Privacy Policy

Effective: February 22, 2026

1. Introduction

This Privacy Policy explains how Unicorn Powered Company (“we”, “us”, “our”) collects, uses, and protects your information when you use Donation Retriever. This policy applies to all users of the service, including organization administrators, team members, and donors who interact with donor-facing pages. By using Donation Retriever, you consent to the practices described in this policy.

2. Information We Collect

Account Information: Name, email address, and password (stored as a cryptographic hash). If you sign in through Google or LinkedIn, we receive your name, email, and profile identifier from those services.

Organization Information: Organization name, settings, location details, and team member roles.

Donation Data: Item descriptions, quantities, conditions, estimated values, donor names, email addresses, phone numbers, mailing addresses, and any notes provided by donors or organization staff.

Usage Data: Pages visited, features used, and timestamps. This data is collected through our analytics provider to help us understand how the service is used and improve it.

Cookies: We use session cookies to maintain your authentication state. We do not use advertising cookies, tracking cookies, or third-party marketing cookies.

3. How We Use Your Information

We use the information we collect to: provide and operate the Donation Retriever service, authenticate your identity and maintain your session, send transactional communications (such as waitlist confirmations and account notifications), improve the service based on usage patterns, ensure the security and integrity of the platform, and comply with legal obligations.

4. Third-Party Services

We use the following third-party services to operate Donation Retriever. Each provider receives only the data necessary for its function:

  • Vercel — Application hosting and delivery
  • Neon — PostgreSQL database hosting (stores all application data)
  • Resend — Transactional email delivery (receives recipient email addresses and email content)
  • Tinybird — Usage analytics (receives anonymized usage events)
  • LaunchDarkly — Feature flag management (receives anonymous context identifiers)
  • Google / LinkedIn — OAuth authentication (only if you choose to sign in with these providers)

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the third-party service providers listed above, and only as necessary to operate the service. We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, safety, or property of our users or the public.

6. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where retention is required for legal or regulatory purposes. Organization administrators may delete individual donation or donor records at any time through the service.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure cloud infrastructure, access controls limiting data access to authorized personnel, and regular review of our security practices. While no system is completely immune to risk, we are committed to protecting the data entrusted to us.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Request a portable copy of your data in a machine-readable format
  • Withdraw consent for optional data processing
  • Opt out of analytics data collection

To exercise any of these rights, contact us at support@donationretriever.com. We will respond to your request within 30 days.

9. Children's Privacy

Donation Retriever is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

10. International Users

Donation Retriever is operated from the United States. If you access the service from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the service, you consent to this transfer and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or through the service. The effective date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@donationretriever.com.