1. Overview
HopeWave Foundation (“HopeWave”, “we”, “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have. It applies to the HopeWave website, applications, and related services (collectively, the “Services”).
2. Information we collect
Information you provide
- Account information: name, email address, password, profile photo.
- Campaign content: story text, photos or videos, fundraising goal, beneficiary information.
- Verification information: for Creators, government-issued ID, proof of address, and bank account details required for withdrawals.
- Donation information: amount, payment method (processed by our payment provider), optional message.
- Communications: messages you send through our contact form, support requests.
Information collected automatically
- Device and usage data: IP address, browser type, operating system, pages visited, referring URL, timestamps.
- Cookies and similar technologies: see our Cookie Policy.
Information from third parties
- Single sign-on: if you sign in with Google or Apple, we receive your name and email address from the provider.
- Payment processors: confirmation of donation transactions and fraud signals.
3. How we use your information
We use your information to:
- Provide, operate, and improve the Services;
- Process donations and withdrawals;
- Verify identity and prevent fraud, abuse, and illegal activity;
- Send transactional emails (donation receipts, campaign updates, security alerts);
- Send marketing communications, only when you have opted in;
- Respond to your inquiries and customer support requests;
- Comply with legal obligations and enforce our Terms of Service.
4. Legal bases for processing (EU/UK)
If you are in the European Economic Area or the United Kingdom, our legal bases for processing your information are:
- Performance of a contract: when processing is necessary to provide the Services to you;
- Legitimate interests: for security, fraud prevention, and improving our Services;
- Consent: for marketing emails, optional cookies, and certain features;
- Legal obligation: when required to comply with applicable law.
5. Sharing with third parties
We share your information only as follows:
- Service providers: payment processors, email delivery providers, hosting providers, analytics providers, all bound by confidentiality and data protection obligations.
- Public campaign content: the campaign story, creator name (or chosen display name), and donor messages (where consented) are publicly visible.
- Legal compliance: in response to valid legal requests, court orders, or to protect our rights or the safety of others.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.
We do not sell your personal information.
6. International data transfers
HopeWave is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States and other jurisdictions. We rely on appropriate safeguards such as Standard Contractual Clauses to protect your information when it is transferred internationally.
7. Data retention
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.
Specifically: account data is retained while your account is active and for a limited period after deletion; transaction records are retained for at least seven years for tax and accounting purposes.
8. Your rights
Depending on where you live, you may have the right to:
- Access a copy of the personal information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your information, subject to certain exceptions;
- Restrict or object to certain processing;
- Portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with a data protection authority.
To exercise any of these rights, contact us. We will respond within the timeframes required by applicable law.
9. Cookies and tracking
We use cookies and similar technologies for essential site functionality, analytics, and (with your consent) personalization. For details, see our Cookie Policy.
10. Security
We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
11. Children’s privacy
The Services are not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” at the top of this page and, for material changes, notify you by email or through the Services.
13. Contact
Questions about this Privacy Policy or about your personal information? Email us at privacy@hopewave.foundation or use our contact form.