Effective Date: September 24, 2026
1. Overview
Aid Registry, Inc. (“Aid Registry,” “we,” “us,” or “our”) is a tax-exempt nonprofit corporation recognized under Section 501(c)(3) of the Internal Revenue Code (EIN: 42-2224867), incorporated in the State of North Carolina. We respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and platform (the “Platform”). By using the Platform, you agree to the practices described in this Policy. This Policy is incorporated into and governed by our Terms of Service.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly when you use the Platform. The specific information collected depends on how you use the Platform:
Donors
- Email address
- Name (optional, for donor recognition purposes)
- Billing address or zip code (as required by payment processors for fraud prevention)
- Donation details, including amount, date, and campaign supported
- Donation history and transaction records
Payment card information is processed directly by our third-party payment processor, Stripe. Aid Registry does not store full payment card numbers. Stripe’s privacy practices are governed by Stripe’s own Privacy Policy, available at stripe.com.
Charity Users
- Name and contact information of the authorized representative
- Organization name, address, and contact details
- Employer Identification Number (EIN) and tax-exempt status documentation
- Account credentials (password stored in hashed form; we do not store plaintext passwords)
- Campaign configuration and settings, including campaign type (evergreen or time-limited), expiration date, and selected fulfillment preferences
- Goods receipts, campaign updates, and photos submitted through the Platform
2.2 Automatically Collected Information
When you visit or use the Platform, we automatically collect certain technical information. This information is used primarily for platform security, fraud prevention, and aggregate analytics:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited, features used, and interactions with the Platform
- Referring URLs and exit pages
- Date and time of access
This information is collected in aggregate and is generally not linked to individual user identities unless required for fraud prevention or security purposes.
2.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate the Platform, analyze usage patterns, and improve performance. We use the following categories of cookies:
- Strictly Necessary Cookies — required for the Platform to function (e.g., session management, security). These cannot be disabled.
- Analytics Cookies — help us understand how visitors use the Platform so we can improve it. Data collected is aggregated and anonymized where possible.
- Functional Cookies — remember your preferences and settings to improve your experience.
We do not currently use advertising or behavioral tracking cookies. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy at aidregistry.org/cookies.
3. How We Use Information
We use the information we collect for the following purposes:
- To process and manage donations and issue tax acknowledgment letters
- To operate, maintain, and improve the Platform
- To communicate with users, including donation confirmations, campaign updates, and legal notices (see Section 4)
- To send optional marketing and fundraising communications (see Section 4)
- To verify charity eligibility and maintain the integrity of the Platform
- To prevent fraud, abuse, and unauthorized access
- To comply with applicable legal obligations, including IRS recordkeeping requirements
- To enforce our Terms of Service
We do not use personal information for automated decision-making or profiling in ways that produce legal or similarly significant effects.
4. Email Communications
4.1 Transactional Emails
By creating an account or making a donation, you will receive transactional emails, including:
- Donation confirmations and tax acknowledgment letters
- Account and security notifications
- Legal or policy update notices
Transactional emails are necessary to fulfill our obligations to you and cannot be opted out of while you maintain an account or donor relationship with Aid Registry.
4.2 Marketing and Fundraising Emails
With your consent or as otherwise permitted by applicable law, we may also send:
- Campaign updates and impact reports
- Information about new campaigns or charitable opportunities
- Fundraising communications
You may opt out of marketing and fundraising emails at any time by clicking the unsubscribe link in any such email or by contacting us at [email protected]. Opting out of marketing emails will not affect your receipt of transactional emails.
4.3 CAN-SPAM Compliance
All marketing emails comply with the U.S. CAN-SPAM Act. Each marketing email includes a clear identification of the sender, a physical mailing address, and a functioning unsubscribe mechanism. We honor opt-out requests promptly.
5. How We Share Information
Aid Registry does not sell personal information. We do not share personal information with third parties for their own marketing purposes.
We may share information in the following limited circumstances:
- Service Providers — We share information with trusted vendors who assist us in operating the Platform (e.g., Stripe for payment processing, analytics providers, email delivery services). These providers are contractually required to use your data only on Aid Registry’s behalf and in accordance with this Policy, and may not use it for their own independent purposes.
