Privacy policy

This policy explains what Potluck collects, why, and what you can ask us to do with it. It is written to be read. If anything is unclear, write to hello@potluckpayments.com and we will explain it in plain words.

Potluck is made by Pay AI, Inc., a Delaware corporation ("Potluck", "we", "us"). This policy covers the website at potluckpayments.com, the Potluck application, and the giving pages, emails and documents we produce for the organizations that use Potluck.

Two kinds of people

Potluck is used by organizations (a congregation, a food shelf, a youth club) and by the people who give to them. We treat the two differently.

If you are part of an organization that uses Potluck, we collect what we need to run your account. If you give to an organization through a Potluck giving page, the organization you gave to is the one you have a relationship with. We handle your information on their behalf, we never market to you, and we never share your information with anyone other than that organization and the providers named below.

What we collect

From organizations: your organization's name, address, tax identification number, website, logo and colors; the names and email addresses of the people you invite; the funds, campaigns and events you create; and the records of gifts, including cash and checks your treasurer enters by hand. Stripe collects the bank account and identity details needed to verify your account and deposit money; we receive only the verification status and the last four digits of the bank account.

From people who give: the amount, fund, date and method of each gift; your name and email address if you provide them; a note if you write one; whether you chose to cover fees; and, if you set up a recurring gift, the schedule. Card numbers and wallet details go directly from your device to Stripe and never reach us. If you choose to give anonymously, your name is not shown to the organization, and if you provide no email, we have no way to reach you.

From everyone: the pages you visit on our site and in the app, the device and browser you use, and the address your connection comes from. We use this to keep the service working and to find problems. We do not use advertising cookies and we do not build profiles of visitors.

Why we use it

To run the service: to show the giving page, record the gift, send the receipt, deposit the money, produce the year-end statement, and let the organization see its records.

To keep it safe: to verify sign-ins, detect fraud and abuse, and protect the people who give.

To help: to answer your questions and fix problems. When you write to us, we keep the conversation so we can refer back to it.

To improve Potluck: using totals and patterns across organizations, never a person's individual gifts.

We do not sell personal information. We do not rent it. We do not share it with advertisers. We do not use it to train artificial intelligence models.

Who we share it with

Stripe, which moves the money and verifies organizations. Stripe's privacy policy covers what it collects from you directly.

Supabase, which hosts our database, and the cloud providers it runs on.

Resend, which delivers our emails, and the provider that hosts the application.

The organization you gave to, which sees your gift in its records, except for your name on an anonymous gift.

Lawyers, accountants and authorities when the law requires it, and only to the extent it requires it.

A buyer, if Potluck is ever sold, under the same promises in this policy.

Where it lives and how long

Your records are stored with our providers in the United States, encrypted in transit and at rest. We keep an organization's records for as long as it uses Potluck, and for seven years afterward where tax rules require it, unless the organization asks us to delete them sooner. We delete an organization's data within 30 days of its request, after one last export. We keep gift records needed to honor receipts and statements already sent.

Your choices

If you are part of an organization: export everything to CSV from the application at any time. Ask us to delete your organization's data and we will. Change your notification preferences in Settings.

If you give: open your giving history, receipts and recurring gifts from the link in any email we send you. Pause, edit or stop a recurring gift there. Ask us for a copy of your information, ask us to correct it, or ask us to delete it, by writing to hello@potluckpayments.com. We will confirm your identity by email before acting, and we may keep records the organization needs for its tax reporting.

To opt out of emails from us: every email we send is one you asked for by giving, signing in or inviting someone, so there is no marketing list to leave. Recurring gift emails stop when the gift stops.

Children

Potluck is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given through Potluck, write to us and we will remove what we can.

Security

Card and bank details are handled by Stripe, which is certified to the highest level of the card industry's security standard. Sign-in uses emailed links and codes, never passwords. Every record belongs to one organization, and the database refuses to return another organization's rows regardless of who is asking. No system is perfectly secure, and if we learn of a breach that affects you, we will tell you and the organizations affected without undue delay.

Changes

If we change this policy in a way that matters, we will post the new version here with a new date and tell organizations by email before it takes effect.

Contact

Pay AI, Inc. [Mailing address] hello@potluckpayments.com