Privacy Policy
Last updated: May 26, 2026
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, make a donation, or contact us for support. This includes names, email addresses, payment information, and organizational details.
Organizations that use HelpYouSponsor may also store donor, sponsorship, recipient or beneficiary, donation, stewardship note, activity log, saved view, saved report, and administrative account information in the Service.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process donations and sponsorship payments
- Send transaction confirmations and receipts
- Respond to support requests
- Protect against fraud and abuse
- Power authorized integrations and connected apps that your organization chooses to use
3. Connected Apps and AI Assistants
If your organization enables a connected app, API integration, or AI assistant such as the HelpYouSponsor ChatGPT or Codex connector, the Service may share HYS data with that connected service at the request of an authorized admin. The connector is designed to return only data available to the connected admin under that admin's HYS workspace permissions.
Depending on the admin's request and permissions, connected apps may access donor names, contact details, household or profile fields, giving history, commitments, sponsorship relationships, custom donor fields, recipient or beneficiary profile fields, program membership, sponsorship status, donation records, payment/refund status, saved filters, saved reports, stewardship notes, and activity-log details.
4. Data Security
We implement bank-level encryption (AES-256) for all data at rest and TLS 1.3 for data in transit. We are PCI DSS compliant for all payment processing and conduct regular third-party security audits.
5. Data Sharing
We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data with service providers who assist us in operating the platform (e.g., payment processors) under strict confidentiality agreements.
We may also share data with third-party services that your organization or an authorized admin connects to HelpYouSponsor, such as payment processors, email tools, reporting tools, or AI assistant connectors. Those services process data according to their own terms and privacy policies.
6. Google Workspace Data
If you connect a Google account to HelpYouSponsor, we request access only to the Google data needed to provide email and calendar relationship sync.
Depending on the features enabled by your organization, HelpYouSponsor may access your Google account email address and profile, read Gmail message metadata and message content, send email only when you explicitly initiate a send action in HelpYouSponsor, read Google Calendar event metadata and event details, and create or update Google Calendar events created from HelpYouSponsor only after you explicitly schedule or update them in HelpYouSponsor.
HelpYouSponsor uses this Google user data to match emails and meetings to existing donor records, display relationship history, support follow-up workflows, and perform staff-initiated email or calendar actions. HelpYouSponsor does not sell Google user data, use it for advertising, or use it to train generalized AI models.
Google-derived email bodies and calendar descriptions are private by default. Your organization may configure whether metadata or selected content is visible to other authorized staff. HelpYouSponsor stores OAuth tokens encrypted, does not expose tokens to the frontend, and removes tokens when an account is disconnected.
HelpYouSponsor retains synced Google-derived data only as needed to provide the service, honor your organization's retention settings, maintain audit and security records, and comply with legal obligations. You may disconnect your Google account in HelpYouSponsor at any time. You or your organization may request deletion of synced Google-derived data, subject to backup, audit, and legal retention requirements.
HelpYouSponsor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. GDPR Compliance
For users in the European Economic Area, we comply with the General Data Protection Regulation. You have the right to access, correct, delete, or export your personal data at any time.
8. Data Retention
We retain your data for as long as your account is active. Upon account termination, you may request data export. Data is permanently deleted 30 days after account closure unless legally required to retain it.
9. Cookies
We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes.
10. Contact
For privacy-related inquiries, please use our contact form.