What we collect and why

1. Who is responsible

DeoWorks, 992 Hanson Ct. Milpitas, CA 95035, operates Projects. Questions and requests go to giving@deoworks.org.

2. What we collect

Account information

When you sign in with Google or Facebook we receive your name, email address, and profile photo from that provider, plus an identifier for your account. We never see your password.

Donations

For each card gift we keep the amount, the project, the date, the name and receipt email you entered, and Stripe's reference numbers for the payment. Your card number never reaches our servers. It is entered into a form served by Stripe and handled under Stripe's privacy policy. Stripe may also collect device and fraud-prevention signals when you pay.

Volunteer and prayer commitments

If you volunteer we keep the hours you pledged, the role you picked, and the email and phone number you gave so the organizer can reach you. If you commit to pray we keep the commitment and any note you write.

Projects

If you post a project we keep everything you enter, including payout details such as a mailing address or bank information. Payout details are visible only to you and to DeoWorks staff.

Technical data

Our hosting provider (Google Firebase) logs requests, including IP addresses and browser information, for security and debugging. We do not use analytics or advertising trackers.

3. How we use it

• To process donations, issue receipts, and pass funds on to projects.
• To let organizers coordinate with volunteers and see who has supported their project.
• To show recent supporters on a project page (name and photo only; amounts of individual gifts are shown to the organizer but not publicly).
• To review projects, prevent fraud and abuse, and meet our legal obligations as a nonprofit and as a charitable fundraising platform in California.
• To answer your questions.

We do not sell or rent personal information, and we do not use it for advertising.

4. Who sees it

• Project organizers see the name, email, and photo of everyone who supports their project, the amount of each gift, and the contact details volunteers provide. Organizers agree to use this only for the project.
• Other visitors see your name and photo next to projects you have supported, and totals for the project. They do not see individual amounts, your email, or your phone number.
• Service providers: Stripe (payments), Google Firebase (hosting, sign-in, database, file storage), and Google or Facebook (sign-in). They process data on our behalf under their own terms.
• Authorities, when the law requires it, for example the IRS or the California Attorney General.

5. Cookies

We set one cookie, a session cookie that keeps you signed in for up to 14 days. It is essential to the site and contains no tracking. Stripe sets its own cookies on its payment form for fraud prevention. We do not use third-party advertising cookies. Because we do not track visitors across other sites, we do not respond to browser "Do Not Track" signals; there is nothing to turn off.

6. How long we keep it

Donation and payout records are kept for at least seven years to meet tax and accounting requirements. Account information is kept while your account exists. Volunteer contact details are kept with the project they relate to. You can ask us to delete your account at any time; we will remove your profile and anonymize your commitments, but we must retain donation records.

7. Your choices

• You can sign out at any time, and revoke Projects's access in your Google or Facebook account settings.
• You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing giving@deoworks.org. We will respond within 45 days.
• Receipts are transactional and are sent for every card gift; we do not send marketing email.

The California Consumer Privacy Act generally does not apply to nonprofits, but we honor the requests above for everyone, and we will never discriminate against you for making one.

8. Children

Projects is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

9. Security

Data is encrypted in transit and at rest by our providers. Access to the database is limited to our own server code and to DeoWorks staff who need it. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as California law requires.

10. Changes

If we change this policy we will update the date at the top and, for material changes, note it on the site.