Privacy Policy

We collect information provided when you create an account, set up an organization profile, or manage donors, campaigns, or communications. This may include:

• Name, email address, and phone number
• Organization details
• Donor records entered into the platform
• Notes, tags, and segmentation data

When donations are made through the platform, payment information is collected and processed by third-party payment processors. We may receive limited transaction details (e.g., amount, date, status), but we do not store full payment card information.

We may automatically collect:

• IP address and approximate location
• Device and browser type
• Usage data (pages viewed, features used, interactions)
• Session and log data

If you send emails, messages, or communications through Cronac Give, we may store and process message content, recipient information, and delivery and engagement data such as opens and clicks.

When a donor or supporter submits information through a donation form or campaign page created by an organization using Cronac Give, that information is collected by the organization as the data controller and processed by Cronac Software on the organization's behalf as a service provider. Cronac Software does not use donor-submitted information for its own marketing purposes. Donors seeking to understand how their information is used should review the privacy policy of the specific nonprofit organization with whom they are interacting.

We use information to:

• Provide and operate the platform
• Process donations and track fundraising activity
• Enable organizations to manage donor relationships
• Deliver communications and notifications
• Provide reporting and analytics
• Improve platform performance and features
• Detect, prevent, and respond to fraud or abuse
• Comply with legal and regulatory obligations

Cronac Give and the organizations using the platform play distinct roles in relation to personal data:

• Organizations using Cronac Give own and control their donor and campaign data
• With respect to donor and constituent data managed within the platform, organizations act as the data controller — they determine the purposes and means of processing
• Cronac Give acts as a data processor and service provider, processing that data solely on the organization's instructions and in accordance with these policies
• With respect to platform account data (user accounts, billing records) and anonymized usage analytics, Cronac Software acts as the data controller
• Donors provide information to the nonprofit organization, not directly to Cronac Software in most cases

For organizations subject to GDPR or equivalent data protection frameworks, these Terms and this Privacy Policy together constitute the data processing arrangement between Cronac Software as processor and the organization as controller. Organizations requiring a formal Data Processing Agreement may contact legal@cronacsoftware.com.

Information may be processed and stored in the United States or other jurisdictions where our service providers operate.

Third-party vendors who help us operate the platform, including payment processors, email delivery providers, and analytics and monitoring services.

We maintain a list or categories of subprocessors used to operate the platform and will provide this information upon request.

Information submitted through donation forms or campaigns is shared with the relevant nonprofit organization.

We may disclose information if required to comply with applicable laws, respond to lawful requests, or protect rights, safety, or security.

In the event of a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

We retain information as long as necessary to provide services, as required by the organizations using the platform, and as needed for legal, accounting, or compliance purposes. Organizations are responsible for determining retention policies for their donor data.

Upon termination or expiration of an organization's account, donor and campaign data is retained for 60 days to allow for export, after which it is permanently deleted except where retention is required by applicable law. See Section 11 of the Terms of Service for additional detail on data following account termination.

Cronac Software may derive aggregate, anonymized, or de-identified data from information processed through the platform. Examples include sector-level fundraising benchmarks, platform usage statistics, and feature performance analytics. This data:

• Does not identify any individual, donor, or organization
• May be used by Cronac Software for product improvement, research, reporting, and marketing
• Is not subject to the personal data rights described in Section 8

Cronac Software will not attempt to re-identify any individual from aggregate or de-identified data.

We implement reasonable technical and organizational safeguards to protect information, including:

• Encryption of data in transit using TLS and at rest where applicable
• Access controls and role-based permissions
• Monitoring, logging, and anomaly detection

Payment card information is processed and stored by our third-party payment processors. Cronac Give does not store full cardholder data.

In the event of a security incident affecting personal information, we will notify affected organizations and, where required by applicable law, affected individuals and relevant regulatory authorities within the timeframes required by law. No system can be guaranteed completely secure.

Depending on your location, you may have the right to:

• Access or request a copy of your data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Receive your data in a portable, machine-readable format

If you are a resident of one of the following states, you have additional rights under applicable law:

California (CCPA/CPRA): Right to know what personal information is collected, used, and shared; right to delete; right to correct; right to opt out of the sale or sharing of personal information; right to limit use of sensitive personal information; right to non-discrimination for exercising your rights.

Virginia, Colorado, Connecticut, and Texas: Right to access, correct, delete, and obtain a copy of personal information; right to opt out of targeted advertising and the sale of personal information; right to appeal our decisions regarding your rights requests within a reasonable period.

To submit a rights request, contact us at legal@cronacsoftware.com. We will respond within the timeframe required by applicable law (typically 45 days, with one possible extension). Donors should typically direct requests to the nonprofit organization they interacted with; we will refer requests to the appropriate controller where we are acting solely as a processor.

We use cookies and similar technologies. These fall into the following categories:

Strictly Necessary: Required for the platform to function. These include session cookies, authentication tokens, and security cookies. They cannot be disabled without affecting core functionality.

Functional: Enable enhanced features and personalization, such as remembered preferences and saved settings.

Analytics: Help us understand how the platform is used, including pages visited and features accessed. This data is aggregated and used to improve the platform.

Third-Party: Some third-party services integrated with Cronac Give — such as payment processors — may set their own cookies governed by the respective third party's privacy policy.

You can control and disable cookies through your browser settings. Disabling strictly necessary cookies may impair core platform functionality.

Cronac Give integrates with third-party services such as payment processors and communication tools. Their privacy policies govern their handling of your information.

The platform is not intended for children under 13, and we do not knowingly collect personal information from children.

We may update this Privacy Policy periodically. Updates will be posted with a revised effective date. Continued use of the platform after changes are posted constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or how your information is handled, please reach out to our team.