Privacy Policy

1. Introduction and Scope

Pageraise ("Pageraise," "we," "our," or "us") operates an online fundraising platform accessible at pageraise.com and any associated applications, APIs, or services (collectively, the "Platform"). This Privacy Policy describes how Pageraise collects, uses, discloses, retains, and protects personal information from users ("you," "your," or "User") — including both creators who establish fundraise pages ("Creators") and individuals who make contributions through the Platform ("Contributors") — who access or use the Platform anywhere in the world.

This Privacy Policy is incorporated into and subject to the Pageraise Terms of Use. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection and use of your information as described herein. If you do not agree, you must discontinue use of the Platform immediately.

Pageraise is operated from and subject to the laws of the State of New York, United States. Where applicable, we comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Children's Online Privacy Protection Act (COPPA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the United Kingdom UK GDPR, Brazil's Lei Geral de Proteção de Dados (LGPD), Australia's Privacy Act 1988, and other applicable international data protection frameworks.

Payment processing on the Platform is facilitated by Stripe, Inc. and its affiliates ("Stripe"). Stripe operates as an independent data controller with respect to financial and payment information you provide directly to Stripe in connection with Stripe Connect onboarding and payment processing. Stripe's collection and use of such information is governed by Stripe's own Privacy Policy, which is available at stripe.com/privacy. We encourage you to review Stripe's Privacy Policy carefully.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you register, use, or communicate with us through the Platform, including:

• Account Registration Data: display name, username, email address, password (stored in cryptographically hashed form), date of birth, and any optional profile information such as biography, profile photograph, website URL, and country.
• Fundraise Page Content: fundraise titles, descriptions, goal amounts, cover images, categories, and all other content you upload or publish in connection with a fundraise page you create.
• Contribution Data: amount contributed, optional donor message, tip amount, and whether a contribution is attributed to a named or anonymous donor, as selected by you at checkout.
• Creator Financial Onboarding Data: information you submit during Stripe Connect onboarding, which is collected and processed by Stripe on our behalf and subject to Stripe's Privacy Policy. This may include legal name, date of birth, address, tax identification information, and bank account details.
• Communications: messages, feedback, support inquiries, dispute submissions, appeal requests, or other communications you send directly to Pageraise.
• Identity Verification Materials: government-issued documentation or other materials voluntarily submitted in connection with a verification or dispute resolution process.

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information, including:

• Log Data: IP address, browser type and version, operating system, device type, device identifiers, referring URLs, pages visited, time and date of access, and session duration.
• Usage Data: features you interact with, fundraise pages you view, search queries, contribution flows you initiate or complete, and navigation patterns.
• Transaction Metadata: timestamps, transaction identifiers, payout events, and webhook event data received from Stripe in connection with payment processing and payouts.
• Performance Data: error logs, crash reports, latency data, and other diagnostic information used to maintain and improve the Platform.
• Cookie and Tracking Data: information collected through cookies, session tokens, local storage, and similar technologies as described in Section 6.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Stripe: webhook event data, account status updates, capability confirmations, payout status, and payment outcome notifications transmitted by Stripe to the Platform in connection with payment processing and Stripe Connect.
• Authentication Providers: if you register or log in using a supported third-party authentication service, we receive basic profile information from that provider as permitted by your settings with that provider.
• Analytics Partners: aggregate and de-identified analytics data from third-party analytics providers.
• Report Information: information provided by other Users who report fundraise pages, contributions, or accounts for policy violations.

2.4 Sensitive Information

We do not intentionally collect sensitive personal information such as Social Security numbers (except as processed by Stripe directly for tax and identity verification purposes), racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data through the Platform itself. Do not submit such information on the Platform outside of official Stripe-hosted onboarding flows. If we inadvertently receive sensitive information, we will delete it promptly.

Bank account and payment card information is collected directly by Stripe through Stripe-hosted interfaces and is not stored on Pageraise servers. Pageraise receives only tokenized references and masked identifiers from Stripe.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operation: to create and maintain your account, authenticate your identity, deliver and display fundraise pages, process contributions, facilitate Creator payouts through Stripe, and provide technical support.
• Payment and Payout Facilitation: to initiate, track, and record contributions and payouts; to communicate with Stripe regarding payment processing; and to maintain transaction records as required by law.
• Safety and Security: to detect, investigate, and prevent fraud, abuse, fundraise misrepresentation, unauthorized use, policy violations, illegal activity, and threats to the safety of Users or the public.
• Content Moderation: to review reported fundraise pages and accounts, enforce our Platform Guidelines, and administer enforcement actions including content removal, suspension, or termination.
• Legal and Tax Compliance: to comply with applicable laws, regulations, court orders, subpoenas, legal process, and lawful requests from governmental authorities, including applicable tax reporting obligations related to Creator payouts.
• Product Improvement: to analyze usage patterns, diagnose technical issues, conduct research, and develop new features and services.
• Communications: to send transactional messages (e.g., email verification, password reset, security alerts, contribution confirmations, payout notifications, policy update notices) and, where lawful, promotional communications.
• Dispute Resolution: to investigate and resolve complaints, disputes, chargebacks, and legal claims.
• Aggregate Analytics: to generate de-identified, aggregated statistical data for internal business intelligence and reporting.

