Privacy Policy

Altruvia, LLC ("Company," "we," "us," or "our") is committed to maintaining robust privacy protections for our users.

This Privacy Policy is designed to help you understand how we collect, use, and safeguard the information you provide to us and to assist you in making informed decisions when using our services.

By accessing or using our Site or Service, you accept this Privacy Policy and our Terms of Use, and you consent to our collection, storage, use, and disclosure of your personal information as described here.

"Site" refers to our website, which can be accessed at https://altruvia.app or through our mobile application.

"Service" refers to the suite of services offered by Altruvia, including donor management, fundraising, program planning, impact reporting, and AI-assisted tools for nonprofits and mission-driven organizations, accessible via the Site or our application.

"You" refers to you, as a user of our Site or Service.

We collect two types of information: Personal Information and Non-Personal Information.

Non-Personal Information includes data that cannot be used to personally identify you, such as anonymized usage data, general demographic information, referring/exit pages and URLs, platform types, device details, and aggregated analytics.

Personal Information includes your name, email address, company name, billing information, contact details, and any other information you voluntarily provide to us during registration or while using the Service.

Information collected via technology: when you use our Service, we may automatically collect your IP address, browser type, device type, operating system, and referring URL. Cookies may be persistent or session-based. What we set, and what we measure, differs between our application, our marketing site, and the public giving pages we host for our customers; Section III describes each in detail.

Typical uses of cookies include: remembering login sessions; keeping your account secure; storing user preferences.

Information you provide to us: when you register, we collect the details you submit (e.g., name, email, organization). If you subscribe to a paid plan, payment information is processed via secure third‑party processors.

Product demo: you can try parts of the Service without creating an account. Before a demo starts we ask for your work email address, and we keep it together with the event at which you tried the demo, the language you used, and whether you agreed to receive news and updates from us.

Children’s Privacy: our Service is not directed to anyone under 13 and we do not knowingly collect information from children under 13. If we learn we have collected such data without parental consent, we will delete it promptly.

We use Personal Information to provide and maintain the Service, process transactions and billing, respond to inquiries and support requests, send important updates and administrative communications, measure how features are used so that we can improve them, and keep the Service reliable and secure.

Demo follow-up: we use the email address you give to start a demo to follow up with you about that demo. We send you news and product updates only if you ticked the box agreeing to receive them, and you can unsubscribe at any time.

We do not sell, rent, or trade your Personal Information to third parties for marketing purposes.

We share Personal Information only with trusted service providers who assist in operating our services and who are bound by contractual confidentiality obligations. Those providers include our hosting, database, and email providers; our payment processors; Cloudflare AI Gateway and the AI model providers it routes to; PostHog, Inc. (product analytics); and Functional Software, Inc. d/b/a Sentry (error and performance diagnostics). Each may use the information only to provide services to us. Section III describes what the analytics and diagnostics providers receive.

Payment processing: payments on the Service are processed by Stripe, Inc. When an organization connects a bank account to receive payments, or a donor makes a payment on a giving page we host, Stripe receives the personal data provided in connection with that account or payment and processes it in accordance with Stripe's Privacy Policy (https://stripe.com/privacy).

AI features: when you or someone in your organization uses an AI feature, the text needed for that feature is processed through Cloudflare AI Gateway, which routes the request to a third-party AI model provider that produces the response. Depending on the feature, that text can include donor, contact, and beneficiary details from your organization's records. The AI model providers may change over time. We send this data only to provide the feature you are using, and we do not use it to train our own models.

AI request logs and caching: Cloudflare AI Gateway keeps request and response logs for operational monitoring. Logs are kept on a rolling basis: once the log limit is reached, the oldest logs are deleted first. Responses are not cached, and logs are not exported to any other system.

A current list of every company that processes customer data on our behalf, with what each does, the data it handles, and where, is published at https://altruvia.app/subprocessors. We update that page when we add or replace a subprocessor.

We do not train our AI models on your data without your explicit consent. If we ever request to use your data for improvement purposes, we will first obtain your permission.

We may disclose Personal Information if required by law, to protect our legal rights, prevent fraud, or ensure user safety.

We use aggregated and anonymized Non-Personal Information to monitor service performance, improve offerings, and develop new features.

Cookies and device storage in the application: we set strictly necessary cookies for authentication and session management, for security, and for remembering your preferences. For signed-in users who have not opted out, we also store an analytics identifier that links product-analytics events to your account. We do not set advertising cookies anywhere, and we do not share cookie data for advertising.

Product analytics: for signed-in users of the Altruvia application only, we use PostHog, Inc. (United States) to understand how features are used, so that we can improve the product and help customer organizations succeed. PostHog receives the pages and screens you view, feature-usage events, browser and device metadata, your account identifier and email address, and the organization you belong to. The text content and the element attribute values of anything you click are removed before an event is sent, and we do not record sessions.

We rely on our legitimate interest in understanding and improving the Service as the basis for product analytics. You may opt out at any time in Settings → Preferences; collection stops immediately when you do, and the Service remains fully functional. PostHog, Inc. participates in the EU‑U.S. Data Privacy Framework.

Marketing site: our public website at https://altruvia.app uses cookieless, anonymous analytics. No cookies or other device storage are set for analytics there, no identity is linked to a visit, and we receive only aggregate page and referrer counts.

Public giving pages: the donation pages, event pages, and embedded giving forms we serve on behalf of our customers load no analytics or tracking code, and set no cookies or other identifiers. Donors visiting those pages are not measured, profiled, or identified by us. We do monitor the performance and reliability of our own infrastructure, including these pages, so that they stay fast and available; that monitoring records aggregate, non-identifying request timings only and never identifies a visitor. Payment details entered on those pages are handled by our payment processor and are never used for analytics.

