HPLY PRIVACY POLICY
Effective Date: August 10, 2026
HPLY Inc.
This Privacy Policy explains how HPLY Inc. (“HPLY,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects Personal Information when individuals use HPLY’s websites and other Services. HPLY is currently focused on users and participating Nonprofit Organizations in the United States. Additional countries and Services may be added in the future, and this Policy may be updated when that occurs.
Contents
1.Scope and Applicability
2.Information We Collect
3.How We Use Personal Information
4.How We Disclose Personal Information
5.Donations and Payment Processing
6.Nonprofit Organizations and Representatives
7.Cookies and Similar Technologies
8.Personalization, Recommendations, and Automated Technologies
9.Communications
10.Information Security
11.Data Retention and Deletion
12.Privacy Rights and Requests
13.California and Other U.S. State Privacy Rights
14.Age Restrictions and Children’s Privacy
15.Third-Party Services and External Links
16.Mobile Applications and Future Services
17.Merchandise, Rewards, and Commercial Features
18.Business Transfers and Legal Disclosures
19.Changes to This Privacy Policy
20.Contact Information
1. Scope and Applicability
This Policy applies to visitors, registered users, donors, Nonprofit Organization representatives, support contacts, and other individuals who interact with HPLY’s Services. It applies whether or not an individual creates an account.
The Services currently include HPLY-operated websites, account and nonprofit profile functionality, donation-related functionality when enabled, administrative systems, and customer support channels. Mobile applications, merchandise and rewards features, advanced personalization tools, and other products may also be covered by this Policy if and when HPLY makes them available.
This Policy should be read together with the HPLY Terms of Service, HPLY California Privacy Notice, HPLY Cookie Policy, HPLY Donation & Refund Policy, HPLY Nonprofit Organization Participation Agreement, and any supplemental privacy notice presented for a particular feature.
2. Information We Collect
Account and Profile Information
When an individual creates or uses an account, HPLY may collect a name, email address, password hash, account settings, profile preferences, favorites or saved organizations, authentication events, session information, and other information the individual chooses to provide.
Donation and Transaction Information
When Donation functionality is available, HPLY may collect the Donation amount, selected Nonprofit Organization, transaction date and status, Payment Processor identifiers, applicable fees, recurring-Donation preferences, refund or dispute information, Donation history, and related support communications.
HPLY does not intend to store complete payment card numbers or card security codes. Payment information may instead be collected directly by the applicable Payment Processor.
Nonprofit Organization and Representative Information
HPLY may collect Nonprofit Organization names, employer identification numbers or EINs, tax-exempt and legal-status information, mission and category information, public contact information, websites, branding assets, images, profile submissions, HPLY eligibility or review status, Donation availability, payment-onboarding status, and information identifying or authenticating authorized Nonprofit Organization representatives.
Technical and Usage Information
HPLY may automatically collect IP address, browser and device type, operating system, language settings, approximate location derived from IP address, referral information, timestamps, application or Service activity, authentication events, error information, security logs, and similar technical data needed to operate and protect the Services.
HPLY does not currently use third-party analytics or advertising technologies to analyze use of the Services or engage in cross-context behavioral advertising.
Communications and Support
HPLY may retain emails, support requests, feedback, complaints, privacy requests, Nonprofit Organization communications, and other correspondence, together with information reasonably necessary to respond and maintain appropriate records.
Information From Other Sources
HPLY may receive information from Nonprofit Organizations, public records, government databases, Payment Processors, fraud and security providers, service providers, and other lawful sources used to operate, review, verify, secure, or protect the Services.
Sensitive Information
HPLY seeks to minimize collection of Sensitive Personal Information. Complete payment credentials, bank information, identity-verification documents, taxpayer information, and similar regulated financial information should generally be collected directly by approved payment or verification providers when technically and contractually appropriate.
HPLY may receive limited status, identifier, verification, or compliance information needed to operate the Services.
3. How We Use Personal Information
HPLY may use Personal Information to provide and secure the Services; create and administer accounts; authenticate users; maintain Nonprofit Organization Profiles; review Nonprofit Organization submissions and eligibility; facilitate Donations; maintain transaction records; provide support; communicate with users and Nonprofit Organization representatives; detect fraud, abuse, and unauthorized activity; troubleshoot and improve the Services; comply with legal, tax, accounting, charitable-solicitation, privacy, and regulatory obligations; enforce agreements; and protect HPLY, users, Nonprofit Organizations, and the public.
HPLY may also use aggregated or de-identified information for analytics, reporting, research, service improvement, and other lawful purposes, provided the information is maintained in a form not reasonably intended to identify an individual.