We do not sell your personal information to third parties for monetary compensation. We do not use your personal information to serve third-party behavioral advertising on the Platform.

4. Legal Bases for Processing (GDPR and UK GDPR)

For Users in the European Economic Area (EEA), the United Kingdom, and other jurisdictions that require a legal basis for processing, we process your personal data under the following lawful bases:

• Contractual Necessity: processing required to perform our contract with you (the Terms of Use), including providing the Platform and its features, processing contributions, and facilitating Creator payouts.
• Legitimate Interests: processing necessary for our legitimate interests in operating a safe, secure, and functional fundraising platform; preventing fraud and fundraise misrepresentation; improving our services; and communicating with Users, where those interests are not overridden by your fundamental rights.
• Legal Obligation: processing required to comply with applicable laws and legal process, including financial recordkeeping, tax reporting, and anti-money laundering obligations.
• Consent: where we process data based on your consent (e.g., optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Share Your Information

5.1 Public Information

By default, your username, display name, profile photograph, biography, and any fundraise pages you publish are publicly visible on the Platform to all Users and, unless you configure your settings otherwise, to the general internet including search engines. Contribution amounts and donor display names are visible to the Creator of the fundraise page and, where you have not selected anonymous contribution, may be visible on the fundraise page itself.

5.2 Stripe

We share information with Stripe, Inc. as necessary to facilitate payment processing, Creator onboarding, and payouts through the Stripe Connect platform. This includes Creator account identifiers, transaction data, and webhook event processing. Stripe's handling of such data is governed by the Stripe Privacy Policy. By using the payment and payout features of the Platform, you agree to Stripe's collection and use of data as described in Stripe's Privacy Policy.

5.3 Service Providers

We engage trusted third-party service providers to assist in operating the Platform. These providers process your information solely on our behalf and under binding data processing agreements, including:

• Cloud infrastructure and hosting providers.
• Database and storage service providers.
• Media storage and content delivery networks (CDNs).
• Email delivery and transactional messaging services.
• Analytics and performance monitoring services.
• Customer support tooling.
• Security and anti-fraud services.

5.4 Legal Requirements and Protection of Rights

We may disclose your information without notice if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or valid legal process including subpoenas, court orders, or government requests; (b) protect the rights, property, or safety of Pageraise, our Users, or the public; (c) detect, prevent, or address fraud, fundraise misrepresentation, chargebacks, money laundering, security issues, or technical problems; or (d) enforce our Terms of Use or Platform Guidelines.

5.5 Business Transfers

If Pageraise is involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, or similar corporate transaction, your information may be transferred as part of that transaction. We will notify you via prominent notice on the Platform or by email prior to your information becoming subject to a materially different privacy policy.

5.6 With Your Consent

We may share your information with third parties when you have provided explicit consent to do so.

5.7 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, or business purposes.

6. Cookies and Tracking Technologies

We use cookies, local storage, session tokens, and similar technologies to operate and improve the Platform. The types we use include:

• Strictly Necessary: authentication tokens and session identifiers required to keep you logged in and protect your account. These cannot be disabled without breaking core functionality.
• Functional: preferences you set such as theme (light/dark mode) and interface state.
• Analytics: aggregate usage data to understand how Users interact with the Platform. We use de-identified analytics only.
• Security: tokens used to detect and prevent fraudulent activity and unauthorized access.

Most web browsers allow you to control cookies through browser settings. Disabling certain cookies may impair the functionality of the Platform. Where required by law, we will seek your consent before placing non-essential cookies.

7. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Platform, comply with legal obligations, resolve disputes, enforce agreements, and pursue legitimate business purposes.

Financial transaction records, payout records, and tax-related information are retained for a minimum of seven (7) years from the date of the relevant transaction, or longer if required by applicable law, regardless of account status.

