Legal
Privacy Policy
Last updated: August 11, 2026
The short version: we collect what's needed to prepare your filings and run your back office, we never collect Social Security numbers, we never sell your data, and your documents live in private storage that only you (and staff helping you, with an audit trail) can reach.
What we never collect
We never collect or store Social Security numbers. Ever. The EIN application (Form SS-4) asks for a responsible party's SSN, so our walkthrough is guidance-only: we show you what each field means, and you enter your SSN directly on the IRS website. It never passes through or rests in our systems. There is no field in CauseCentral that accepts one.
What we collect
Account basics
Your name, email address, and password (stored hashed — we can't read it).
Organization details
Your nonprofit's name, mailing address, state of incorporation, mission description, board member names and addresses (required on public filings), and EIN once you have one. EINs and IRS determination data are public information.
Filing answers
The answers you give in our questionnaires — they exist to fill in your documents and drive your compliance calendar.
Payment details
Handled by Stripe, our payment processor. Card numbers go directly to Stripe; we never see or store them.
Usage information
Standard logs (pages visited, actions taken) that help us fix bugs and improve the product.
How we use it
To prepare the documents and filings you direct us to prepare, run your compliance calendar and reminders, provide the Operate suite services you subscribe to, send you service email (including the renewal reminder before every charge), and improve the product. That's the list.
We do not sell your data. Not to advertisers, not to data brokers, not "shared with partners for marketing purposes." Your donor records and filing answers are your organization's business, not our inventory.
Who touches it on our behalf
We use a small set of infrastructure providers to run the service: Stripe (payments), Resend (email delivery), and our hosting and database providers (Vercel, Neon, and Render). Each processes data only to provide their service to us. Beyond that, we disclose information only when you direct a filing to a government agency, or when the law genuinely requires it.
Where your documents live
Generated documents and uploads are kept in private storage — never on public URLs. Access happens through short-lived signed links, and every access is logged. If a staff member opens one of your documents to help with your case, that access is in the audit trail.
Your choices and rights
You can access and update your information in your account, export your documents at any time, and ask us to delete your account and its data — we'll do it, keeping only what the law requires us to retain (like payment records). Marketing email has an unsubscribe link that works on the first click; service email (filing status, renewal reminders, legal notices) comes with the account.
Changes and contact
If we materially change this policy, we'll email you before the change takes effect. Questions or requests: support@causecentral.org.