Privacy Policy

1. What We Collect

We collect the minimum information necessary to operate the platform:

Account and identity information:

• Name and email address, handled via Clerk authentication
• Identity verification information (legal name, date of birth, address, government-issued ID, and tax identification number) submitted through Stripe's identity verification process when setting up a fundraiser to receive funds. This information is collected and stored by Stripe, not by Funeral Fundraiser directly.

Fundraiser content:

• Fundraiser title, story, photo, and goal amount that you create

Donation information:

• Donor names (optional — donors may give anonymously)
• Donation amounts and timestamps

Technical information:

• IP addresses, device type, browser type, and usage data collected automatically by our hosting provider (Vercel) and authentication provider (Clerk) for security and platform operation purposes

We do not collect or store payment card information. All payment processing is handled by Stripe, Inc. Please review Stripe's Privacy Policy at https://stripe.com/privacy for details on how payment and identity data is handled.

2. Identity Verification and Stripe

To receive donations through our platform, fundraiser organizers are required to complete identity verification (KYC) administered by Stripe. This process may require submission of a government-issued ID and other personal information directly to Stripe Identity. By creating a fundraiser to receive funds, you consent to Stripe's collection and processing of this information in accordance with Stripe's Privacy Policy. Funeral Fundraiser does not have access to your identity documents.

3. Authentication

Account creation and login are handled by Clerk (clerk.com). Clerk manages passwords, email verification, session tokens, and device data on our behalf. We receive only a user ID and email address from Clerk. Please review Clerk's Privacy Policy at https://clerk.com/privacy for details.

4. Data Storage and Retention

Fundraiser data, donor information, and donation records are stored in Supabase (a PostgreSQL database hosted on AWS). Fundraiser photos are stored in Supabase Storage. Both are secured with row-level access controls.

Retention periods:

• Active account data is retained for as long as your account exists
• Donation and transaction records are retained for a minimum of 7 years to comply with financial reporting and legal requirements, even after account deletion
• Identity verification records are retained by Stripe in accordance with their data retention policies

5. Public Information

Fundraiser pages are publicly accessible to anyone with the link. This includes the fundraiser title, story, photo (if provided), goal amount, and total raised. Donor names are visible on the fundraiser page unless the donor chose to give anonymously. Please be aware that information that has been publicly visible may have been viewed, shared, or cached by third parties prior to any removal request.

6. Data Sharing

We do not sell your personal data to third parties. We do not use your data for advertising purposes. We share data only with the following service providers necessary to operate the platform:

• Stripe, Inc. — payment processing and identity verification
• Clerk — authentication and session management
• Supabase — database and file storage
• Vercel — website hosting and analytics

We may also disclose your information to law enforcement, regulators, or other authorities when required by law, court order, or when we reasonably believe disclosure is necessary to investigate fraud, protect the safety of any person, or protect our legal rights.

7. Cookies and Tracking

We use cookies and similar tracking technologies for authentication, security, and platform performance. Our authentication provider (Clerk) and hosting provider (Vercel) may set cookies necessary for the platform to function. We do not use cookies for advertising or behavioral tracking. By using our platform, you consent to the use of these necessary cookies.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Know what categories of data we have collected about you

To exercise any of these rights, contact us at support@funeralfundraiser.com. Please note that donation and transaction records may be retained after deletion requests to satisfy our legal and financial reporting obligations. Identity verification data is held by Stripe and subject to Stripe's data deletion policies.

California residents may have additional rights under the California Privacy Rights Act (CPRA). To submit a California privacy request, contact us at support@funeralfundraiser.com.

9. Children's Privacy

This platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal information through our platform, please contact us immediately at support@funeralfundraiser.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised date. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact

For privacy questions or data requests, contact us at support@funeralfundraiser.com.