4. How We Disclose Personal Information
HPLY may disclose Personal Information to service providers that support hosting, storage, email delivery, authentication, security, monitoring, customer support, payment processing, verification, and similar operational functions. HPLY expects service providers to process information for authorized purposes and subject to appropriate contractual or legal obligations.
HPLY may disclose Personal Information to a participating Nonprofit Organization only when reasonably necessary for payment processing, reconciliation, legal compliance, Donation administration, or another expressly authorized purpose. HPLY does not provide donor names, email addresses, telephone numbers, mailing addresses, or other donor contact information to participating Nonprofit Organizations for their independent fundraising, marketing, advertising, donor acquisition, or unrelated solicitation.
HPLY may disclose information to professional advisers, insurers, auditors, regulators, law enforcement, courts, or other parties when reasonably necessary to comply with law, investigate or prevent fraud or security incidents, protect rights and safety, resolve disputes, or conduct legitimate corporate activities.
HPLY does not sell Personal Information for monetary consideration and does not currently use analytics, advertising, or cross-context behavioral advertising technologies. If HPLY later introduces technologies or practices that constitute a “sale,” “sharing,” targeted advertising, or another regulated disclosure under applicable privacy law, HPLY will provide the notices, consent mechanisms, opt-out methods, and other choices required by applicable law.
5. Donations and Payment Processing
For purposes of this Policy, “Payment Processor” means Stripe or another payment processor designated by HPLY where applicable.
Donations may be processed by Stripe through Stripe Connect, or by another Payment Processor designated by HPLY. At present, HPLY uses Stripe through Stripe Connect for Donation processing.
Participating Nonprofit Organizations may complete payment onboarding and receive Donation proceeds through their connected accounts, subject to the Payment Processor’s terms and applicable deductions. HPLY facilitates Donations but does not take ownership of donated funds.
Stripe may independently collect payment card information, bank account information, taxpayer information, identity-verification information, beneficial ownership information, fraud-screening data, and other information required to provide payment services. HPLY may receive processor account identifiers, onboarding and verification status, transaction identifiers, payment and payout status, restrictions, refund or dispute information, and other limited information necessary to operate the Donation functionality.
HPLY may use transaction information to calculate disclosed Service Fees, maintain Donation histories, reconcile transactions, provide support, address refunds and disputes, prevent fraud, maintain records, and comply with legal obligations.
HPLY does not provide tax advice and does not guarantee the tax deductibility of any Donation. Participating Nonprofit Organizations remain responsible for legally required charitable acknowledgments unless HPLY expressly agrees otherwise.
Additional Donation-specific practices are described in the HPLY Donation & Refund Policy.
6. Nonprofit Organizations and Representatives
HPLY may create and maintain public Nonprofit Organization Profiles using information supplied by Nonprofit Organizations and their representatives, government records, Nonprofit Organization websites, and other lawful public sources.
Public profiles may include a Nonprofit Organization’s legal or approved public name, mission, description, categories, general location, website, approved logo or images, HPLY review or participation status where HPLY chooses to display it, and Donation availability.
HPLY determines eligibility for participation using its own review process. HPLY’s eligibility determinations and participation requirements are governed by the HPLY Nonprofit Organization Participation Agreement.
HPLY may process representative names, email addresses, organization affiliations, account and session information, invitation and authorization records, profile submissions, and related communications to administer Nonprofit Organization accounts and protect the integrity of Nonprofit Organization Profiles.
HPLY does not intend to publish private representative contact information, financial information, identity documents, internal verification notes, payment-compliance information, account credentials, or other nonpublic information.
Organization-level information may remain available after a particular representative closes an account because the public profile concerns the Nonprofit Organization rather than the individual representative.
7. Cookies and Similar Technologies
HPLY may use cookies, local or session storage, and similar technologies that are reasonably necessary to maintain sessions, authenticate users, protect against fraud and abuse, remember privacy or interface choices, route traffic, and provide core functionality.
HPLY does not currently use third-party analytics, advertising pixels, cross-context behavioral advertising technologies, or similar nonessential tracking technologies.
If HPLY later introduces nonessential analytics, advertising, attribution, social-integration, or similar technologies, HPLY will provide any notices, consent mechanisms, opt-out methods, and other privacy choices required by applicable law.
Users may control certain browser storage through browser settings. Disabling technologies necessary for authentication, security, or core functionality may prevent parts of the Services from working correctly.
HPLY will recognize and process legally valid opt-out preference signals as required by applicable law, including where the California Consumer Privacy Act and applicable regulations require HPLY to recognize such signals.
