Privacy Policy

Account information (name, email, organization profile), billing information processed by Stripe, usage information (features used, credit consumption, diagnostic logs), and the content you create in the Service.

Connected-service data — such as CRM records, spreadsheets, and email — is accessed through the integration layer within the scopes you grant. We access it to provide the features you use and do not copy it into a secondary database of record.

We use information to operate and improve the Service, provide support, process payments, meter credit usage, and send transactional messages. We do not sell personal information, and we do not use your content or connected data to train AI models — ours or any third party’s.

When you use AI features, the relevant prompt and context are sent to the model provider that fulfills the request (for example fal.ai for media generation, or the provider behind an API key you supply). We pass through only what the request requires, and our provider agreements prohibit training on your data.

If you run donation pages or events through Cause Command, we process your donors’ names, emails, and payment metadata as your service provider. Card details are handled entirely by Stripe and never touch our servers. You control this data and are responsible for your own privacy commitments to your constituents.

We share information only with subprocessors that help us run the Service (hosting, payments, email delivery, AI model providers), each bound by data-protection agreements; with third-party services you explicitly connect; and where required by law.

Credentials for connected services are encrypted at rest, all traffic is encrypted in transit, and access to production systems is restricted and logged. No system is perfectly secure; we notify affected customers of qualifying incidents without undue delay.

We retain your data while your account is active. When you delete your account, content and connections are deleted within 30 days, except records we must keep for legal or accounting purposes. You may request export or deletion at any time.

Depending on where you are located, you may have rights to access, correct, delete, or port your personal information, and to object to certain processing. Contact us at privacy@communityboost.org to exercise them; we respond within the timelines required by applicable law.

We will announce material changes to this policy by email or in-product notice before they take effect. The effective date at the top of this page always reflects the current version.