Legal
Privacy Policy
Last updated: this is a placeholder pending legal review.
What we collect
From supporters: name, email, phone (optional), and the bank account details required for ACH payment. We tokenize bank info via SOLA — we never store your raw account or routing numbers.
From cause admins: contact info, EIN, 501(c)(3) documentation, and the bank account where your $3-per-card contributions are paid out.
How we use it
To process your card purchase, send your card-delivery email, credit your chosen cause, and answer support requests. We do not sell your data. We do not share your data with advertisers.
Who we share it with
SOLA — to process ACH payments on your behalf.
DASH Solutions — to issue your $100 prepaid Visa card.
AWS — for hosting (encrypted at rest, TLS in transit).
That's it. No marketing partners, no analytics resellers, no data brokers.
How long we keep it
Order history is retained as long as your account is active and for 7 years afterward (financial recordkeeping). You can request deletion of your account at any time; tokenized payment data is deleted on request, subject to our regulatory obligations.
Your rights
You can access, correct, export, or delete your data at any time from your account settings, or by emailing privacy@theeverywherecard.com.