Privacy Policy

Welcome to Volly (the “Platform”). We are committed to maintaining the trust of our partner Organizations, Volunteers, and Donors. This Privacy Policy describes how Volly (“we,” “us,” or “our”) collects, uses, and discloses personal information in connection with our website (www.volly.org) and our fundraising services.

By using the Platform, you expressly consent to our collection and use of your information as described below.

1. Who We Are

Volly is a technology platform operated by Valens Impact Lab, located in San Francisco, CA. We provide the digital infrastructure for non-profit organizations to manage volunteers and raise funds.

For the purposes of applicable U.S. privacy laws:

We act as the Data Controller for information used to manage user accounts.
We act as a Service Provider for our partner Organizations when processing donations and managing their specific campaign data.

2. Personal Data We Collect

A. Account & Profile Information

Organization Admins: We collect legal entity names, EIN/Tax IDs, physical addresses, and verification documents (e.g., Board Overviews, Impact Reports).
Volunteers: We collect names, emails, profile photos, previous volunteering history, and social media links.
Donors: We collect names and email addresses.

B. Transaction & Financial Data

To facilitate fundraising via Stripe Connect, we collect data regarding:

Donation amounts, timestamps, and campaign associations.
Platform Fees: We record the 10% hardcoded platform fee and any optional tips provided to Volly.

Note: Full credit card numbers are processed directly by Stripe and are never stored on our servers.

C. Authentication via Third-Parties

If you choose to register via Google, Facebook, or Apple ID, we receive your name, email address, and public profile picture from those services to populate your Volly account.

D. Technical Data & Tracking

Regardless of account status, we collect technical data via cookies, Google Analytics, Facebook Pixels, and heatmaps (e.g., Hotjar):

IP addresses, browser types, and device identifiers.
Usage patterns, page visit durations, and referral paths to improve site performance.

3. How We Use Your Information

We use your data to:

Verify Organizations: Ensuring all NGOs on our platform are legally registered.
Process Funds: Using a "Hold and Transfer" model via Stripe Connect, ensuring funds are released to Organizations only upon the Campaign End Date.
Facilitate Impact: Allowing Volunteers to create campaigns and Organizations to approve them.
Communication: Sending transactional receipts and "Impact Updates." You may opt-out of marketing/impact updates at any time.

4. Information Displayed Publicly & Anonymity

Public Profiles

To ensure transparency, Volunteer profiles and Campaign details are public. This includes the Volunteer’s name, photo, and mission statement.

Donor Privacy (The Masking Logic)

We respect your right to privacy.

Public Console: If you choose to donate Anonymously, your name will not appear on the "Supporters" list.
Transparency Reports: On public-facing reports, your name will be masked (e.g., $$JS*N$$**).
Internal Records: Even if you choose to be anonymous publicly, your full name and email are shared with the Organization Admin for the sole purpose of issuing legal Charitable Contribution Receipts.

5. Fees and Financial Transparency

Platform Fee: Volly retains a 10% platform fee on all donations to cover operational costs.
Voluntary Tips: Donors have the option to provide a "Tip" directly to Volly. Tips are separate from campaign donations and are used to maintain the Platform’s technology.
Stripe Fees: Standard third-party processing fees apply and are deducted before the final payout to the Organization.

7. Your Rights (USA 2026 Standards)

Under the CCPA/CPRA and other modern state laws, you have the following rights:

Right to Access: You may request a report of all personal data we hold about you.
Right to Delete: You may request account deletion. Note: We must retain transaction data for 7 years per IRS financial regulations.
Global Privacy Control (GPC): Our site honors GPC signals. If you have "Do Not Track" enabled, we will limit non-essential tracking.

8. Age Restrictions

Volly is intended for users 18 years of age and older. Due to the financial nature of the platform and the requirement for legal contracts via Stripe, we do not allow individuals under 18 to act as Donors or Volunteers. We do not knowingly collect data from children under 13.

9. Security & Retention

We use SSL/TLS encryption for all data in transit. We retain financial records for 7 years to satisfy tax and audit requirements. Non-financial data is deleted or anonymized within 30 days of an account closure request.

10. Contact Us

If you have questions about this policy or wish to exercise your data rights, contact:

Volly Privacy Office

Email: privacy@volly.org

Address: 25 Taylor Street, San Francisco, CA 94102, USA

By using the Platform, you expressly consent to our collection and use of your information as described below.

1. Who We Are

Volly is a technology platform operated by Valens Impact Lab, located in San Francisco, CA. We provide the digital infrastructure for non-profit organizations to manage volunteers and raise funds.

For the purposes of applicable U.S. privacy laws:

We act as the Data Controller for information used to manage user accounts.
We act as a Service Provider for our partner Organizations when processing donations and managing their specific campaign data.

2. Personal Data We Collect

A. Account & Profile Information

Organization Admins: We collect legal entity names, EIN/Tax IDs, physical addresses, and verification documents (e.g., Board Overviews, Impact Reports).
Volunteers: We collect names, emails, profile photos, previous volunteering history, and social media links.
Donors: We collect names and email addresses.

