GiftDrive Privacy Policy

1.1. Information You Provide Directly to Us:

• Account Registration Data: When you create an account, we collect your name, email address, password (hashed), and potentially phone number.
• Page Creator Profile Data: If you register as a Page Creator, we collect additional information such as your organization's name, official registration details (e.g., EIN/Tax ID, 501(c)(3) status documentation), physical address, contact person's name and email, mission statement, and verification documents as required for eligibility. For individual Page Creators, this may include personal identification details to verify need.
• Donation Information: When you act as a Donor, we collect your name, email address, billing address, and payment information. Note that GiftDrive does not directly store full payment card details; these are securely transmitted to our Payment Processor (Rye Pay).
• Requested Item Details: Page Creators provide descriptions, images, quantities, and other specifications for the physical items they need.
• Communications: Records of your correspondence with us (e.g., support inquiries, feedback, bug reports) and communications with other users through the Service.
• User Content: Any content you upload, post, or submit to the Service, including comments, reviews, or other interactive features.

1.2. Information We Collect Automatically:

• Usage Data: Information about how you access and use the Service, such as the pages you visit, the features you use, the time and date of your visit, the time spent on those pages, and other diagnostic data.
• Device Data: Information about the device you use to access the Service, including your Internet Protocol (IP) address, browser type, operating system, unique device identifiers, mobile network information, and referrer URLs.
• Location Data: Depending on your device settings, we may collect general location information (e.g., inferred from IP address) to provide localized content or features.

1.3. Information from Third Parties:

• Payment Processor (Rye Pay): We receive transaction confirmations and limited payment data (e.g., last four digits of card, transaction ID) from Rye Pay to confirm successful payments and manage transactions, but not full payment card details.
• Verification Services: We may receive information from third-party services used to verify the legitimacy of Page Creators or users.
• Analytics Providers: We receive aggregated and anonymized data from analytics providers regarding user behavior on the Service.

2.1. To Provide and Maintain the Service:

To operate, manage, and facilitate the core functions of the GiftDrive platform, including displaying item needs, processing transactions, and connecting Donors with Page Creators.

2.2. To Process Transactions:

To facilitate the purchase of Requested Items by Donors. This involves transmitting necessary payment details to our Payment Processor (Rye Pay) and order fulfillment details (Donor name, Page Creator's shipping address, item specifics) to our Fulfillment Partner.

2.3. To Verify and Validate Page Creators:

To ensure the legitimacy and eligibility of organizations and individuals displaying needs on the platform, fostering trust and preventing fraud.

2.4. To Personalize User Experience:

To tailor content, features, and recommendations based on your preferences and interactions with the Service.

2.5. To Communicate with You:

• To send transactional emails (e.g., account confirmations, password resets, order confirmations, shipping updates).
• To respond to your inquiries, provide customer support, and address technical issues.
• To send you updates, newsletters, and promotional materials about GiftDrive or related initiatives, where you have opted to receive such communications.

2.6. For Analytics and Service Improvement:

To monitor and analyze usage patterns, diagnose technical problems, conduct research, and develop new features to enhance the functionality and user experience of the Service.

2.7. For Security and Fraud Prevention:

To protect the integrity and security of the Service, detect and prevent fraudulent activities, unauthorized access, and other malicious conduct.

2.8. To Comply with Legal Obligations:

To meet our legal, regulatory, and compliance requirements, including responding to lawful requests from government or law enforcement agencies.

3.1. With Page Creators and Donors:

• For Donors: Your name (and optionally, your email, if you consent or it's necessary for fulfillment communication) and details of your donation will be shared with the Page Creator to whom you've donated.
• For Page Creators: Your public profile information, including your organization's name, mission, and requested items, will be visible to Donors and other users on the Service. Necessary contact and shipping details will be shared with Fulfillment Partners.

3.2. With Service Providers:

We engage trusted third-party service providers to perform functions on our behalf and to assist us in operating the Service. These include:

• Payment Processor (Rye Pay): Your payment information is securely shared with Rye Pay for the purpose of processing transactions. GiftDrive does not directly process or store your full payment card details.
• Fulfillment Partner: Necessary order details, including the Page Creator's shipping address and the Donor's name, are shared with our Fulfillment Partner(s) to facilitate the packing and shipment of Requested Items.
• Hosting, cloud storage, analytics, customer support, email delivery, and identity verification services.

These service providers are obligated to protect your information and use it only for the purposes for which it was disclosed.

3.3. For Legal Reasons:

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (i) comply with a legal obligation; (ii) protect and defend the rights or property of GiftDrive; (iii) prevent or investigate possible wrongdoing in connection with the Service; (iv) protect the personal safety of Users of the Service or the public; or (v) protect against legal liability.

3.4. Business Transfers:

In the event that GiftDrive is involved in a merger, acquisition, asset sale, or other corporate transaction, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

3.5. With Your Consent:

We may share your information with third parties when we have your explicit consent to do so.

3.6. Aggregated or Anonymized Data:

We may share aggregated or anonymized data that does not directly identify you for research, analytics, marketing, or other business purposes.

6.1. Right to Access:

You have the right to request access to the personal information we hold about you.

6.2. Right to Rectification:

You have the right to request correction of inaccurate or incomplete personal information we hold about you.

6.3. Right to Erasure ("Right to be Forgotten"):

You have the right to request the deletion of your personal information, subject to certain legal exceptions (e.g., necessity for legal compliance, fraud prevention).

6.4. Right to Restrict Processing:

You have the right to request that we limit the way we use your personal information.

6.5. Right to Data Portability:

You have the right to receive your personal information in a structured, commonly used, and machine-readable format.

6.6. Right to Object:

You have the right to object to the processing of your personal information for certain purposes, such as direct marketing.

6.7. Right to Withdraw Consent:

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Cookies: Small data files stored on your device that enable us to recognize your browser and capture certain information.

Web Beacons (or pixels): Small electronic files that permit GiftDrive to count users who have visited certain pages or opened emails.