Privacy Policy

What we store

To issue receipts we store the donor and donation details you enter (names, addresses, amounts, dates), your organization’s details, and the receipt PDFs. Passwords are stored only as salted hashes; session tokens are stored hashed.

How it’s isolated

Each organization’s donors and receipts are private to that organization. The shared directory is read-only reference data and never exposes one charity’s private donors to another. Offline device caches are encrypted and wiped on sign-out or device revocation.

Who it’s shared with

We use Cloudflare (hosting/database/storage) and Resend (email delivery) as processors. We do not sell donor data. Receipts you email are sent through Resend to the address you specify.

Retention & your rights

Issued receipts are retained to meet CRA record-keeping expectations. You can export or request deletion of your organization’s data by contacting us; donors may contact the issuing charity to update or remove their information.

Contact

Privacy questions: privacy@s9systems.com.