Privacy Policy
Last updated October 11, 2026
This policy explains what personal information Donoroo collects, why, and who it is shared with. Donoroo is operated by Fast Track Digital.
1. Our role
When you give through an organization's page, that organization decides what it does with your information, and Donoroo processes it on the organization's behalf. For people who use the Donoroo dashboard or contact us, Donoroo decides how that information is used.
2. What we collect from donors
- Name, email, phone number and billing address.
- Company name, if you enter one, and whether to show it.
- The amount, currency, date, page, dedication message, whether you chose to give anonymously, and answers to any questions the organization asks.
- For card and bank payments: the card brand and last four digits, and the processor's reference. Full card and bank numbers go straight to the organization's processor through its own secure fields, and are not stored by Donoroo.
- For donor-advised fund cards: the card number is passed to the fund to make the charge and is not stored. We keep the last four digits.
- Your IP address and security signals used to prevent fraud and card testing.
- If the organization sends reminders about unfinished gifts: your name, email and the gift you started, saved as you type them on the form, before you finish the gift.
3. What we collect from organizations and their teams
- Name, email address and role of each team member.
- Organization details such as legal name, EIN, logo and settings.
- Payment processor keys, which are encrypted and never shown again after they are saved.
If you write to us through our contact form, we keep your name, email address, organization, processor and message to answer you and, if you ask, to set up your account.
4. How we use it
- To process gifts and send receipts, thank-you messages and notifications.
- If you start a gift and don't finish it, and the organization has turned on reminders, to email you up to two reminders with a link back to your gift. Every reminder has an unsubscribe link, which stops reminders from every organization on Donoroo (not receipts), and finishing the gift stops them.
- To show the supporter list on a campaign page, using only what the donor chose to show.
- To give organizations their donation records, exports and webhooks.
- To prevent fraud, card testing and abuse, and to keep the service secure.
- To provide support and to operate and improve the service.
We do not sell personal information, and we do not use donor information for advertising.
5. Who we share it with
- The organization you gave to, which receives your gift details and contact information.
- The organization's payment processor or donor-advised fund, to process the payment.
- Service providers that run Donoroo for us.
- Authorities, when the law requires it or to protect the rights and safety of donors, organizations or us.
6. Cookies
Donoroo uses cookies only to keep dashboard users signed in and to remember which organization they are viewing. Payment forms load security tools from Cloudflare and the organization's processor, which may set their own cookies to detect fraud. Our own website, donoroo.org, uses Google Analytics cookies to count visits and see which pages are read. Donation pages and the dashboard don't. We do not use advertising cookies.
7. How long we keep it
Donation records are kept for as long as the organization keeps its account, because organizations need them for receipts and tax records. Fraud-prevention records are deleted after 30 days, and webhook logs after 90 days. When an organization closes its account, we delete its data within 90 days unless the law requires us to keep it.
8. Security
Data is encrypted in transit. Processor keys are encrypted at rest. Access to the dashboard is limited to each organization's own team, with separate roles.
9. Your choices
Donors can ask to see, correct or delete their information by contacting the organization they gave to, or by using our contact form and choosing "A donor with a question". We will work with the organization to respond. Some records may need to be kept for tax and legal reasons.
10. Children
Donoroo is not directed at children under 13, and we do not knowingly collect their information.
11. Changes
We may update this policy. The date at the top shows the latest version. Significant changes will be announced to organization owners by email.
12. Contact
Questions about privacy: use our contact form.