Privacy Policy

This Privacy Policy explains how ShulPad LLC (“ShulStack,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with the ShulStack platform, websites, and related services (collectively, the “Services”). ShulStack is an all-in-one platform that lets non-profit organizations build websites, manage contacts, run events, accept donations, and communicate with their communities.

1. Who This Policy Covers

This policy applies to two groups of people:

• Organizations (our customers). Non-profits and other organizations that create an account and use the Services to run their operations.
• End users. Members, donors, event attendees, and visitors who interact with an organization through a site or form powered by ShulStack.

For data that organizations collect from their own members and donors, the organization is the controller of that information and ShulStack acts as a service provider (processor) on its behalf. The organization’s own privacy policy governs how it uses that data. If you are an end user with questions about a specific organization’s data practices, please contact that organization directly.

2. Information We Collect

Information you provide

• Account information: name, email address, password, organization name, role, and billing details.
• Content you submit: contacts, households, event details, page content, forms, messages, and files you upload to the platform.
• Donor and member data: contact details, donation and payment records, registrations, and communication preferences submitted through forms and donation pages.
• Support and communications: information you share when you contact us for support or correspond with us.

Information collected automatically

• Usage data: pages viewed, features used, actions taken, and timestamps.
• Device and log data: IP address, browser type, device identifiers, and referring URLs.
• Cookies and similar technologies: used to keep you signed in, remember preferences, and understand how the Services are used. See Section 7.

Payment information

Payments are processed by third-party payment providers such as Stripe and PayPal. ShulStack does not store full card numbers. We receive limited transaction details (such as amount, status, and the last four digits of a card) needed to record donations and maintain financial records.

3. How We Use Information

We use personal information to:

• provide, operate, maintain, and improve the Services;
• create and manage accounts and authenticate users;
• process payments, donations, and registrations;
• send transactional messages such as receipts, confirmations, and notifications;
• provide customer support and respond to requests;
• monitor, secure, and prevent fraud or abuse of the Services;
• analyze usage to improve features and performance; and
• comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not use the content that organizations store in the platform for advertising.

4. How We Share Information

We share information only as described below:

• Service providers (sub-processors). We use trusted vendors to run the Services, including hosting and database infrastructure (such as Vercel and Supabase), caching (such as Upstash), payment processing (such as Stripe and PayPal), and email delivery (such as Amazon SES). These providers may process personal information only to provide services to us.
• Within an organization. Data submitted to an organization is accessible to that organization’s authorized administrators and staff.
• Legal and safety. We may disclose information if required by law or to protect the rights, property, or safety of ShulStack, our users, or the public.
• Business transfers. If ShulStack is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

5. Data Retention

We retain personal information for as long as an account is active or as needed to provide the Services. We also retain certain information as required to comply with legal, tax, accounting, and audit obligations, resolve disputes, and enforce our agreements. Financial and donation records may be retained for the period required by applicable law. When information is no longer needed, we delete or anonymize it.

6. Data Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and tenant data isolation. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Cookies and Tracking

We use cookies and similar technologies to operate and improve the Services. Essential cookies are required to sign in and keep the Services working. We also use limited analytics to understand aggregate usage. You can control cookies through your browser settings, though disabling some cookies may affect functionality.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or request a copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at info@shulstack.io. If your data was provided to an organization that uses ShulStack, we may direct your request to that organization as the controller of that data.

U.S. residents: We do not sell personal information or share it for cross-context behavioral advertising. You may request access to or deletion of your information as described above.

International users: ShulStack is operated from the United States. If you access the Services from outside the United States, you understand your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate. We take steps to ensure appropriate protections for such transfers.

9. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If an organization collects information about minors through the Services (for example, for education programs), it is responsible for obtaining any required consents.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

ShulPad LLC
Email: info@shulstack.io