B. Transaction & Financial Data

To facilitate fundraising via Stripe Connect, we collect data regarding:

Donation amounts, timestamps, and campaign associations.
Platform Fees: We record the 10% hardcoded platform fee and any optional tips provided to Volly.

Note: Full credit card numbers are processed directly by Stripe and are never stored on our servers.

C. Authentication via Third-Parties

If you choose to register via Google, Facebook, or Apple ID, we receive your name, email address, and public profile picture from those services to populate your Volly account.

D. Technical Data & Tracking

Regardless of account status, we collect technical data via cookies, Google Analytics, Facebook Pixels, and heatmaps (e.g., Hotjar):

IP addresses, browser types, and device identifiers.
Usage patterns, page visit durations, and referral paths to improve site performance.

3. How We Use Your Information

We use your data to:

Verify Organizations: Ensuring all NGOs on our platform are legally registered.
Process Funds: Using a "Hold and Transfer" model via Stripe Connect, ensuring funds are released to Organizations only upon the Campaign End Date.
Facilitate Impact: Allowing Volunteers to create campaigns and Organizations to approve them.
Communication: Sending transactional receipts and "Impact Updates." You may opt-out of marketing/impact updates at any time.

4. Information Displayed Publicly & Anonymity

Public Profiles

To ensure transparency, Volunteer profiles and Campaign details are public. This includes the Volunteer’s name, photo, and mission statement.

Donor Privacy (The Masking Logic)

We respect your right to privacy.

Public Console: If you choose to donate Anonymously, your name will not appear on the "Supporters" list.
Transparency Reports: On public-facing reports, your name will be masked (e.g., $$JS*N$$**).
Internal Records: Even if you choose to be anonymous publicly, your full name and email are shared with the Organization Admin for the sole purpose of issuing legal Charitable Contribution Receipts.

5. Fees and Financial Transparency

Platform Fee: Volly retains a 10% platform fee on all donations to cover operational costs.
Voluntary Tips: Donors have the option to provide a "Tip" directly to Volly. Tips are separate from campaign donations and are used to maintain the Platform’s technology.
Stripe Fees: Standard third-party processing fees apply and are deducted before the final payout to the Organization.

7. Your Rights (USA 2026 Standards)

Under the CCPA/CPRA and other modern state laws, you have the following rights:

Right to Access: You may request a report of all personal data we hold about you.
Right to Delete: You may request account deletion. Note: We must retain transaction data for 7 years per IRS financial regulations.
Global Privacy Control (GPC): Our site honors GPC signals. If you have "Do Not Track" enabled, we will limit non-essential tracking.

8. Age Restrictions

9. Security & Retention

10. Contact Us

If you have questions about this policy or wish to exercise your data rights, contact:

Volly Privacy Office

Email: privacy@volly.org

Address: 25 Taylor Street, San Francisco, CA 94102, USA

Volly Privacy Policy

1. Who We Are

2. Personal Data We Collect

A. Account & Profile Information

B. Transaction & Financial Data

C. Authentication via Third-Parties

D. Technical Data & Tracking

3. How We Use Your Information

4. Information Displayed Publicly & Anonymity

Public Profiles

Donor Privacy (The Masking Logic)

5. Fees and Financial Transparency

7. Your Rights (USA 2026 Standards)

8. Age Restrictions

9. Security & Retention

10. Contact Us

Table of Contents

Volly Privacy Policy

1. Who We Are

2. Personal Data We Collect

A. Account & Profile Information

B. Transaction & Financial Data

C. Authentication via Third-Parties

D. Technical Data & Tracking

3. How We Use Your Information

4. Information Displayed Publicly & Anonymity

Public Profiles

Donor Privacy (The Masking Logic)

5. Fees and Financial Transparency

7. Your Rights (USA 2026 Standards)

8. Age Restrictions

9. Security & Retention

10. Contact Us

Table of Contents

Volly Privacy Policy

1. Who We Are

2. Personal Data We Collect

A. Account & Profile Information

B. Transaction & Financial Data

C. Authentication via Third-Parties

D. Technical Data & Tracking

3. How We Use Your Information

4. Information Displayed Publicly & Anonymity

Public Profiles

Donor Privacy (The Masking Logic)

5. Fees and Financial Transparency

6. Data Sharing & Disclosure

7. Your Rights (USA 2026 Standards)

8. Age Restrictions

9. Security & Retention

10. Contact Us

Table of Contents

Volly Privacy Policy

1. Who We Are

2. Personal Data We Collect

A. Account & Profile Information

B. Transaction & Financial Data

C. Authentication via Third-Parties

D. Technical Data & Tracking

3. How We Use Your Information

4. Information Displayed Publicly & Anonymity

Public Profiles

Donor Privacy (The Masking Logic)

5. Fees and Financial Transparency

6. Data Sharing & Disclosure

7. Your Rights (USA 2026 Standards)

8. Age Restrictions

9. Security & Retention

10. Contact Us

Table of Contents