Privacy Policy — Fondasyon

This Privacy Policy explains how Fondasyon ("we," "us," or "our") collects, uses, and shares information about you when you use our website and donation platform (the "Services").

1. Information We Collect

Information you provide

Account details: name, email, password, optional bio, location, and avatar.
Project submissions: title, description, location, funding goal, and images.
Donation details: amount, optional message, and whether the donation is anonymous.
Communications with our team.

Information collected automatically

Device and browser information, IP address, and basic usage data.
Cookies and similar technologies used to keep you signed in and remember preferences.

Information from third parties

Payment information processed by Stripe (we do not store full card numbers).
If you sign in with Google, basic profile information returned by Google.

2. How We Use Information

To operate the Services, process donations, and send receipts.
To vet projects and protect against fraud, abuse, and illegal activity.
To send progress updates, transactional emails, and important account notices.
To improve and secure the Services.
To comply with legal obligations.

3. How We Share Information

We do not sell your personal information. We share information with:

Service providers who help us operate the platform (hosting, database, email, payments).
Project organizers — they may see your name and message unless you donate anonymously.
Authorities when required by law or to protect rights, safety, or property.

4. Public Information

If you organize a project that is approved, your display name and project content become publicly visible. Donor names appear publicly only when you choose not to donate anonymously.

5. Data Retention

We retain account and donation records for as long as your account is active and as needed to meet legal, tax, and accounting requirements. You may request deletion of your account at any time.

6. Your Rights

Depending on where you live, you may have the right to:

Access, correct, or delete your personal information.
Object to or restrict certain processing.
Request a copy of your data in a portable format.
Withdraw consent at any time.

To exercise these rights, contact us at privacy@notify.www.realizedinsight.com.

7. Security

We use industry-standard safeguards including encryption in transit, role-based access control, and row-level security on our database. No system is completely secure; please use a strong, unique password and notify us of any suspected breach.

8. Children

The Services are not directed to children under 13 (or 16 in the EEA/UK), and we do not knowingly collect their personal information.

9. International Transfers

Your information may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

10. Third-Party Services

Payments are processed by Stripe under Stripe's Privacy Policy. Email is delivered by Resend. Our backend and authentication are powered by Lovable Cloud.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or email.

12. Contact

Questions about this Privacy Policy? Contact privacy@notify.www.realizedinsight.com.