Privacy Policy

This policy explains what information FundWillow School Partners("FundWillow," "we," "us") collects when a school, booster club, partner, or donor uses fundwillow.com (the "Service"), and how we use, share, and protect it. By using the Service you agree to this policy.

1. Information we collect

From schools, booster clubs, and their team members

Account identifiers: name, email, phone, role, school affiliation.
Organization data: school name, address, logo, bank routing via Stripe Connect, tax information if provided.
Campaign data: project names, targets, volunteer rosters, templates, call scripts, recordings, uploaded files.
Outreach data: lead lists, pledges, activity logs, opt-ins and opt-outs.
Usage telemetry: pages viewed, actions taken, error reports, approximate location derived from IP.

From donors and recipients of outreach

Contact details provided to the school: business name, contact name, email, phone, mailing address.
Donation records: amount, frequency, payment method token (never raw card data — that stays with Stripe).
Interaction history: calls placed, SMS sent, email opens/clicks, unsubscribe state.

2. How we use it

To provide and operate the Service, including powering dialers, SMS, email, mailer printing, and donation processing.
To keep accounts secure — authentication, fraud detection, anti-abuse, rate limiting.
To meet legal requirements (CAN-SPAM, TCPA, A2P 10DLC, state two-party call-recording laws, PCI).
To improve the Service through aggregate analytics and product research.
To communicate with you about your account, new features, and service incidents.

We share only what a vendor needs to perform its role. Each processor is bound by a data-processing agreement. Core processors include:

Stripe — donation processing and payouts.
Twilio — SMS and voice delivery, A2P 10DLC registration.
Amazon Web Services — hosting, databases, SES email delivery.
Handwrytten — printed-mailer fulfillment.
Apollo — third-party business-contact lookups initiated by a school.
Error and analytics tools — to triage defects and understand usage.

We do not sell personal information. We do not share donor lists between schools. We may disclose information when required by law, to enforce our Terms, or to protect rights and safety.

4. Google user data (connected Gmail accounts)

A school admin can connect their own Gmail account to FundWillowthrough Google OAuth so that outreach emails are sent from the school's own address (for example, coach@school.org) instead of from FundWillow's servers. This section describes exactly what Google user data we access and how we handle it.

What we request

Gmail send permission — the https://www.googleapis.com/auth/gmail.send scope, which allows FundWillow to send email as you.
Basic sign-in information — the openid, email, and userinfo.email scopes, which tell us which Google account you connected.

How we use it

We use the Gmail send permission for one purpose: to send the sponsor-outreach and campaign emails you compose inside FundWillow, from your connected address, when you initiate sending.
We use your email address to display which account is connected and to route sends to the right account.
We do not read, list, search, download, or store the content of your existing Gmail messages, mailbox, contacts, or attachments. We do not request any Gmail read scope, so we have no access to them.

How we store it

Connecting your account gives FundWillow OAuth tokens issued by Google. We store those tokens encrypted at rest using AWS Key Management Service (envelope encryption) and use them only to obtain authorization to send on your behalf. You can disconnect your Gmail account at any time from within FundWillow, which revokes the stored grant, and we honor revocation made from your Google account settings.

We do not sell Google user data, do not share it with third parties, do not use it for advertising, and do not use it to train AI or machine-learning models. We do not allow humans to read this data except (a) with your explicit consent, (b) as necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) in aggregated and anonymized form for internal operations.

Users are prohibited from using a connected Gmail account to send email to any contact who has not provided prior consent to receive sales or commercial email. This prohibition applies to every recipient, including business contacts, and applies regardless of how that contact's address was obtained.

In particular, a contact sourced from a third-party business-contact database is never treated as having consented by virtue of having been sourced. Contacts enter FundWillow with no email consent recorded and cannot be emailed. Consent must be recorded against that contact before any email may be sent to it from a connected Gmail account.

FundWillow enforces this restriction technically as well as contractually: a send is refused for any recipient with no recorded consent, and a recipient who unsubscribes or otherwise opts out is suppressed and is not emailed again.

Using FundWillow to send unsolicited sales or commercial email through a connected Gmail account violates this policy, our Acceptable Use Policy, and the Google API Services User Data Policy, and is grounds for suspension of the connected account, the FundWillow account, or both.

Limited Use

FundWillow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Text messaging (SMS)

Schools using FundWillow may send text messages to supporters who have given prior express consent, either verbally during a call from the school or by checking a consent box on the school's donation or sponsorship page. Consent is never a condition of making a donation or a purchase.

Message frequency. Frequency varies and depends on the school's activity — typically a few messages per month.
Message and data rates may apply. Your mobile carrier's standard messaging and data charges apply to messages you send and receive.
Stopping messages. Reply STOP to any message to stop texts from that school immediately, or HELP for assistance. Each school sends from its own number, so STOP applies to that school and leaves any other school you have separately consented to unaffected.
Mobile numbers are not shared. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Phone numbers collected for text messaging are used only to deliver the messages you consented to, and are disclosed only to the messaging provider that transmits them on the school's behalf. Mobile opt-in data and consent records are never sold, rented, or shared for third-party marketing.

6. Your choices

Unsubscribe. Every outreach email carries a one-click unsubscribe. Every SMS accepts STOP to opt out immediately.
Access / correction / deletion. Contact matt.huszar@luxedo.com to request a copy, correction, or deletion of your personal data. We honor verified requests within 30 days, subject to retention obligations below.
California, Colorado, Connecticut, Utah, Virginia residents. You have additional rights (to know, to delete, to correct, to opt out of sale/sharing or profiling). We do not sell or share data for targeted advertising.

7. Retention

Account, campaign, and donation records are retained while the account is active and for up to seven years afterward to satisfy tax, audit, and anti-fraud obligations. Outreach logs are retained for 24 months unless a school requests earlier deletion.

8. Security

We use encryption in transit (TLS 1.2+) and at rest, least-privilege access controls, and independent infrastructure tenancy per school. Payment data is handled by Stripe — FundWillow never stores card numbers. No system is perfectly secure; we encourage strong passwords and promptly reporting suspicious activity.

9. Children

Student volunteers may use FundWillow under the supervision of their school. We do not knowingly collect personal information from a child under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We will post updates on this page and, for material changes, notify account owners by email. Continued use of the Service after the effective date of a change constitutes acceptance.

11. Contact

FundWillow School Partners · matt.huszar@luxedo.com