- Charities you give to — At checkout you can choose to share your name and email address with the charity you're supporting, so they can thank you and keep you informed about their work. If you choose to share, that charity receives your name, email address, and the amount and date of your gifts to it, and may contact you directly under its own privacy practices. We never share your payment details. You can choose not to share, and still donate, by unticking the box at checkout.
- Legal Compliance — We may disclose information to law enforcement, regulators, or other authorities when required by applicable law, court order, or legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of Aid Registry, our users, or others.
- Protection of Rights — We may share information to investigate, prevent, or take action regarding suspected fraud, violations of our Terms of Service, or threats to platform integrity.
- Nonprofit Succession — In the event of a dissolution, merger, or transfer of charitable assets to another tax-exempt nonprofit organization, user information may be transferred to the successor organization as a charitable asset, subject to applicable state nonprofit law. We will notify users of any such transfer as required by law.
In all cases, we share only the minimum information necessary for the stated purpose.
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
Retention periods vary depending on the type of information and applicable requirements. As a 501(c)(3) organization, we are subject to IRS recordkeeping obligations, which generally require retention of:
- Donor acknowledgment letters and contribution records — minimum of 3 years from the date of contribution, and longer where required by state fundraising registration laws
- Financial and accounting records — generally 7 years
- Employment and organizational records — as required by applicable law
Account data for charity users is retained for the duration of the active relationship and for a reasonable period thereafter to satisfy legal and audit obligations. You may request deletion of your personal information subject to the limitations described in Section 8.
7. Data Security
We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- Encryption of data in transit using TLS/HTTPS
- Tokenized payment processing through Stripe, so that Aid Registry never receives or stores full payment card data
- Access controls limiting data access to authorized personnel on a need-to-know basis
- Regular review of our security practices
However, no method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at [email protected].
8. Your Rights
Depending on your location, you may have the following rights with respect to your personal information:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate or incomplete information
- Deletion — Request deletion of your personal information, subject to our legal retention obligations
- Restriction — Request that we limit processing of your information in certain circumstances
- Opt-Out — Opt out of marketing and fundraising communications at any time (see Section 4.2)
To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request. Note that certain rights may be limited where we are required to retain data for legal, tax, or audit purposes.
9. Additional Rights for California Residents
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:
- Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business or commercial purpose, and the categories of third parties with whom we share it
- Right to Delete — Request deletion of personal information we have collected, subject to certain exceptions
- Right to Correct — Request correction of inaccurate personal information
- Right to Opt Out of Sale or Sharing — Aid Registry does not sell or share personal information as defined under California law, and has not done so in the preceding 12 months
- Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights
To submit a CCPA/CPRA request, contact us at [email protected] or by mail at the address in Section 14. We will verify your identity and respond within the timeframes required by California law (generally 45 days, with one permitted extension of an additional 45 days where reasonably necessary).
Do Not Track: California law requires us to disclose how we respond to browser Do Not Track (“DNT”) signals. At this time, Aid Registry does not respond to DNT signals, as there is no uniform standard for how such signals should be interpreted. We will revisit this position as standards develop.
10. Children’s Privacy
The Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].
Charity account registration requires the user to be at least 18 years of age or the age of majority in their jurisdiction, whichever is greater.
11. Geographic Scope
The Platform is operated in the United States and is intended for use by U.S.-based donors and U.S.-recognized tax-exempt organizations. Aid Registry does not currently register or onboard charities outside the United States.
If you access the Platform from outside the United States, please be aware that your information will be transferred to and processed in the United States. By using the Platform, you acknowledge this. Aid Registry does not take on obligations under the GDPR, UK GDPR, or similar international data protection frameworks at this time.
12. Third-Party Links
The Platform may contain links to third-party websites or services that are not operated by Aid Registry. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information. The inclusion of a link on our Platform does not constitute an endorsement of the linked site.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will post the revised Policy on this page with an updated Effective Date.
For material changes — such as a new category of data collection or a new data-sharing arrangement — we will make reasonable efforts to notify affected users by email prior to the change taking effect. Your continued use of the Platform after the updated Policy is posted constitutes your acceptance of the revised terms.
14. Governing Law
This Privacy Policy is governed by the laws of the State of North Carolina, consistent with our Terms of Service. Any disputes arising under this Policy shall be resolved in accordance with the dispute resolution provisions set forth in our Terms of Service.
15. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact:
Aid Registry, Inc. — Privacy Team
Website: aidregistry.org
EIN: 42-2224867