Privacy policy

1. Information we collect

Account information. When you create an account we collect your name and email address. If you sign in with Google, we receive your name, email address, and profile identifier from Google.

Contribution information. When you contribute toward an invoice we collect your email address, the amount, and optionally your name and a short message to the family.

Contribution page information. If you create a contribution page we collect the page title, the person or family it is for, the invoice or estimate amount, any description you write, any photograph you upload, and the business you select.

Business information. If you register a business we collect the business name, contact name, email address, telephone number, website, address, category, and any message you send.

Technical information. Our hosting and infrastructure providers log IP addresses, browser type, and request data for security and reliability. We use cookies only to keep you signed in and to remember whether you have entered the pre launch password. We do not use advertising or cross site tracking cookies.

Payment card details. We never collect, see, or store payment card numbers. Card details are entered directly into our payment processor and are handled only by them.

2. How we use it

• · To create and operate contribution pages
• · To process contributions toward a business invoice
• · To send receipts, settlement notices, and service messages
• · To ask a business to confirm an invoice before payments open
• · To verify businesses and maintain the verified directory
• · To keep records we are required by law to keep
• · To protect the platform against fraud and misuse

We do not sell personal information. We do not share it for advertising purposes.

3. Who we disclose it to

We disclose personal information only to service providers who process it on our behalf, and only to the extent needed to deliver the service:

• Payment processing. Stripe Payments Canada, Ltd. and its affiliates process contributions and receive the payment details you enter. Funds settle directly to the business, not to VeriGiving.
• Hosting. Vercel Inc. hosts the website and processes request data.
• Database, authentication, and file storage. Supabase Inc. stores account records, contribution records, and uploaded images.
• Email delivery. Resend, Inc. delivers receipts and service emails on our behalf.
• Optional writing assistance. If you choose to use the assisted drafting feature when writing a contribution page, the text you have written is sent to a third party language model provider to produce a draft. Do not enter information you do not wish to send. The feature is entirely optional and the page can be written without it.

We may also disclose personal information where required by law, for example in response to a lawful order, or to a regulator exercising lawful authority.

Some of these providers operate outside Canada, including in the United States. Personal information processed by them may be stored or accessed in those countries and may be subject to the laws of those jurisdictions.

4. How it is disclosed

Personal information is transmitted to these providers over encrypted connections using their application programming interfaces, at the time the relevant action occurs. For example, an email address is sent to our email provider at the moment a receipt is generated. We do not transfer bulk files of personal information to third parties.

5. How we protect it

• · All traffic to and from the site is encrypted in transit using TLS
• · Data at rest is encrypted by our database and storage provider
• · Payment card details never reach our systems
• · Administrative access requires a password and a time based one time code
• · Privileged database credentials are held only on the server and are never exposed to browsers
• · Access to personal information is limited to those who need it to operate the service

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take these measures seriously and review them as the platform grows.

6. How long we keep it

We keep personal information for as long as needed to provide the service and to meet our legal and record keeping obligations, including those that apply to financial records. When information is no longer needed for those purposes we delete it or render it anonymous.

7. Your rights

You may ask us to confirm what personal information we hold about you, to provide you with a copy, to correct it if it is inaccurate, or to delete it where we are not required to retain it. You may withdraw consent to optional uses at any time, subject to legal and contractual restrictions and reasonable notice.

Email j@jaydev.ai and we will respond within thirty days. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada.

8. Children

The service is not directed at children and we do not knowingly collect personal information from anyone under the age of majority in their province or territory.

9. Changes

We may update this policy as the platform develops. The effective date above shows when it was last revised. Material changes will be communicated to account holders by email.

10. Contact

Questions about this policy or about how we handle personal information can be sent to our privacy contact at j@jaydev.ai.