Privacy Policy

1. Overview

Orthoplex Solutions (“we,” “us,” or “our”) operates the DonorsBase platform (“Service”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service. By using DonorsBase, you consent to the practices described in this Policy.

2. An Orthoplex product

DonorsBase is built and operated by Orthoplex Solutions. Every Orthoplex product follows the same internal privacy and security standards covering data handling, access management, vendor review, and incident response. The practices described in this Policy are the DonorsBase-specific application of those standards. More information about Orthoplex Solutions is available at https://orthoplexsolutions.com.

3. Information We Collect

We collect information you provide directly:

• Account information — name, email address, password, and organization details when you register.
• Donor data — names, contact information, and giving history that you import or enter into the platform.
• Payment information — billing details processed by third-party payment processors; we do not store full card numbers.
• Usage data — log files, IP addresses, browser type, pages visited, and actions taken within the Service.

4. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service.
• Process transactions and send related notices.
• Send administrative emails (receipts, password resets, account alerts).
• Respond to support inquiries and feedback.
• Monitor and analyze usage to improve the Service.
• Detect, prevent, and address fraud or security issues.
• Comply with legal obligations.

5. How We Share Your Information

We do not sell your personal data. We may share information:

• Service providers — hosting, analytics, and payment processing partners who operate under confidentiality agreements.
• Payment processors — Stripe, PayPal, and Authorize.net process payment data under their own privacy policies.
• Legal requirements — when required by law, subpoena, or to protect the rights and safety of Orthoplex Solutions, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

6. Donor Data & Nonprofit Responsibility

You, as the organization using DonorsBase, are the data controller for any donor personal data you upload or manage through the Service. You are responsible for obtaining appropriate consent from your donors and for complying with applicable data protection laws (including GDPR, CCPA, and equivalent regulations) with respect to that data.

7. Data Retention

We retain your account and organizational data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will purge your data within 30 days, unless retention is required by law. Anonymized usage analytics may be retained indefinitely.

8. Security

We implement commercially reasonable technical and organizational measures to protect your data, including TLS encryption in transit, hashed passwords, and role-based access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Cookies & Tracking

We use session cookies necessary for authentication and platform functionality. We do not use advertising cookies or cross-site tracking pixels. You may disable cookies in your browser, but doing so may affect Service functionality.

10. Your Rights

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict certain processing; and data portability. To exercise these rights, contact us at support@donorsbase.com. We will respond within 30 days.

11. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated Policy with a new effective date. Continued use of the Service constitutes acceptance of the updated Policy.