Your data stays yours.

• Account data: your name, email, and password (stored as a one-way hash — not even we can read it).
• Giving data: donation amounts, dates, the Nonprofits/NGO's you gave to, and which ones you favorited.
• Cause interests: the causes you select during onboarding to drive AI matching.
• Technical logs: minimal server logs (request timestamps and status codes) retained for 30 days for debugging and abuse prevention. We do not log IP addresses tied to donation activity.

We do not collect browsing history, location, contacts, photos, device identifiers, advertising IDs, or any sensor data.

• Match you with Nonprofits/NGO's whose missions fit your interests.
• Process your donation flow — note: we don't process donations ourselves; we redirect you to the charity's own site so they handle the transaction directly and issue your official receipt.
• Generate your personal giving log (a productivity record, NOT an official tax receipt — those come solely from the recipient charity).
• Send transactional email (receipts, password resets) — never marketing.
• Celebrate milestone donor tiers on your dashboard.

We never share your data with advertisers, data brokers, or marketing partners. The only third parties that ever touch your data are essential service providers acting strictly as processors:

• Stripe — processes your donation payment. Stripe sees your payment card (we never do) and the donation amount. Governed by Stripe's privacy policy.
• Resend — delivers your receipt and password-reset emails. Sees only your email address and the message body.
• Anthropic (Claude) — powers the AI match explanations. Sees only your selected cause interests and the candidate Nonprofit/NGO names. No account identifiers are sent.
• The Nonprofit/NGO you donate to — receives your name, email, and amount so they can issue their own thank-you/receipt, which is standard U.S. 501(c)(3) practice.

That's it. No analytics trackers, no ad networks, no affiliate pixels on the donation flow.

• Access & export: your full donation history is always viewable on your Dashboard and downloadable as a personal giving log PDF.
• Deletion: you can request full account and data deletion at any time (see contact below). Coming soon: in-app one-click deletion.
• Correction: update your name or email from your account settings.
• Unsubscribe: transactional emails (receipts) are required to document your gifts. We don't send anything else.

Passwords are hashed with bcrypt. Authentication tokens are short-lived JWTs. All traffic runs over HTTPS. Donation processing is handled by Stripe (PCI DSS Level 1). We review our dependencies and infrastructure regularly for vulnerabilities.

Privacy questions, data requests, or concerns: privacy@GIVE→ALIGN.com

We respond within 7 days.