Almonry is donor management and online giving software made by MADE180 Digital Solutions (“MADE180,” “we,” “us”). This policy explains what information we collect, how we use it, and the choices you have. It covers this website (almonry.app), the Almonry application (dashboard.almonry.app), and the public giving pages that nonprofits publish through Almonry.
Who this policy applies to
Three kinds of people interact with Almonry, and we treat their information differently.
- Visitors to this website, including people who request early access.
- Staff users at nonprofit organizations (“Customers”) who sign in to manage donors, gifts, and outreach.
- Donors and constituents whose information a Customer stores in Almonry, or who give through a Customer’s giving page.
For donor and constituent information, the Customer decides what to collect and how to use it. Almonry processes that information on the Customer’s behalf and under the Customer’s instructions. If you are a donor with a question about your record, contact the organization you gave to. We will help them respond.
Information we collect
From website visitors
When you request early access we collect your name, organization, email address, and anything you choose to tell us about the tools you use today. We use it to reply to you and to plan onboarding. We do not run advertising trackers on this site.
From staff users
Sign-in is handled by Amazon Cognito. We store your name, email address, the organizations you belong to, and your role. We keep an audit log of significant actions taken in the application, such as merging records or changing settings, so that Customers can see who changed what.
From donors and constituents
Customers store the information they need to steward their donors: names, contact details, addresses, giving history, pledges, relationships, household links, notes, and communication preferences. When you give online, we record the gift amount, date, designation, and your contact details so the organization can issue a tax receipt.
We never see or store full card numbers. Payment details are entered on pages hosted by Stripe, our payment processor. Almonry stores only Stripe’s identifiers and the last four digits of the card so receipts and refunds can be matched to a gift.
Automatically
Our servers record ordinary request logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting. Giving pages may record the campaign source that brought a donor to the page (for example, the link in an email) so the organization can see which appeals work. We use session cookies to keep you signed in and to remember your active organization. We do not use third-party advertising cookies.
How we use information
- To provide the service: recording gifts, issuing receipts, sending outreach a Customer composes, and producing reports.
- To secure the service: detecting abuse, rate-limiting, and investigating incidents.
- To support Customers: answering questions and diagnosing problems, which may involve looking at a Customer’s data with their permission.
- To improve Almonry, using aggregate usage patterns that do not identify individual donors.
- To meet legal obligations, such as responding to lawful requests.
We do not sell personal information, and we do not use donor data for advertising.
The Dori assistant
Almonry includes an assistant, Dori, that answers questions about a Customer’s data and drafts messages. Dori runs on models provided by Anthropic. When a staff user asks Dori a question, the relevant portion of that organization’s data is sent to Anthropic to produce the answer. Anthropic does not use that data to train its models. Dori drafts; a person always reviews before anything is sent.
Email and text messaging
Customers send email, text messages, and printed letters to their donors through Almonry. Every email includes the sending organization’s postal address and a working unsubscribe link. Text messages are sent only to people who have opted in, and replying STOP ends them. Almonry enforces these consent rules when an audience is built, and a person marked “do not contact” is excluded from everything. Delivery status (sent, delivered, bounced, opened) is recorded so the organization can keep its list healthy.
Service providers
We use a small number of providers to run Almonry. Each receives only what it needs.
| Provider | Purpose |
|---|---|
| Stripe | Payment processing and payouts to the nonprofit’s bank account. |
| Amazon Web Services | Hosting, sign-in (Cognito), and file storage. |
| Neon | Database hosting. |
| Resend | Sending email receipts and outreach. |
| Twilio | Sending text messages, where a Customer has enabled them. |
| Anthropic | Powering the Dori assistant. |
| Canva | Optional design integration, described below. |
Canva integration
Staff users can connect their own Canva account to Almonry to use Canva designs as campaign covers, fundraiser images, logos, and email graphics. This connection is optional and belongs to the individual user, not the organization.
- What we access. With your permission we read your Canva profile (to show which account is connected), the list of your designs and their thumbnails (to show a picker), and the content of a design you choose (to export it as an image). We do not write to your Canva account or upload anything into it.
- What we store. The access and refresh tokens Canva issues are stored encrypted. Exported images are copied to Almonry’s storage so they keep displaying on your pages even if the design later changes. We store the Canva design identifier alongside the image so “Edit in Canva” can reopen it.
- Disconnecting. You can disconnect Canva from Almonry at any time, which deletes the stored tokens. You can also revoke Almonry from your Canva account settings. Images already placed on your pages remain until you remove them.
Our use of information received from Canva is limited to providing this feature and follows Canva’s developer terms.
Retention
Customer data is retained for as long as the Customer’s account is active. When an account is closed, the Customer may export its data, after which we delete it within 90 days, except where we must keep records to meet legal or financial obligations (for example, payment records tied to Stripe). Request-access submissions are kept until we have responded and onboarded or declined, then deleted.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to the people who operate the service. Every organization’s data is separated from every other organization’s at the database level. Third-party tokens are encrypted with keys held separately from the data. Card entry is Stripe-hosted, which keeps Almonry within the simplest PCI scope. No system is perfectly secure; if we learn of a breach that affects your information, we will notify affected Customers without undue delay.
Your choices and rights
- Donors: to access, correct, or delete your record, or to stop receiving messages, use the unsubscribe link in any email, reply STOP to any text, or contact the organization directly.
- Staff users: you can update your profile in the application and ask your organization’s administrator to remove your access.
- Website visitors: email us to have your request-access submission deleted.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR. We will honor those requests, working with the Customer where they are the controller of your data.
Children
Almonry is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.
International visitors
Almonry is operated from the United States and data is stored there. If you use it from elsewhere, you consent to your information being transferred to and processed in the United States.
Changes to this policy
We will post any changes here and update the effective date. For material changes we will notify Customers by email before they take effect.
Contact
MADE180 Digital Solutions
Louisville, Kentucky
privacy@almonry.app
See also our Terms of Service.