Grovefund (“Grovefund,” “we,” “us,” or “our”) is a project of Adkins Labs, organized as a 501(c)(3) nonprofit. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, and the choices available to you.
1. Information We Collect
a. Information you provide
- Account information — name, email address, hashed password (we never store your password in plain text).
- Child fund information— the child's first name, date of birth, an optional short bio, and the savings goal you set. You choose whether this information is public (viewable by anyone with the link) or private.
- Contribution information— the contributor's name, optional email, amount, occasion tag, and optional message, collected when a contribution is made.
- Sponsorship applications — company name, contact details, and proposed sponsorship information if you submit a brand sponsorship application.
- Communications — any messages you send us via email or our contact forms.
b. Information collected automatically
- Device and log data — IP address, browser type, operating system, referring URL, pages visited, and timestamps. Used for security and operational troubleshooting.
- Cookies — we use strictly necessary cookies for authenticated sessions (NextAuth) and basic analytics. We do not use cross-site advertising cookies.
c. Information from third parties
If you sign in with Google, we receive your basic profile information (name, email) under the scope you approve. Payment processors (e.g., Stripe) provide us with transaction confirmation metadata; we do not store your full card number.
2. How We Use Your Information
- To operate and maintain your account and child fund pages.
- To process contributions and deliver tax-receipt acknowledgments.
- To evaluate and respond to brand sponsorship applications.
- To send transactional email (receipts, fund updates, security notices).
- To comply with legal obligations, including records required by the IRS for 501(c)(3) substantiation and annual Form 990 reporting.
- To detect, prevent, and respond to fraud or abuse.
3. How We Share Your Information
We do not sell, rent, or trade personal information. We share information only as follows:
- Service providers — hosting (Vercel), database (Neon), payment processing (Stripe), email delivery (when enabled), and similar vendors, all bound by confidentiality.
- Public fund pages— when you make a fund public, the child's first name, age, optional bio, balance, and goal are visible to anyone with the link. You may toggle this setting at any time.
- Brand sponsors — sponsors receive aggregated, anonymized cohort metrics. They never receive individual family, parent, or child contact information.
- Legal compliance — to comply with subpoenas, court orders, or other legal processes, or to protect rights, property, or safety.
- Business transfers — if Grovefund is merged, acquired, or its assets transferred, personal information may be transferred subject to this policy.
4. Your Rights and Choices
- Access & correction — you may view and update account information from your dashboard.
- Deletion — you may delete your account and associated child funds by emailing legal@grovefund.org. Some records (e.g., donation receipts) may be retained for IRS compliance.
- Opt-out of email — transactional emails are operationally required; marketing emails include an unsubscribe link.
- California residents — under the CCPA, you have the right to know, delete, and opt out of sale of personal information. We do not sell personal information.
5. Children's Privacy (COPPA)
Grovefund collects limited information about children under 13 in connection with child fund pages. Parents or legal guardians must set up these funds and provide verifiable consent. See our separate Children's Privacy Policy (COPPA) for full details.
6. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, encryption at rest for payment tokens, and role-based access controls. No system is perfectly secure; we cannot guarantee absolute security.
7. Data Retention
We retain account information for the life of your account plus any periods required by law (typically 7 years for financial records). You may request earlier deletion, subject to legal hold exceptions.
8. International Transfers
Grovefund is operated in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on the site at least 30 days before taking effect. Continued use after the effective date constitutes acceptance.
10. Contact Us
Grovefund (a project of Adkins Labs)
legal@grovefund.org