Privacy Policy

This Privacy Policy applies to information that we collect about you when you use MemberDrive.org and any products and services that are available on or through MemberDrive.org. Throughout this Privacy Policy we'll refer to our website and other products and services collectively as Services.

Below we explain how we collect, use, and share information about you, along with the choices that you have with respect to that information.

If you have any questions about this Privacy Policy, please contact us at privacy@memberdrive.org.

If you are a visitor of a site which is running Services provided by MemberDrive (a MemberDrive Campaign), the 'End Users' section of this Privacy Policy applies to you.

Information We Collect

We only collect information about you if we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better.

We collect this information from three sources: if and when you provide information to us, automatically through operating our Services, and from outside sources. Let's go over the information that we collect.

Information You Provide to Us

It's probably no surprise that we collect information that you provide to us directly. Here are some examples:

Registration information: We ask for basic information from you in order to set up your account — for example, your name and email address.
Know Your Customer obligations: Know Your Customer (KYC) obligations require MemberDrive to collect and maintain information about all Campaign account holders. These are regulatory requirements and are intended to prevent abuse of the financial system. KYC information that we may collect may include:
1. Personal information about the individual creating the Campaign.
2. Business information associated with the Campaign.

More information about how we manage KYC obligations can be found on Stripe.com.

Public campaign information: If you create a Campaign with us, we collect the information that you provide for your public Campaign page. For example, if you set up a Campaign, your organization name is part of that public campaign page, along with any other information you put into your campaign page, like a photo or an About Us description. Your public campaign information is just that — public — so please keep that in mind when deciding what information you would like to include.
Fundraiser information: If you set up a Fundraiser page to help your favorite campaign raise money, we collect the information that you provide for your fundraiser page. For example, we'll display your name on the Leaderboard, along with any other information that you provide on your Fundraiser page.
Payment and contact information: If you donate to a campaign through our site — either set up a subscription or give a one-time donation — you'll provide additional personal and payment information like your name and contact information. We also keep a record of the payments you've made. Payment records are also made available to the Campaign administrators. We do not store your payment card numbers — card data is handled directly and securely by Stripe, our payment processor. You can review Stripe's privacy policy for details on how Stripe handles payment information.
Content information: In connection with using the Services, you may generate content that provides us with additional information about you.
Communications with us: You may also provide us information when you respond to surveys or communicate with us about a support question.

Information We Collect Automatically

We also collect some information automatically:

Log information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services — for example, when you create or make changes to your Campaign or start or stop your Membership.
Usage information: We collect information about your usage of our Services. For example, we collect information about the actions that campaign administrators and users perform on a campaign — in other words, who did what and when (e.g., [username] updated [campaign] at [time/date]). We also collect information about what happens when you use our Services, along with information about your device (e.g., screen size, name of cellular network, and mobile device manufacturer). We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.
Location information: We may determine the approximate location of your device from your IP address. We collect and use this information to, for example, calculate how many people visit our Services from certain geographic regions.
Information from cookies & other technologies: A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. MemberDrive uses cookies to help us identify and track user sessions, visitors, usage, and access preferences for our Services.

Information We Collect from Other Sources

We may also get information about you from other sources. For example, if you connect your account to a third-party service provider such as Stripe, we may receive information from that service. The information we receive depends on which services you authorize and any options that are available.

How and Why We Use Information

We use information about you for the purposes listed below:

To provide our Services. For example, to set up and maintain your account, backup and restore your content, charge you for any of our paid Services, and provide you support for the Services.
To further develop our Services. For example, by adding new features that we think our users will enjoy or find useful, and by analyzing usage patterns to identify features that are confusing or underused so we can improve them.
To protect our Services, our users, and the public. For example, by detecting security incidents; detecting and protecting against malicious, deceptive, fraudulent, or illegal activity; fighting spam; complying with our legal obligations; and protecting the rights and property of MemberDrive and others, which may result in us, for example, declining a transaction or terminating Services.
To fix problems with our Services. For example, by monitoring, debugging, repairing, and preventing issues.
To customize the user experience. For example, to personalize your experience by serving you relevant notifications for our Services, and recommending content that we think you will like.
To communicate with you. For example, to communicate with you about offers and promotions offered by MemberDrive and others we think will be of interest to you, solicit your feedback, or keep you up to date on MemberDrive and our products.

We do not sell our users' private personal information.

We share information about you in the limited circumstances spelled out below and with appropriate safeguards on your privacy:

Subsidiaries, Employees, and Independent Contractors. We may disclose information about you to our subsidiaries, our employees, and individuals who are our independent contractors that need to know the information in order to help us provide our Services or to process the information on our behalf. We require our subsidiaries, employees, and independent contractors to follow this Privacy Policy for personal information that we share with them.
Third Party Vendors. We may share information about you with third party vendors who need to know information about you in order to provide their services to us. This group includes vendors that help us provide our Services to you (like Stripe, which processes payment information) and those that help us understand and enhance our Services (like analytics providers). These vendors are permitted to use your data only to provide services to us, not for their own purposes.
As Required by Law. We may disclose information about you in response to a subpoena, court order, or other governmental request.
To Protect Rights and Property. We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of MemberDrive, third parties, or the public at large. For example, if we have a good faith belief that there is an imminent danger of death or serious physical injury, we may disclose information related to the emergency without delay.
Business Transfers. In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that MemberDrive goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.
With Your Consent. We may share and disclose information with your consent or at your direction. For example, we may share your information with third parties with which you authorize us to do so.
Aggregated and De-Identified Information. We may share information that has been aggregated or reasonably de-identified, so that the information could not reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services.
Published Support Requests. If you send us a request (for example, via a support email or one of our feedback mechanisms), we reserve the right to publish anonymized or aggregated versions of that request — for example, as a FAQ or help article — in order to help us support other users. We will not publish your personal information.

