Privacy Policy

Last updated: August 23, 2026

Plondo Foundation ("we," "our," or "us") is a 501(c)(3) public charity (EIN 81-3596129) that operates plondofoundation.org (the "Site"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. We value your privacy and collect as little personal information as we reasonably need to operate the Foundation.

1. Information we collect

Information you provide

Donation details: name, email, billing address, and the amount and frequency of your donation. Card numbers are entered directly into Stripe's secure fields and are never stored on our servers.
Account details (optional): email, password (stored only as a one-way bcrypt hash), name, and — if you choose to verify it — your mobile phone number.
Messages: if you email us or submit a form, we receive the content you send.

Information collected automatically

Basic access logs: IP address, user-agent, request path, response status, and timing — used for security and debugging, retained for a short rolling window.
Session cookie: if you sign in, we set an httpOnly session cookie so we can recognize you between pages.

We do not use third-party advertising cookies or cross-site tracking pixels on this Site.

2. How we use information

To process donations and issue receipts.
To administer recurring (monthly) giving and your donor account.
To send transactional emails (receipts, cancellations, password resets).
To communicate about the Foundation's work if you opt in.
To prevent fraud, abuse, and security incidents.
To comply with legal obligations and, if applicable, IRS reporting rules.

3. Service providers

We share limited information with vetted providers who process data on our behalf: Stripe, Inc. (payment processing), Twilio Inc. (SMS one-time codes for optional phone verification), and our hosting & database infrastructure. These providers are contractually required to protect your data and use it only to perform the services we request.

4. Donor privacy

We do not sell, rent, or trade donor information. We may publish anonymized impact figures, but individual donors are never identified without written consent, except where required by law.

5. Security

We use reasonable administrative, technical, and physical safeguards: TLS in transit, hashed passwords, scoped database credentials, and least-privilege access. No transmission or storage is ever perfectly secure; in the unlikely event of a breach affecting your data, we will notify you and the appropriate authorities as required by law.

6. Data retention

Donation records: retained as required by tax and accounting law (generally 7 years).
Account records: retained while active, plus a reasonable wind-down period after deletion.
Server access logs: a short rolling window (typically 30–90 days).

7. Your choices

Access & correction: view and edit your profile from your account page.
Cancel recurring giving: cancel a monthly donation anytime from your account or by emailing us.
Delete your account: email [email protected] and we will delete your account record (legal donation records may be retained for tax purposes).
Opt out of mailings: any broadcast email includes an unsubscribe link.

8. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

9. Changes

We may update this Policy from time to time. The "Last updated" date reflects the most recent revision.

10. Contact

Questions, requests, or complaints? Email [email protected].