How we handle your information.

Information we collect

We collect information you provide directly when you create an account or use our service:

• Identity: Full name and email address.
• Contact: Phone number and home address (used for route planning and pickup scheduling).
• Account credentials: Password (stored as a secure hash we cannot read) or Google OAuth tokens if you sign in with Google.
• Billing: Payment card details are collected and stored by Stripe. We never see or store your full card number.
• Usage data: Pickup history, skip/unskip actions, and account activity logs.

How we use your information

• To schedule and complete your monthly donation pickup.
• To process your subscription payment through Stripe.
• To send pickup reminders, confirmations, and service updates by email and SMS.
• To plan efficient routes for our drivers (your address is shared with route planning tools).
• To respond to support requests and improve the service.

We do not sell your personal information to third parties.

Third-party services

We use the following services to operate DonateCrate. Each has its own privacy policy.

• Supabase — database and authentication infrastructure.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery.
• Google — optional sign-in via OAuth and address autocomplete.
• Cloudflare — hosting and edge delivery.

Cookies and tracking

We use session cookies to keep you signed in. We do not use third-party advertising cookies. We may use a first-party analytics tool to understand how pages are used in aggregate — no individual tracking profiles are built or sold.

Data retention

We retain your account data for as long as your account is active. If you cancel and request deletion, we will remove your personal information within 30 days, except where we are required to retain records for tax or legal compliance purposes.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@donatecrate.com. If you are a resident of California or the EU, additional rights may apply under CCPA or GDPR respectively — contact us and we will respond within 30 days.

Children

DonateCrate is not directed at children under 13. We do not knowingly collect personal information from anyone under 13.

Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated by email to active subscribers. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at support@donatecrate.com.