Privacy Policy

FRM ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fundraising relationship management platform.

1. Information We Collect

1.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, phone number, organization details
• Donor Information: Names, contact details, donation history, relationship notes
• Payment Information: Billing details, payment method information (processed securely by Stripe)
• Communication Data: Messages, notes, and interactions with donors
• Campaign Data: Fundraising campaign details and performance metrics

1.2 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage Data: How you interact with our platform, features used, time spent
• Device Information: Browser type, operating system, IP address
• Log Data: Access times, pages viewed, error logs
• Cookies and Similar Technologies: To enhance your experience and analyze usage

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our fundraising management services
• Process payments and manage subscriptions
• Send SMS notifications and communications (with your consent)
• Provide AI-powered assistance and communication tools
• Improve our services and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations
• Provide customer support

3. Third-Party Services and Data Sharing

We use several third-party services to provide our platform. Here's how your data is shared:

3.1 Supabase

Purpose: Database management, authentication, and data storage

Data Shared: All user data, donor information, and platform data

Privacy Policy: https://supabase.com/privacy

3.2 Google Gemini

Purpose: AI-powered communication assistance and content generation

Data Shared: Communication content, donor information for context

Privacy Policy: https://policies.google.com/privacy

3.3 OpenAI (ChatGPT)

Purpose: AI-powered features and communication assistance

Data Shared: Communication content and context for AI processing

Privacy Policy: https://openai.com/privacy

3.4 Twilio

Purpose: SMS messaging and phone verification services

Data Shared: Phone numbers, SMS content, verification codes

Privacy Policy: https://www.twilio.com/legal/privacy

3.5 Stripe

Purpose: Payment processing and subscription management

Data Shared: Payment information, billing details, subscription data

Privacy Policy: https://stripe.com/privacy

4. SMS Communications and Consent

When you provide your phone number and consent to SMS communications:

• We use Twilio to send SMS messages for verification and notifications
• Messages are only sent in response to your interactions with Navi (our AI assistant)
• You can opt out at any time by texting "STOP" to the number from which you receive messages
• Message and data rates may apply as determined by your mobile carrier

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure data centers and infrastructure
• Employee training on data protection

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a machine-readable format
• Opt-out: Unsubscribe from communications or withdraw consent
• Restriction: Request limitation of data processing

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze how you use our platform
• Provide personalized content and features
• Ensure security and prevent fraud

You can control cookie settings through your browser preferences.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices in our application

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, and the right to request deletion of your personal information.

13. GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

14. Contact Us

15. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. We will provide information about the nature of the breach, the data affected, and steps you can take to protect yourself.