Information Shared Publicly

Information that you choose to make public is — you guessed it — disclosed publicly. That means, of course, that information like any content that you make public on your website is all available to others. This includes, but is not limited to, campaigns, posts, fundraising pages, leaderboard information, and matching gifts. Public information may also be indexed by search engines or used by third parties. Please keep all of this in mind when deciding what you would like to share.

End Users

This section applies to individuals who visit or donate through a campaign page hosted on MemberDrive (a MemberDrive Campaign) — for example, if you donate to a nonprofit's fundraising campaign powered by MemberDrive.

When you interact with a MemberDrive Campaign, the organization running that campaign (the Campaign Operator) is the controller of your personal data, and MemberDrive acts as a data processor on their behalf. The Campaign Operator's own privacy policy may also apply to your data.

Information we collect from End Users includes:

Donation and payment information: Your name, email address, mailing address, and transaction records when you make a donation.
Membership information: If you set up a recurring membership, we retain the information necessary to manage and process your subscription.
Communications: Any messages you send through the campaign page or to the Campaign Operator via MemberDrive.

How we use End User information:

To process and record your donation or membership
To send you receipts and confirmations
To enable the Campaign Operator to communicate with you about your membership or donation
To comply with legal and regulatory requirements (including KYC/AML obligations where applicable)

Your rights as an End User: You may contact us at privacy@memberdrive.org to request access to, correction of, or deletion of your personal information. We will coordinate with the relevant Campaign Operator as appropriate.

Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve our Services.

Types of cookies we use:

Strictly necessary cookies: Required for the Services to function, such as session cookies that keep you logged in.
Functional cookies: Remember your preferences and settings to improve your experience.
Analytics cookies: Help us understand how users interact with our Services so we can improve them. These may include third-party analytics tools.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Doing so may affect the functionality of some parts of our Services.

If we use third-party analytics tools (such as Google Analytics), those providers may set their own cookies. Please refer to those providers' privacy policies for more information on their data practices and opt-out options.

Security

We take the security of your personal information seriously and implement reasonable technical and organizational measures to protect it:

Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
Payment security: We do not store payment card numbers. Card data is handled directly by Stripe, which is certified as a PCI DSS Level 1 Service Provider.
Access controls: We restrict access to personal information to employees and contractors who need it to provide our Services, and we require them to handle it confidentially.
Monitoring: We monitor our systems for security incidents and unauthorized access.

No method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at privacy@memberdrive.org.

Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as soon as possible.

If you believe that a child under 13 has provided personal information to us, please contact us at privacy@memberdrive.org so we can take appropriate action.

Your Privacy Rights

Depending on where you live, you may have certain rights with respect to your personal information:

Right to access: You may request a copy of the personal information we hold about you.
Right to correction: You may request that we correct inaccurate or incomplete information.
Right to deletion: You may request that we delete your personal information, subject to certain exceptions (such as legal obligations to retain records).
Right to opt out of marketing: You may opt out of receiving promotional communications from us at any time by using the unsubscribe link in our emails or by contacting us.
Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

California Residents (CCPA/CPRA): California residents have additional rights, including the right to know the categories of personal information we collect and the purposes for which it is used, the right to opt out of the sale or sharing of personal information (we do not sell your personal information), and the right to limit the use of sensitive personal information. To exercise your California privacy rights, please contact us at privacy@memberdrive.org.

Other US State Residents: Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights. Please contact us at privacy@memberdrive.org to make a request.

To exercise any of these rights, please contact us at privacy@memberdrive.org. We will respond to verifiable requests within 45 days. We may need to verify your identity before processing your request.

Data Retention

We retain personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account data: Retained for as long as your account is active, and for up to 3 years after account closure to comply with legal and regulatory obligations.
Payment and transaction records: Retained for 7 years to comply with tax, accounting, and legal requirements.
Donor and membership records: Retained for as long as the Campaign Operator requires access, and up to 7 years after the campaign ends.
Log and analytics data: Retained for up to 24 months, then deleted or anonymized.
Communications: Support emails and feedback retained for up to 3 years.

When personal information is no longer needed, we delete it or anonymize it so that it can no longer be associated with you.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (at the address associated with your account) or by posting a prominent notice on our website at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically.

Your continued use of our Services after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the changes, you should stop using the Services and may request deletion of your account.

Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

Governing Law

This Privacy Policy is governed by the laws of the State of Texas, United States, without regard to its conflict of law principles.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

MemberDrive privacy@memberdrive.org

We aim to respond to all privacy inquiries within 30 days.

Updated April 24, 2026.

Creative Commons Sharealike License

This Privacy Policy is based on the Privacy Policy made available by Automattic under a Creative Commons Sharealike license. You in turn are therefore allowed to copy it, adapt it, and repurpose it for your own use as permitted under the terms of that license. Just make sure to revise the language so that your policy reflects your actual practices.