1. Introduction
CURaise is a fundraising platform built for student organizations at Cornell University. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform at CURaise.
2. Information We Collect
2.1 Information You Provide
- Account information: When you sign in with Google, we receive your name and email address from your Google account.
- Organization information: If you create or manage an organization, we collect the organization name, description, logo, website URL, and Instagram username.
- Fundraiser information: We collect fundraiser details such as name, description, images, and associated Venmo account information provided by organizers.
- Order information: When you place an order, we collect the items purchased, quantities, and your chosen payment method (Venmo or other).
2.2 Information Collected Automatically
- Usage data: We may collect information about how you interact with our platform, including pages visited and actions taken.
- Device information: We may collect browser type, operating system, and IP address for security and analytics purposes.
3. How We Use Your Information
- To create and manage your account
- To process and track your orders
- To send transactional emails (e.g., order confirmations, announcements) via Mailgun
- To enable referral tracking so organizers can attribute sales
- To display your name and email to organization administrators for order fulfillment and pickup coordination
- To allow organization admins to invite members and manage their organizations
- To improve and maintain the platform
4. How We Share Your Information
We do not sell your personal information. We share your information only in the following circumstances:
- Organization administrators: When you place an order, your name, email, and order details are visible to the administrators of the fundraiser's organization for fulfillment purposes.
- Service providers: We use trusted third-party services including Supabase (authentication and database infrastructure), Mailgun (email delivery), Heroku (backend hosting), and Netlify (frontend hosting). These providers process data only as necessary to provide their services.
- Legal requirements: We may disclose your information if required by law or in response to valid legal process.
5. Data Retention
We retain your account information and order history for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data by contacting us at the email address below.
6. Security
We use industry-standard security measures including JWT-based authentication through Supabase and encrypted connections (HTTPS) to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and personal data
- Opt out of non-essential communications
To exercise any of these rights, please contact us using the information in the "Contact Us" section below.
8. Third-Party Links and Services
Our platform may link to external services such as Venmo for payment processing and organization websites. We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before providing any personal information.
9. Children's Privacy
CURaise is intended for use by college students and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Your continued use of CURaise after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the CURaise team at Cornell University.