What we collect and why

1. Who is responsible

DeoWorks, 992 Hanson Ct. Milpitas, CA 95035, operates Projects. Questions and requests go to giving@deoworks.org.

2. What we collect

Account information

When you sign in with Google we receive your name, email address, and profile photo from that provider, plus an identifier for your account. We never see your password.

Donations

For each card gift we keep the amount, the project, the date, the name and receipt email you entered, and Stripe's reference numbers for the payment. Your card number never reaches our servers. It is entered into a form served by Stripe and handled under Stripe's privacy policy. Stripe may also collect device and fraud-prevention signals when you pay.

Volunteer and prayer commitments

If you volunteer we keep the hours you pledged, the role you picked, and the email and phone number you gave so the organizer can reach you. If you commit to pray we keep the commitment and any note you write.

If you withdraw from a volunteer shift we keep the original pledge and the date you withdrew, rather than erasing it. The pledge stops counting toward the project and your spot is offered to someone else, but the organizer can still see that you had signed up and stepped away.

Projects

If you post a project we keep everything you enter, including the name and mailing address we should send checks to. We do not ask for or store bank account numbers. Payout details are visible only to you and to DeoWorks staff.

Technical data

Our hosting provider (Google Firebase) logs requests, including IP addresses and browser information, for security and debugging. We do not use analytics or advertising trackers.

3. How we use it

• To process donations, issue receipts, and pass funds on to projects.
• To let organizers coordinate with volunteers and see who has supported their project.
• To show recent supporters on a project page: your name and photo, and what you gave — the hours you pledged, or the amount of a gift. You can keep your name off that list for any single commitment; see section 7.
• To review projects, prevent fraud and abuse, and meet our legal obligations as a nonprofit and as a charitable fundraising platform in California.
• To answer your questions.

We do not sell or rent personal information, and we do not use it for advertising.

4. Who sees it

• Project organizers see the name, email, and photo of everyone who supports their project, the amount of each gift, and the contact details volunteers provide. Choosing to stay unnamed does not hide you from the organizer — they still need to know who is coming and who to thank. Organizers agree to use this only for the project.
• Other visitors see your name and photo next to projects you have supported, along with what you gave — the hours you pledged, or the amount of a gift — and the project's totals. They never see your email address or your phone number. If you choose to stay unnamed, your name and photo are replaced with "Someone" and what you gave still appears.
• Service providers: Stripe (payments), Google Firebase (hosting, sign-in, database, file storage), and Google (sign-in). They process data on our behalf under their own terms.
• Authorities, when the law requires it, for example the IRS or the California Attorney General.

5. Cookies

We set one cookie, a session cookie that keeps you signed in for up to 14 days. It is essential to the site and contains no tracking. Stripe sets its own cookies on its payment form for fraud prevention. We do not use third-party advertising cookies. Because we do not track visitors across other sites, we do not respond to browser "Do Not Track" signals; there is nothing to turn off.

6. How long we keep it

Donation and payout records are kept for at least seven years to meet tax and accounting requirements. Account information is kept while your account exists. Volunteer contact details are kept with the project they relate to, including for a shift you withdrew from. You can ask us to delete your account at any time; we will remove your profile and anonymize your commitments, but we must retain donation records.

7. Your choices

• You can sign out at any time, and revoke Projects's access in your Google account settings.
• You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing giving@deoworks.org. We will respond within 45 days.
• You can keep your name off the public project page for any single commitment — when you make it, or at any time afterwards from My commitments. This is per commitment, so you can be named on one project and unnamed on another, and you can change your mind as often as you like. It affects the public page only: the commitment still counts toward the project, the organizer still sees who you are, and a receipt still carries your name.
• If you signed up for a volunteer shift you can withdraw from it on My commitments, up until the day of the shift, which frees your spot for someone else.
• Receipts are transactional and are sent for every card gift; we do not send marketing email.

The California Consumer Privacy Act generally does not apply to nonprofits, but we honor the requests above for everyone, and we will never discriminate against you for making one.

8. Children

Projects is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

9. Security

Data is encrypted in transit and at rest by our providers. Access to the database is limited to our own server code and to DeoWorks staff who need it. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as California law requires.

10. Changes

If we change this policy we will update the date at the top and, for material changes, note it on the site.