Privacy Policy

NonprofitPilot ("we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect when you visit nonprofitpilot.com or engage with our services, how we use that information, and the choices you have about how it is handled.

What we collect

We collect the following categories of information:

• Information you submit: when you fill out our contact form, book a call, or email us, we collect your name, email address, organization, and any details you choose to share about your project.
• Cookies and similar technologies: we use first-party cookies to remember your preferences and to keep you signed into the client portal where applicable. See our Cookie Policy for details.
• Analytics data: we collect anonymized, aggregated information about how visitors use our site — pages viewed, time on page, referring source, approximate geographic location at country/region level.
• Server logs: our hosting provider records standard request logs (IP address, user agent, request URL) for security and reliability purposes.

How we use your information

We use personal information to:

• Respond to inquiries you send us.
• Schedule and conduct discovery calls.
• Deliver services you have engaged us to provide.
• Send you operational communications related to our work together (project updates, invoices, etc.).
• Improve our website and services through analytics review.
• Comply with legal obligations and enforce our terms of service.

We do not sell your personal information, and we do not use it for advertising targeting outside our own marketing.

Sub-processors

We rely on a small set of vendors to operate our business. Each is bound by a data processing agreement that limits how they may use information we share with them:

• Vercel — website hosting and infrastructure.
• Supabase — database and client portal authentication.
• Resend — transactional email delivery.

We may add or change sub-processors as our infrastructure evolves. Material changes will be reflected in this policy.

Data retention

We retain personal information only as long as necessary for the purposes for which it was collected. Inquiry submissions and discovery call notes are retained for up to 24 months from the most recent contact unless a service engagement is active. Active engagement records are retained for the duration of the engagement plus seven years for tax and contract purposes, consistent with U.S. recordkeeping standards.

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete personal information we hold about you, subject to our legal retention obligations.
• Receive a portable copy of your personal information in a machine-readable format.
• Withdraw consent for processing where consent is the legal basis.
• Lodge a complaint with your local data protection authority.

These rights are recognized under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar laws in other jurisdictions. To exercise any of these rights, email us at the address below.

International transfers

We are based in the United States. If you access our services from outside the U.S., your information will be transferred to, stored, and processed in the U.S. Where required, we rely on Standard Contractual Clauses or other appropriate safeguards for cross-border transfers.

Children

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated via a notice on this page.

Contact us

For privacy-related questions or to exercise your rights, contact us at privacy@nonprofitpilot.com.