Privacy Policy

Learn how Givebear LLC collects, uses, and protects your personal data.

Last updated September 2026

Contents
  1. 1. Who We Are
  2. 2. Information We Collect
  3. 3. How We Use Your Information
  4. 4. Sharing Your Information
  5. 5. Data Retention
  6. 6. Your Rights
  7. 7. Cookies
  8. 8. Security
  9. 9. Changes to This Policy
  10. 10. Contact

1. Who We Are

In short: Givebear runs the underlying fundraising software that helps charities accept secure online and kiosk payments.

Givebear LLC (“Givebear”, “we”, “our”) operates the donation platform available at givebear.io, subdomains under givebear.io, and hosted pages. We provide software that helps nonprofits, charities, and community organizations accept online and in-person donations securely.

2. Information We Collect

In short: We securely save core contact profiles, donation records, and basic browser data. Stripe securely handles raw cards.

When you make a donation or create an account we may collect:

  • Name and email address
  • Payment information processed securely by Stripe. We never store your full card numbers on our servers.
  • Donation history, campaign designations, and subscription details
  • Technical data such as IP address, browser type, and device information to ensure platform security.

3. How We Use Your Information

In short: Your information is used strictly to handle donation transactions, distribute automated tax receipts, and keep things safe from fraud.

  • To process donations and manage recurring subscriptions
  • To send donation tax receipts and transactional emails
  • To provide customer support
  • To improve our platform and prevent fraud
  • To comply with legal obligations (such as IRS/CRA reporting)

4. Sharing Your Information

In short: We pass your info to the specific nonprofit you supported for their own record-keeping. We never sell your personal data to brokers.

We share your information with the specific organization you donate to so they can issue receipts, maintain their Donor CRM, and communicate with you. We use Stripe for payment processing. We do not sell your personal data to third parties under any circumstances.

5. Data Retention

In short: We retain records only as long as your account requires or as mandated by nonprofit accounting and auditing regulations.

We retain your data for as long as your account is active or as needed to provide services to our partner organizations and comply with our legal obligations. You may request deletion of your data by contacting us, subject to nonprofit tax-record retention laws.

6. Your Rights

In short: You have full rights to check, correct, move, or completely pull your details from our systems by dropping us a message.

Depending on your location you may have rights to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability

To exercise these rights, contact us at [email protected].

7. Cookies

In short: Session cookies keep you signed in. Our public marketing pages also use Google and Meta measurement cookies so we can tell which campaigns bring visitors. Donation activity is never sent to advertising platforms.

We use cookies to maintain your session and remember your preferences.

On our public marketing pages we use Google Analytics, Google Ads, and Meta (Facebook) measurement tools. They set cookies such as _ga, _gcl_aw, _fbp, and _fbc, and we keep advertising click identifiers (gclid, fbclid) and campaign parameters in first-party cookies for up to 90 days so we can tell which campaign brought an inquiry. When you send us a contact, demo, or kiosk request, we may share a SHA-256 hashed version of the email you entered with Google and Meta to measure that conversion; the hash cannot be turned back into your email address.

We use these tools only to measure our own marketing. We do not send donation activity, donor identities, or gift amounts to advertising platforms, and we do not use advertising cookies to target donors on behalf of the organizations that use Givebear. You can opt out through your browser’s cookie settings, Google’s Ads Settings, and Meta’s ad preferences.

8. Security

In short: All sessions use HTTPS connections, and card interactions match strict PCI-DSS safety baselines.

All data is transmitted over secure HTTPS connections. Payment processing is handled by Stripe and is PCI-DSS compliant. We apply industry-standard security practices, including end-to-end encryption, to protect your information.

9. Changes to This Policy

In short: If our data blueprints change significantly, we will push updates to the platform dashboard or email you instantly.

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform.

10. Contact

In short: Have questions regarding security or privacy details? Reach out to our privacy compliance mailbox at [email protected].

If you have questions about this policy, please contact us at [email protected].