold about you and how we use it;
• correct information that is inaccurate;
• delete your information, except where we must keep it (for example, donation records needed for tax purposes); and
• stop sending you email, as described in our Email policy.

Residents of California and other states with comprehensive privacy laws have these rights by law, along with the right to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. We do not sell or share personal information, and we use sensitive personal information only to provide the service. We will not discriminate against you for exercising any of these rights.

To make a request, email info@altrunova.com. You may also ask someone to make a request for you, as your authorized agent. We will verify the request before acting on it and respond within the time the law requires. If your request concerns a donation, we may also refer it to the nonprofit that received the gift.

Some browsers send a "Do Not Track" signal. There is no common standard for responding to it, so the service does not change its behavior when it receives one. We do not track you across other websites, and we do not allow third parties to do so through the service.

The service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

AltruNova is provided for nonprofits and donors in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

We may update this policy as the service changes. The date at the top shows when it last changed. If we make a material change, we will tell account holders by email or with a notice in the service before it takes effect.

Questions about this policy or your information: info@altrunova.com. See also our Terms of Service.