Introduction
Matana LLC, a Florida limited liability company ("Matana," "we," "us," "our"), operates a donation platform that connects donors with nonprofit organizations. We take the privacy of donors and the nonprofits we work with seriously, and this policy explains what we collect, why, and what choices you have.
This policy applies to information we collect through our website, our donation pages, and any related services we provide.
Information we collect
Information you give us directly
- Account information for nonprofit administrators, including name, email, organization name, and login credentials.
- Donation details including donor name, email, billing address, donation amount, and any message or acknowledgment preferences you provide at the time of giving.
- Communications when you contact us through our contact form, by email, or through other support channels.
Information we collect automatically
- Technical data such as IP address, browser type, operating system, device identifiers, and timestamps for requests to our services.
- Usage data such as pages visited, links clicked, and referring URLs to help us improve the platform.
Information we receive from third parties
When you make a donation, our payment processor (Stripe) sends us confirmation of the transaction along with limited details such as the last four digits of the card, card brand, and billing country. When you recommend a grant from a donor-advised fund, the sponsoring organization sends us the information needed to confirm and record the grant.
How we use information
- To process and acknowledge donations.
- To create and manage nonprofit accounts and donation pages.
- To send transactional messages (receipts, confirmations, account notices) and, with consent where required, marketing communications.
- To detect, prevent, and respond to fraud, abuse, or violations of our terms.
- To improve and develop the platform, including analytics, research, and product changes.
- To comply with our legal obligations and respond to lawful requests.
Legal bases for processing
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract — to process donations, run accounts, and deliver receipts;legitimate interests — to secure the platform, prevent fraud, and improve the product, balanced against your rights;consent — for marketing where required and for non-essential cookies; and legal obligation — for tax, accounting, and compliance records. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.
Sharing and disclosure
We share information only as needed to operate the service:
- With the receiving nonprofit — when you donate, the recipient organization receives the information needed to fulfill and acknowledge your gift.
- With service providers — payment processing (Stripe), donor-advised fund sponsors where you recommend a grant, hosting and infrastructure, email delivery, and analytics. These vendors process data on our behalf under contracts that limit their use of it to providing the service.
- For legal reasons — when required by applicable law, regulation, legal process, or government request, or to protect the rights, property, or safety of Matana, our users, or others.
- In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.
Payments and donations
Card and bank account details are collected and processed directly by Stripe, our PCI-DSS compliant payment processor. Matana never receives or stores full card numbers on its own servers. We retain donation records (amount, date, currency, recipient, and donor identity) as required for receipts, accounting, and tax purposes.
Cookies and tracking
We use first-party cookies and similar technologies to keep you signed in, remember preferences, and measure how the platform is used. Our payment processor sets cookies needed to complete a donation and to detect fraud. We do not use advertising cookies or allow third parties to track you across other sites.
You can control cookies through your browser settings, and we honor Global Privacy Control signals where required. Disabling essential cookies will prevent you from signing in or completing a donation.
Data retention
We retain personal information for as long as needed to provide the service and to meet our legal obligations. In practice: donation and financial records are kept for at least seven years for tax and accounting purposes; account records are kept for the life of the account and up to two years after closure; support correspondence is kept for up to three years; and technical logs are kept for up to twelve months. Where information is no longer needed, we delete or anonymize it.
Your rights
Depending on where you live, you may have rights regarding your personal information, including:
- Access to a copy of the information we hold about you.
- Correction of inaccurate information.
- Deletion of personal information, subject to exceptions.
- Objection or restriction of certain processing.
- Portability of information you provided to us.
- Withdrawal of consent where processing is consent-based.
To exercise these rights, contact us at privacy@matanagiving.com. We may need to verify your identity before fulfilling a request, and we respond within the timeframe required by applicable law (generally 30 to 45 days). We will not discriminate against you for exercising these rights.
If your information was given to a nonprofit through a donation, that organization is an independent controller of its own donor records — contact them directly for requests about how they use your information.
US state privacy rights
Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have the rights listed above, including the right to know, delete, correct, and obtain a portable copy of their personal information. We do not sell personal information or process it for targeted advertising or profiling with legal effects, so no opt-out of those activities is needed.
You may use an authorized agent to submit a request on your behalf with proof of authorization. If we deny your request, you may appeal by replying to our decision or writing to privacy@matanagiving.com with "Privacy appeal" in the subject line; we will respond within 45 days, and you may contact your state attorney general if you are not satisfied.
Security
We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and routine reviews of our systems. No system is perfectly secure, and we cannot guarantee absolute security.
Children's privacy
Our services are not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
International transfers
We operate from the United States, and information we collect is processed there and in other countries where our service providers operate. Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism. Contact us for a copy of the safeguards that apply to your information.
Changes to this policy
We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page and, for material changes, notify account holders by email or in the product before the change takes effect.
Contact us
Questions or requests regarding this policy can be sent to privacy@matanagiving.com or through our contact page.