Additional information is provided in the HPLY Cookie Policy.
8. Personalization, Recommendations, and Automated Technologies
HPLY may use basic account preferences, favorites, categories viewed, Nonprofit Organization Profiles viewed, Donation history, and other interactions to organize or personalize nonprofit discovery and recommendations.
HPLY may develop or make available more advanced automated systems, algorithms, machine-learning, artificial-intelligence, rules-based, or similar technologies in the future. If HPLY introduces materially different automated Processing, HPLY may provide additional notice and will provide any notices, information, consent mechanisms, choices, or rights required by applicable privacy law.
HPLY does not represent that ordinary automated Processing constitutes legally regulated Automated Decisionmaking Technology unless that characterization applies under applicable law.
HPLY does not intend to use charitable interests to make decisions concerning employment, credit, housing, insurance, education, or other legally significant opportunities, or to use sensitive characteristics inferred from charitable interests for unlawful discriminatory purposes.
9. Communications
HPLY may send account confirmations, password resets, security alerts, Nonprofit Organization invitations, profile-review communications, Donation confirmations, transaction or support messages, privacy responses, legal notices, and other service-related communications.
HPLY may also send promotional or educational communications where permitted by law. Users may opt out of marketing email through an available unsubscribe mechanism. Opting out of marketing does not prevent transactional, security, account, Nonprofit Organization, payment, support, or legal communications.
If HPLY later introduces SMS or push notifications, HPLY will provide the notices, permissions, and opt-out controls required for those channels.
10. Information Security
HPLY uses reasonable administrative, technical, and organizational safeguards designed to protect Personal Information based on the nature and sensitivity of the information, the nature of the Processing, and the Services.
Depending on the applicable systems and risks, safeguards may include appropriate access controls, authentication protections, protections for data in transit or storage, logging and monitoring, system and network protections, backup or recovery measures, vulnerability management, and restrictions on access to production systems.
No method of transmission, storage, authentication, or security can guarantee absolute security. HPLY may investigate suspected security incidents, restrict or revoke access, preserve relevant records, engage service providers or advisers, and provide notifications where required by applicable law.
Users are responsible for protecting their passwords, devices, email accounts, and authentication methods and for promptly notifying HPLY of suspected unauthorized account access.
11. Data Retention and Deletion
HPLY retains Personal Information for as long as reasonably necessary and proportionate to provide the Services, fulfill the purposes described in this Policy, maintain security, prevent fraud, comply with legal, tax, accounting, payment, charitable-solicitation, privacy, and regulatory obligations, resolve disputes, enforce agreements, and preserve legitimate business records.
Retention periods vary by information category and system. Account records may be retained during the account relationship and for a reasonable period afterward. Donation, payment, refund, dispute, receipt, fee, tax, and accounting records may be retained for legally or operationally required periods. Security, authentication, support, Nonprofit Organization verification, consent, and privacy-request records may be retained as reasonably necessary for their respective purposes.
When information is no longer required, HPLY may delete, overwrite, de-identify, aggregate, restrict, or archive it as appropriate. Information deleted from active systems may remain temporarily in protected backups until those backups expire or are overwritten in the ordinary course. HPLY may retain information subject to a legal hold or another lawful retention requirement.
12. Privacy Rights and Requests
Depending on applicable law and the individual’s relationship with HPLY, an individual may have rights to know or confirm whether HPLY Processes Personal Information, access information, correct inaccuracies, request deletion, obtain a portable copy, withdraw consent, opt out of certain Processing, or appeal certain privacy-request decisions.
Privacy requests may be submitted to support@hply.org or by mail using the address in Section 20. The request should describe the right being exercised and provide enough information for HPLY to locate the relevant account or records.
HPLY may verify identity, residency, or authority using account access, email confirmation, transaction or Nonprofit Organization representative information, or other proportionate methods. HPLY may deny or limit a request where permitted by law, including when identity cannot reasonably be verified, an exception applies, disclosure would affect another person’s rights or security, or retention is legally required.
Where applicable law permits an authorized agent to submit a request, HPLY may require proof of authority and verification of the individual.
HPLY will respond to valid privacy requests within the periods required by applicable law and will not unlawfully discriminate against an individual for exercising an applicable privacy right.
13. California and Other U.S. State Privacy Rights
California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and obtain information concerning HPLY’s collection, use, and disclosure of Personal Information, subject to applicable thresholds, exemptions, verification requirements, and statutory limitations.
Additional information concerning HPLY’s California privacy practices, categories of Personal Information, Sensitive Personal Information, retention criteria, sale and sharing, opt-out preference signals, and California privacy rights is provided in the HPLY California Privacy Notice.
