Privacy Policy

1. What we collect

• Account and contact information: name, email address, phone number, and the campaign you chose to support.
• Order information: items purchased, delivery address, order totals, shipping charge, tax, any optional tip, tracking, and refunds.
• Payment information: processed by our payment provider. We receive a confirmation and limited details such as the card brand and last four digits. We never store your full card number.
• Support information: messages, photos, and order details you send us.
• Technical information: log data, device and browser information, and security events needed to run and protect the store.

2. How we use it

• Accept, fulfill, ship, and support your order, including working with our supplier and carrier.
• Send order confirmations, shipping and delay notices, refund notices, and receipts.
• Calculate campaign contributions and pay the organizations that run campaigns.
• Prevent fraud, verify payment authorization, and secure the store.
• Meet tax, accounting, consumer-protection, and other legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. What campaign leaders can see

Campaign leaders always see anonymized, aggregate results for their campaign — order counts, totals, and the contribution earned. They do not see supporter names, email addresses, phone numbers, delivery addresses, payment details, or what anyone bought, unless both of the following are true:

• You affirmatively opted in at checkout to share your name and contact information with that campaign; and
• The organization running that campaign has signed the Supporter Data Sharing Addendum to the Organization Campaign Agreement and we have approved it.

Optional tips are never shown to campaign leaders. If you withdraw consent, your details are removed from leader-facing views, reports, and exports going forward.

4. Rules campaign leaders must follow

Any organization or leader who receives supporter information is contractually bound by the Supporter Data Sharing Addendum in the Organization Campaign Agreement. Under that addendum they must not use supporter information for any unlawful purpose, and specifically must not:

• Sell, rent, trade, or otherwise disclose it to any third party.
• Use it for any purpose other than thanking supporters and communicating about that specific campaign.
• Send marketing, solicitations, or automated calls or texts in violation of applicable law.
• Load it into advertising platforms, mailing-list brokers, or data-enrichment services.
• Retain it after the campaign ends beyond the period the addendum allows, or after consent is withdrawn.
• Give access to anyone other than the named, authorized individuals who need it.

Leaders must keep the information secure, honor opt-out requests promptly, notify us of any suspected breach, and delete or return the information when required. Violating these rules is a breach of the agreement and can result in immediate suspension or termination of the campaign. If you believe a campaign leader has misused your information, contact us at support@mannafund.co.

5. Who else we share with

We share information only with the providers needed to run the store, each under its own terms:

• Our storefront platform, for the shopping cart, checkout, and order records.
• Our payment processor, for payments, refunds, and organization payouts.
• Our supplier and fulfillment facility, for picking, packing, and labeling your order.
• Our shipping carrier, for delivery and tracking.
• Our email provider, for order and support messages.
• Our accounting provider, for financial records and tax reporting.

We may also disclose information when required by law, to enforce our agreements, to protect rights and safety, or in connection with a merger or sale of the business.

6. Cookies

We use cookies and similar storage that are necessary to run the store — keeping you signed in, remembering your cart, attributing your order to the campaign you chose, and detecting fraud. We do not use third-party advertising cookies to build behavioral profiles.

7. How long we keep information

We keep order, payment, tax, and campaign records for as long as required by tax, accounting, and consumer-protection law — generally seven years. Support messages and marketing preferences are kept only as long as needed for their purpose. Supporter details shared with a campaign are removed from leader-facing views immediately when consent is withdrawn.

8. Your rights

Colorado residents have the right to know what personal data we hold, to get a copy of it, to correct it, to delete it, and to opt out of targeted advertising, sale, and profiling — which we do not do. You may also withdraw consent to share your details with a campaign at any time, and appeal a decision we make on your request. Email support@mannafund.co. We will verify your request and respond within the time the law allows. Exercising these rights never costs you anything and will not change the service you receive.

9. Security

We protect information with encryption in transit, access controls, multi-factor authentication for staff and campaign leader accounts, and database-level access rules that limit what each account can see. No system is perfectly secure, so please protect your own password and tell us right away if you suspect a problem.

10. Children

Our store is intended for adults. We do not knowingly collect personal information from children under 13, and students are not permitted to have campaign leader accounts. If you believe a child gave us information, contact us and we will delete it.

11. Changes and contact

If we change this policy we will post the updated version here with a new date. Questions? Email support@mannafund.co or support@mannafund.co, or use the support form.