Error diagnostics: we use Functional Software, Inc. d/b/a Sentry (United States) to receive error and performance reports from the application and from our infrastructure, so that we can detect, diagnose, and correct faults. Personal data is scrubbed before a report is transmitted: reports do not include message contents, form values, or donor records, and any reference to a user is limited to an internal account identifier.

We rely on our legitimate interest in the reliability and security of the Service as the basis for error diagnostics. This processing is strictly necessary to operate the Service, is not used to track you or to build a profile of you, and is therefore not subject to an opt-out.

Product demo: while you use a demo we set a strictly necessary session cookie, and we measure feature usage under a temporary identifier that does not include your email address. You can turn that measurement off with the switch shown at the top of the demo.

We implement industry-standard security measures, including encryption in transit and at rest, and we keep each organization's data in its own separate database. You sign in with a one-time code sent to your email address; we encourage you to also turn on two-factor authentication with an authenticator app or a passkey, and to sign out on shared devices.

While we strive to protect your data, no method of transmission or storage is 100% secure.

We keep your Personal Information for as long as your account is active and as needed to provide the Service, meet our legal obligations, and resolve disputes.

Organizations that use Altruvia decide what information about their donors, contacts, and programs to keep. We process that information on their behalf and according to their instructions; requests about it are best directed to the organization concerned.

When information is deleted or erased in the Service, it is removed from our live systems right away. We keep database backups for up to 7 days so that we can recover from errors, so deleted information is gone from our backups within 7 days. If we ever restore data from a backup, we re-apply any deletions and erasures made after that backup was taken.

When an organization deletes its account, the deletion can be cancelled for 72 hours. After that, the organization's data is permanently deleted, and it is removed from our backups within a further 7 days.

An organization may instead choose to anonymize its data, which permanently removes the personal details of its donors and contacts while keeping de-identified records such as gift totals. Anonymization can likewise be cancelled for 72 hours before it runs, and the removed details are gone from our backups within a further 7 days.

Product demo: the temporary account created for a demo, and everything you enter in it, including text you paste and anything sent to AI features, is deleted automatically after the demo session ends. The email address you gave to start the demo is kept separately, as described in Section I, until you ask us to delete it.

You may access, update, or delete your account information.

You may opt out of marketing communications using the unsubscribe link in our emails or via account preferences; we may still send essential administrative emails.

You may opt out of product analytics at any time in Settings → Preferences, as described in Section III.

You may request a copy of the personal data we hold about you.

Analytics data held about you is deleted when your account is deleted, and you may ask us to delete it sooner by writing to us at the address in Section XI.

If you gave us an email address to start a demo, you may ask us to delete it at any time by writing to us at the address in Section XI.

Our Service may link to third-party websites or applications. We are not responsible for their privacy practices and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on our Site at least 30 days before taking effect. Non-material updates take effect upon posting.

We are continuously building and improving the Altruvia platform. References on the Site (or in related materials, demos, messages, or roadmap discussions) to features, modules, integrations, AI capabilities, analytics, or other functionality may describe items that are (a) in active development, (b) planned for future release without a committed timeline, or (c) exploratory and subject to reevaluation.

Your decision to access the Site, create an account, or purchase any paid plan constitutes your acknowledgment and understanding that: (i) any described future or beta functionality is not a promise or guarantee of delivery; (ii) timelines (explicit or implied) are estimates only and may shift; and (iii) features may be modified, reprioritized, delayed, or cancelled without notice at our sole discretion.

We may, without obligation, limit, suspend, deprecate, or remove features (including those in beta or generally available) to maintain security, performance, legal compliance, or product coherence. We are not liable for any costs you incur in reliance on future roadmap items or continued availability of any specific capability, except to the extent expressly required under a separately executed written agreement signed by both parties.

Forward‑looking statements (including those about efficiency gains, automation scope, or outcome measurement) are inherently uncertain and are provided for informational purposes only. Actual results may differ materially.

Regardless of product evolution, our handling of your Personal Information remains governed by this Privacy Policy as amended from time to time.

An organization can connect its own accounts at other services to Altruvia. Today those are Google, Microsoft, QuickBooks (Intuit), Salesforce, Mailchimp, Givebutter, and DocuSign. When you connect an account, we receive the access permissions you approve on the provider's consent screen and use them only to do what you asked for, such as importing a spreadsheet, syncing records, or sending a document for signature. We do not sell that data, use it for advertising, or use it to train AI models, and we share it only with the subprocessors listed at https://altruvia.app/subprocessors that run the service.

Google user data we access: when you sign in with or connect a Google account, we request your email address and basic profile (name). To import spreadsheets and files, we request the Google Drive "drive.file" permission, which lets us open only the specific Google Sheets and Drive files that you choose with the Google file picker. We cannot see your other files. We do not currently request access to your Google Contacts.

How we use Google user data: your email address and name identify which Google account is connected. The contents of the files you pick are read so that we can import them into, and keep them in sync with, your organization's records in Altruvia.

How we store and share Google user data: imported data is stored in your organization's own database, alongside the rest of your organization's records, and is kept and deleted as described in Section V. Our access credentials for your Google account are stored encrypted. When you disconnect Google, we ask Google to revoke our access and stop using the connection. We do not share Google user data with anyone except the subprocessors that host and run the Service, as listed at https://altruvia.app/subprocessors, or where required by law.

Limited Use: Altruvia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features you have connected Google for. We do not use it for advertising or sell it, and we do not use it to develop, improve, or train generalized AI or machine-learning models.

You can disconnect Google, or any other connected service, at any time in Altruvia, and you can review and remove Altruvia's access in your Google Account permissions at https://myaccount.google.com/permissions.

If you have questions or concerns about this Privacy Policy, please contact us at support@altruvia.app.

Last Updated: October 8, 2026