Privacy Policy

Introduction

Rise & Roll Foundation ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit riseandrollfoundation.org or use our services.

Information We Collect

Information you provide

• Account information: Name, email address, and profile details when you create an account via Google or Apple Sign-In.
• Application information: Service branch, years of service, contact details, address, and equipment needs when applying for assistance.
• Donation information: Name, email, and payment details when making a donation. Payment processing is handled by Stripe — we do not store credit card numbers.
• Contact form submissions: Name, email, subject, and message content.
• Supporting documents: Medical records, service verification, and identification documents uploaded as part of your application.

Information collected automatically

• Basic usage data (pages visited, time on site) through standard web server logs.
• We do not use tracking cookies, advertising pixels, or third-party analytics services.

How We Use Your Information

• To process and fulfill equipment requests.
• To verify eligibility (service-connected disability status).
• To process donations and issue tax receipts.
• To communicate with you about your application or donation.
• To respond to contact form inquiries.
• To comply with legal obligations.

How We Protect Your Information

We use industry-standard security measures to protect your data. Application data and documents are stored securely through our database provider (Convex) with encryption at rest and in transit. Access to applicant records is restricted to authorized board members and administrators.

Information Sharing

We do not sell, trade, or rent your personal information. We may share information with:

• Service providers: Stripe (payment processing), Convex (database hosting), Vercel (website hosting), and Google/Apple (authentication).
• Legal requirements: When required by law, subpoena, or government request.
• Grant reporting: Aggregated, anonymized data may be included in grant applications and reports. Individual information is never shared without consent.

Your Rights

You may:

• Request access to your personal data.
• Request correction or deletion of your data.
• Withdraw consent for data processing.
• Request a copy of your data in a portable format.

To exercise these rights, contact us at [email protected].

Data Retention

We retain application data for as long as necessary to fulfill our mission and meet legal requirements. Donation records are retained for seven years for tax purposes. You may request deletion of your account and associated data at any time.

Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

Questions about this privacy policy? Contact us at [email protected].