Privacy Policy

Last updated: December 2025

December 2025 changes

• Clarified billing metadata we receive from Polar.sh (subscription status, billing period, and discount)
• Added link to Polar's Privacy Policy in payment provider section
• Added Cloudflare for fraud and abuse prevention

This explains how Charity Record collects, uses, and protects your information. Charity Record is owned and operated by Infoportfolio LLC, a New Hampshire limited liability company, and this policy applies only to the Charity Record donation-tracking service at charityrecord.com (including its apps and APIs); it does not cover any other Infoportfolio LLC websites or services. Use of the service is also governed by our Terms of Service.

What We Collect

How We Use Your Data

• • Run the service: Store and organize your donations
• • Generate exports: Create files for tax software
• • Send notifications: Account emails, password resets, two-factor authentication (2FA) setup emails and security changes, responses to your inquiries, and important service announcements (for example, pricing changes or policy updates). These transactional notices go out even if you opt out of marketing so we can inform you about your account.
• • Send product updates and promotional offers: Tax season reminders, upgrade notifications, new features, and special offers. We will only send marketing emails if you opt in during registration or via your account settings. You can unsubscribe at any time via the link in any email. Transactional emails (account notifications, security alerts, billing reminders) cannot be disabled.
• • Improve the product: Anonymized or aggregated usage analytics
• • Provide support & ensure safety: When you contact us, when we investigate errors (Sentry), and when we monitor for abuse, fraud, or illegal content. We reserve the right to remove data that violates our Terms (for example, CSAM or malware) and report it to authorities.

Who We Share With

We never sell your data. We only share it with service providers to keep Charity Record running, or with a new owner if Charity Record is bought, and the data stays under this policy:

We may disclose your information if required by law, to comply with valid court orders or government requests, to protect our rights, or to prevent harm. If Charity Record is involved in a merger, acquisition, or asset sale, we will provide notice before your personal information is transferred to a different owner whenever legally permitted; some transactions (for example government orders that include non-disclosure requirements) may restrict our ability to notify you.

Security & Retention

We use HTTPS encryption, secure password hashing, backups, and rate limiting. You can also enable two-factor authentication (2FA) on your account using an authenticator app or email verification. No system is 100% secure, but we take reasonable precautions.

In the event of a data breach affecting your personal information, we will notify you via email within 72 hours of discovering the breach and outline the steps we're taking to address it.

Your data stays active as long as your account exists. Delete your account anytime – free account deletion is immediate, paid accounts have a 30-day grace period. We will permanently remove deleted accounts within 30 days, except where we must retain limited records for legal, security, or billing purposes (for example, transaction records for tax compliance). For abuse prevention, we retain a one-way hash of deleted email addresses for up to one year.

Your Rights

Access, export, correct, or delete your data anytime. Unsubscribe from marketing emails with one click. If you are a U.S. resident, your rights may vary by state (for example, California users have CCPA/CPRA rights). Contact us to exercise your rights, and we typically respond within 30 days.

State Privacy Rights (California)

Other Details