If you delete your account, we will delete or anonymize your personal information within ninety (90) days, except that we may retain: (a) de-identified or aggregated data that cannot identify you; (b) information required to comply with legal obligations, including tax, accounting, financial recordkeeping, and anti-money laundering requirements; (c) information necessary to resolve open disputes, investigate policy violations, process pending chargebacks, or fulfill pending legal holds; and (d) archived backup copies for a commercially reasonable period not to exceed ninety (90) days after deletion.

8. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, and destruction. These measures include encrypted data transmission (TLS 1.2 or higher), encrypted data storage, role-based access controls, multi-factor authentication requirements for internal systems, and regular security assessments.

Payment card and bank account data is handled exclusively by Stripe and is subject to Stripe's PCI-DSS compliance program. Pageraise does not store payment card numbers or bank account numbers on its own servers.

No method of transmission over the internet or method of electronic storage is one hundred percent (100%) secure. We cannot guarantee absolute security. In the event of a data breach that requires notification under applicable law, we will notify affected Users and relevant authorities as required.

9. International Data Transfers

Pageraise is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States and potentially other jurisdictions where our service providers operate. Data protection laws in these jurisdictions may differ from those in your country of residence.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement (IDTA), or other lawful transfer mechanisms as applicable. You may request a copy of the applicable transfer mechanisms by contacting us at the address in Section 15.

By using the Platform, you expressly consent to the transfer of your information to the United States and other jurisdictions as described in this Section, subject to the safeguards described herein.

10. Your Privacy Rights and Choices

10.1 All Users

Regardless of your location, you may:

• Access and update your account information through your account settings at any time.
• Delete your account through your account settings, subject to the retention provisions in Section 7.
• Opt out of non-essential communications by following the unsubscribe instructions in any marketing email or by updating your notification preferences.
• Request information about the personal data we hold about you by contacting us.

10.2 EEA, UK, and Switzerland Users (GDPR / UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under applicable data protection law, subject to certain legal limitations:

• Right of Access: to obtain confirmation of whether we process your personal data and to receive a copy.
• Right to Rectification: to have inaccurate or incomplete personal data corrected.
• Right to Erasure ("Right to be Forgotten"): to request deletion of your personal data under certain circumstances, subject to our legal retention obligations including financial recordkeeping.
• Right to Restriction of Processing: to request that we limit processing of your data in certain circumstances.
• Right to Data Portability: to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: to withdraw previously given consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: to lodge a complaint with your local supervisory authority. In the EU, this is your national data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

10.3 California Residents (CCPA / CPRA)

California residents have the following rights under the CCPA/CPRA:

• Right to Know: to request disclosure of the categories and specific pieces of personal information we have collected, the sources, business purposes, and third parties with whom we share it.
• Right to Delete: to request deletion of personal information we hold about you, subject to legal exceptions including financial recordkeeping obligations.
• Right to Correct: to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: we do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: we do not process sensitive personal information beyond what is reasonably necessary to provide the Platform.
• Right to Non-Discrimination: we will not discriminate against you for exercising your California privacy rights.

To exercise your California rights, contact us using the information in Section 15. We will verify your identity before fulfilling requests. You may designate an authorized agent to submit requests on your behalf.

10.4 Other Jurisdictions

Users in Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act 1988), and other jurisdictions with applicable privacy laws may have additional rights. We will honor requests consistent with applicable law. Contact us using the information in Section 15.

11. Children's Privacy (COPPA)

The Platform is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. Users must be at least 13 years of age to register for and use the Platform. Financial features, including Creator onboarding and contribution checkout, are available only to Users who are 18 years of age or older, or the age of majority in their jurisdiction, whichever is greater.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information promptly and terminate the associated account. If you believe that a child under 13 may have provided us with personal information, please contact us immediately at hello@pageraise.com.

12. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to third-party services, and we are not responsible for the privacy practices of those services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform, including Stripe's Privacy Policy at stripe.com/privacy.

13. Do Not Track

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no universal standard for how platforms should respond to DNT signals, the Platform does not currently alter its data collection practices in response to DNT signals. We will revisit this policy as industry standards develop.

14. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by posting the revised policy on the Platform with an updated effective date and, where required by law or where we deem appropriate, by sending you an email or prominent in-Platform notice at least thirty (30) days before the changes take effect. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Pageraise — Privacy & Legal
New York, New York, United States
Email: hello@pageraise.com

EEA and UK Users may also contact our Data Protection Representative or lodge a complaint with their local supervisory authority. We will respond to verifiable requests within the timeframes required by applicable law (typically thirty (30) days, with an extension of up to sixty (60) additional days where permitted).