Privacy Policy for RunPledge.com
Effective Date: December 23, 2025
Last Updated: September 23, 2026
At RunPledge.com ("we," "us," or "our"), we respect your privacy. This Privacy Policy explains how we collect, use, and protect personal information through our Platform. We rely on third-party providers to operate the Platform, including Stripe for payment processing, Supabase for data storage, Vercel for hosting, Cloudflare for network services, and Postmark for email delivery. We comply with PCI DSS via Stripe, GDPR, CCPA, and other laws.
1. Data We Collect
• Account Data: Organization details, EIN, proof uploads.
• Participant Data: From CSV uploads or pledges: names, emails, phones (may include minors' info via parents).
• Donor Data: Name, email address, and donation details when you give through the Platform. If you make a donation to a campaign generally, rather than to a specific participant, that exceeds $199, we share your name and email address with the receiving organization so it can recognize your support, unless you choose to give anonymously. The donation form tells you this before you pay.
• Usage Data: IP addresses, device info, cookies for analytics.
• Payment Data: Handled by Stripe, we don't store card details.
2. How We Use Your Information
We use collected data for the following purposes:
• To Provide Services: Process pledges and donations, send email communications, generate participant leaderboards, and fulfill the fundraiser experience.
• Compliance and Verification: Verify nonprofit status and ensure donations meet platform requirements.
• Platform Improvements: Analyze anonymized usage data to improve our services.
• Marketing: With your consent, send updates about RunPledge features or related services. You may opt out at any time.
For minors' data: We require parental consent for collection/use. Parents can access/delete via request.
3. Data Sharing
We share only with processors that help us run the Platform: Stripe (payments), Supabase (data storage), Vercel (hosting), Cloudflare (network services), Postmark (email delivery), and Peacock Powder (invoices). We also share a donor's name and email address with the receiving organization for campaign-level donations over $199, as described in Section 1. No selling data. May share for legal reasons (e.g., subpoenas).
4. Data Storage and Security
Data stored securely on U.S.-based infrastructure operated by Supabase, Vercel and Stripe. We use encryption and access controls. Retention: As needed for services, then deleted (up to 7 years for tax records).
5. Your Rights
• Access, correct, or delete data: Email privacy@runpledge.com.
• Opt-out: From marketing or cookies.
• GDPR/CCPA: Consent-based processing; request exports/deletions.
• Cookies: We use essential and analytics cookies, manage via browser settings.
6. Children's Privacy
RunPledge provides fundraising services for schools and organizations that may involve minor children as participants. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).
What we collect: Participant information (such as first name, last name, grade, and teacher/group) is uploaded by authorized school or organization administrators, not collected directly from children. Parent contact information (email, phone) is collected to facilitate pledge communications.
Parental consent: By uploading participant rosters, the school or organization administrator represents that they have obtained appropriate parental consent for the collection and use of participant information for fundraising purposes. RunPledge relies on schools and organizations to obtain this consent as part of their standard enrollment or event permission processes.
How we use children's data: Participant information is used solely to generate unique pledge pages, track fundraising progress, and display leaderboards. We do not use children's information for marketing, behavioral advertising, or any purpose unrelated to the fundraiser.
Parental rights: Parents may request to view, correct, or delete their child's information by contacting their school or organization administrator, or by emailing us directly at privacy@runpledge.com. We will respond to verified requests within 30 days.
Data retention: Participant data is retained only for the duration of the fundraising campaign and a reasonable period thereafter for reporting purposes, then deleted. We do not retain children's data indefinitely.
7. Changes to Policy
We may update, check back. Continued use means acceptance.
Contact: privacy@runpledge.com
