How Fundpaign handles information

1. Information we collect

Accounts and identity

Fundpaign processes information such as name, email address, password hash, account role and status, email-verification state, profile settings, and authentication timestamps. Verification and password-reset flows use generated tokens; the application stores token hashes and expiration or use records rather than the plain token after submission.

Campaigns and organizers

We process campaign titles, categories, summaries, stories, goals, beneficiaries, locations, dates, organizer details, images, updates, prize descriptions and values, eligibility terms, official rules, ticket packages, drawing information, review status, and moderation history.

Supporters, buyers, and transactions

Depending on the activity, we process contributor or buyer name, email, anonymous-display preference, campaign and package selections, amounts, fee and organizer-proceeds calculations, public references, payment status, refunds or disputes, timestamps, and provider identifiers. Raffle records may include order items, allocated entry numbers, entry status, eligible-entry snapshots, winner records, and drawing audit events.

Stripe connection information

For organizers, we store connected Stripe account identifiers and synchronized connection, payment, and payout status needed to provide payment features. Fundpaign does not store raw payment card numbers or card security codes. Stripe collects and processes payment credentials through Stripe-hosted or embedded payment components.

Technical and security information

Fundpaign uses session cookies needed for login, security, and preferences. Server and application logs may record IP address, browser or device information made available in requests, requested route, timestamps, security events, rate-limit activity, errors, and hashed identifiers used for operational diagnostics. We do not describe or claim advertising tracking that the current service does not use.

2. How information is used

We use information to create and secure accounts; verify email and reset passwords; create, review, publish, and administer campaigns; connect organizers to Stripe; process and reconcile payments; allocate raffle entries; conduct and verify secure drawings; present results; communicate service information; provide support; prevent fraud and abuse; enforce policies; maintain audit and accounting records; comply with legal obligations; and diagnose or improve reliability and security.

Where law requires a particular legal basis, the basis may include performing the service requested, legitimate interests in operating and protecting the platform, compliance with legal obligations, or consent where specifically requested. Applicable bases and regional notices require counsel review before broader international launch.

3. When information is shared

Information may be shared with service providers that perform functions for Fundpaign, most notably Stripe for payment processing, connected accounts, fraud controls, disputes, and payouts. We may also disclose information to hosting, infrastructure, communications, security, or professional-service providers when configured and necessary to operate the service.

Campaign content and selected organizer information are public when a campaign is public. Public raffle results may show the stored winner display name, winning entry number, and prize; private payment credentials and unnecessary buyer information are not part of that presentation.

We may disclose information when reasonably necessary to comply with law or legal process, protect people or the platform, investigate fraud or serious policy abuse, enforce agreements, or support a business reorganization subject to appropriate protections. We do not state that Fundpaign sells personal information or uses it for behavioral advertising because those practices are not part of the current application.

4. Retention and security

Information is retained for as long as reasonably necessary for the purposes described above. Account and ordinary campaign data may follow different periods from payment, refund, dispute, raffle drawing, winner, audit, security, tax, or legal records, which may need to be preserved after a campaign ends or an account closes. Exact production retention schedules and jurisdiction-specific requirements must be finalized.

Fundpaign uses measures such as password hashing, session protections, authorization checks, CSRF protections, server-side payment-status synchronization, upload validation, rate limiting, and restricted executable uploads. No internet service can guarantee absolute security. Contact us promptly if you suspect unauthorized access.

5. Your choices and rights

You may update available account settings and choose whether a supported contribution is displayed anonymously. You may contact Fundpaign to ask about access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Availability depends on applicable law, identity verification, and records Fundpaign must retain for financial, raffle, fraud-prevention, legal, or security purposes.

Children and minors

Fundpaign is not intended for children to operate independently. Organizers must satisfy applicable age requirements, and raffle organizers must define and enforce lawful participant eligibility. If you believe a child has provided information contrary to applicable requirements, contact us.

International users

If you access Fundpaign from another country, information may be processed where Fundpaign and its providers operate. Cross-border disclosures, transfer mechanisms, and regional supplements must be assessed before expansion into additional jurisdictions.

Changes and contact

We may update this policy as the service changes. We will update the date above and provide additional notice for material changes where appropriate. Privacy questions or requests may be sent to support@fundpaign.com.