Privacy policy
Last updated: August 2026
We collect the smallest amount of information we need to accept your donation, get you a receipt, and show you where your gift landed. This page is the whole story — no small-print dark patterns, no data-broker relationships, no marketing sold anywhere.
What we collect
When you donate, we store the fields you enter at checkout: your name, email, donation amount, cause, and any dedication message. If you complete payment, Stripe returns a payment identifier which we keep alongside the donation for reconciliation.
When you sign up for an account we additionally store an authentication record (email + hashed password) so you can log in and see your donations, sponsorships, and preferences later.
Guests give without an account. Their donation record is keyed by an unguessable single-use token; there's no persistent identity beyond the email.
How we use it
To process the payment (via Stripe), send your receipt (via Resend / your email provider), keep you updated on delivery through the tracker, and — with your consent — send transactional SMS updates about your order and/or marketing email.
Operational aggregates (how much a program raised, how many families were reached) go on internal reports. We never publish anything that identifies an individual donor without explicit permission.
Mobile numbers & text messages
Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. No exceptions. We do not have data-broker relationships, we do not participate in ad networks, and we do not co-register consent with other organizations.
If you opt in on the checkout page, we send you transactional order status updates only: order confirmation, allocation to a delivery batch, out for delivery, and delivery completion with proof photos. We do not send promotional or marketing text messages under this program.
Message frequency: approximately 1–5 messages per order over its lifecycle.
Reply STOP at any time to opt out — you will receive no further messages. Reply HELP for support contact. Msg & data rates may apply. You can also manage preferences at any time from your account under Notifications.
Text-message data (your phone number, your consent record, the messages we've sent you) is used only to serve you, and shared only with the SMS delivery vendor (Telnyx) as needed to actually deliver messages. It is never sold, rented, or shared for third-party marketing.
Payment data
Card details are handled by Stripe. We never see or store card numbers, CVCs, or expirations. Stripe returns a transaction identifier which we store for reconciliation and, when the same donor gives again from an account, for showing donation history.
How long we keep it
Donation records are retained as long as required for accounting, tax, and receipting purposes. Marketing consent records are retained for two years after the last opt-in signal or until you opt out. If you delete your account, transactional records tied to your donations are kept for compliance but stripped of the account association where the law permits.
Your choices
You can see all data we have about you from your account settings. You can update or remove marketing preferences at /account/notifications. To request a full export or deletion, email hello@aminrelief.org — we respond within 30 days.
Changes to this policy
If we materially change how we handle data, we'll update this page and note the change at the top with a new "last updated" date. Non-material changes (formatting, clarifying wording) don't get a bump.
Questions
Write us at hello@aminrelief.org. A human replies.