The Giving Center · Legal

Privacy policy

Last updated 26 July 2026

Who is responsible for your data

The Giving Center is a platform used by charitable organisations to run fundraising campaigns. When you give to an organisation through this platform, that organisation holds the relationship with you and decides how to contact you. We operate the software on their behalf.

This matters practically: to correct or delete your donor record, the organisation you gave to is the right place to start. We can act on their instruction, and on yours where the law requires it.

What we collect

If you give to a campaign

• Your name and email address, if you provide them — both are optional, and gifts can be recorded without either.
• The amount, currency and time of your gift, and which campaign it was for.
• If you gave through a fundraiser’s page, which fundraiser and team to credit.
• Card details are never seen or stored by us. Payments go directly to the organisation’s own payment processor. We keep only that processor’s reference for the transaction.

If you have an account

• Your email address, and a securely hashed password — we cannot read your password.
• If you sign in with Google, the email address and basic profile Google shares. We do not receive your Google password.
• If you enable two-factor authentication, the secret needed to verify your codes.

Automatically

• An audit record of changes made inside an organisation — who changed what, and when. These records cannot be edited or deleted by anyone, including us. That is deliberate: an audit trail that can be quietly altered is not an audit trail.
• Standard server logs from our hosting and database providers.

What we do not do

• We do not sell personal data, and we do not share it for advertising.
• We do not combine your data across organisations. If you give to two organisations here, each holds a separate record and neither can see the other.
• We do not run third-party advertising or analytics trackers on donation pages.

Who can see your data

Access is enforced in the database itself, not merely hidden in the interface. Staff at the organisation you gave to can see your gift and your contact details, according to their role. Staff at other organisations cannot see you at all.

Our own support staff can enter an organisation only in a time-limited session that states a reason and is recorded in that organisation’s audit log, which they cannot erase.

Processors we rely on

• Supabase — database, authentication and email delivery for account messages.
• Vercel — application hosting.
• Each organisation’s own payment processor — handles the card transaction and receives the funds directly. The platform does not take a cut and does not sit in the money flow.

[REVIEW] Sub-processor list, data-transfer mechanisms and hosting regions need confirming with counsel before this is relied upon.

How long we keep it

Donation and receipt records are kept as long as the organisation’s tax obligations require, which is set by the law where they are registered rather than by us. Receipts, once issued, are immutable — a correction is a new receipt that supersedes the old one, because a donor may have already filed the original with a tax authority.

[REVIEW] Specific retention periods for US 501(c)(3) and Israeli amuta record-keeping must be confirmed with an accountant in each jurisdiction and stated here.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask for it to be deleted. Deletion may be limited where a record must be kept for tax or accounting reasons — a receipt already filed with a tax authority is the clearest example.

[REVIEW] The specific rights available to you depend on where you live (GDPR, Israeli Privacy Protection Law, and US state laws each differ) and must be enumerated here by counsel.

Contact

Email info@taimlee.com. If your question is about a specific gift or receipt, the organisation you gave to can usually answer faster.

← Back to The Giving Center · Terms of service