GiveCircuit global privacy policy
Privacy across the GiveCircuit platform.
This policy explains GiveCircuit’s platform-wide handling of account and service information. Each participating organization publishes a separate notice for the drive information it controls.
Scope
This policy applies to GiveCircuit accounts, authentication, security records, and platform features. Organization-specific registration details are also governed by the selected organization’s notice.
Information processed
GiveCircuit processes account names and email addresses, authentication credentials stored as salted hashes, session and security records, and information people submit to their chosen organization.
How information is used
Information is used to operate accounts, secure the service, route registrations to the organization a person selects, provide participant portals, and enable authorized organization administrators to coordinate their work.
Organization separation
Every registration belongs to one selected organization. Organization administrators can access only the records, volunteers, inventory, policies, and exports assigned to their organization.
Sharing and public information
Public profiles show organization-supplied descriptions, locations, dates, status, goals, and aggregate activity. GiveCircuit does not publish recipient identities, household details, volunteer contact information, or private admin records.
Security and retention
Passwords are stored as salted PBKDF2 hashes, sessions expire, sign-in attempts are rate limited, and administrative actions are logged. Organizations choose retention periods for their drive records; platform security records may follow a separate operational retention period.
Payments and donations
Stripe processes the one-time $49 organization onboarding payment to GiveCircuit. GiveCircuit does not receive, hold, route, or take a fee from donations made to participating organizations. Money-donation buttons open an external link supplied and controlled by that organization. Goods pledges are shared only with the selected organization for donation coordination.
Your choices
You choose the organization before registering. Contact that organization through its profile privacy notice for drive-record access, correction, or deletion requests.
Sensitive information
Do not submit medical diagnoses, Social Security or government ID numbers, banking or payment-card details, account passwords, or other highly sensitive information through GiveCircuit.
Organization notices
Visit the organization directory, open an organization’s GiveCircuit profile, and follow its privacy-notice link for its terms and contact information.