HPLY does not sell Personal Information for monetary consideration and does not currently use analytics, advertising, or cross-context behavioral advertising technologies.
If HPLY later engages in an activity that constitutes a sale, sharing, targeted advertising, or another regulated Processing activity under applicable law, HPLY will provide the notices, opt-out mechanisms, consent mechanisms, preference-signal treatment, and other rights required by applicable law.
HPLY does not knowingly sell or share Personal Information of consumers under sixteen years of age without the affirmative authorization required by applicable law.
Residents of other U.S. states with comprehensive privacy laws may have similar rights, including access, correction, deletion, portability, opt-out, and appeal rights. HPLY will apply rights and exceptions required by the law governing the relevant Processing.
If HPLY denies a request and applicable law provides an appeal right, the individual may submit an appeal to support@hply.org with the subject line “Privacy Appeal” and identify the original request.
14. Age Restrictions and Children’s Privacy
HPLY’s Services are intended for adults age 18 and older. Individuals under 18 may not create an HPLY account, make a Donation through HPLY, administer a Nonprofit Organization account, or use features requiring agreement to HPLY’s Terms of Service.
HPLY does not knowingly collect Personal Information through the Services from individuals under 18. If HPLY learns that it has collected Personal Information from an individual under 18 contrary to this age restriction, HPLY will take reasonable steps to delete or otherwise address the information, subject to legal, security, fraud-prevention, and recordkeeping requirements.
HPLY does not knowingly sell or share Personal Information of consumers under sixteen years of age without the authorization required by applicable law.
A parent or legal guardian who believes a minor provided Personal Information to HPLY may contact support@hply.org.
15. Third-Party Services and External Links
The Services may link to Nonprofit Organization websites, external payment or Donation pages, Payment Processors, social media services, government records, app stores, merchandise providers, or other third-party properties.
Third parties may independently collect and Process Personal Information under their own terms and privacy practices. HPLY does not control processing independently determined by those third parties, except to the extent applicable law or HPLY’s contractual arrangements assign HPLY responsibility for particular Processing.
When an individual leaves HPLY or interacts directly with a third party, the third party’s applicable terms and privacy practices may govern information it independently collects. Individuals should review those practices before providing Personal Information or completing a transaction.
16. Mobile Applications and Future Services
HPLY may offer mobile applications and additional digital Services in the future. Mobile applications are not part of HPLY’s current Services.
If HPLY makes a mobile application available, the application may Process account information, device information, application version, crash information, push-notification tokens, security events, feature interactions, and information associated with device permissions requested for available features.
HPLY will request sensitive device permissions only where reasonably necessary for a disclosed feature and will provide additional notice, permission requests, or privacy choices required by applicable law or the applicable device platform.
HPLY may update this Policy or provide supplemental disclosures if a future mobile or digital Service materially changes HPLY’s Processing practices.
17. Merchandise, Rewards, and Commercial Features
HPLY may offer merchandise, loyalty rewards, or related commercial features in the future. These features are not part of HPLY’s current Services.
If HPLY makes such features available, HPLY or its commerce, Payment Processor, shipping, and fulfillment providers may Process purchaser name, shipping address, billing or transaction information, order details, loyalty or redemption information, fulfillment status, returns, support communications, and fraud-prevention information as reasonably necessary to provide those features.
Payment, shipping, tax, fulfillment, and commerce providers may independently Process information under their own terms and privacy practices where legally applicable.
Merchandise purchases and loyalty redemptions will be treated separately from charitable Donations. Promotional points or rewards offered in connection with Donations, if any, will be treated as promotional program units separate from the charitable Donation itself.
HPLY may update this Policy or provide supplemental disclosures if future merchandise, rewards, or commercial functionality materially changes HPLY’s Processing practices.
18. Business Transfers and Legal Disclosures
If HPLY is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, Personal Information may be reviewed, disclosed, or transferred as part of that transaction subject to applicable law and appropriate safeguards.
HPLY may preserve or disclose information in response to legally valid subpoenas, warrants, court orders, regulatory demands, or other governmental requests, or when HPLY reasonably believes disclosure is necessary to protect rights or safety, prevent fraud, investigate security incidents, enforce agreements, or comply with law.
Nothing in this Policy prohibits an individual from communicating with, cooperating with, or providing information to governmental, regulatory, or law-enforcement authorities as permitted by applicable law.
19. Changes to This Privacy Policy
HPLY may update this Privacy Policy to reflect changes in the Services, Processing practices, payment architecture, Nonprofit Organization programs, technology, service providers, legal requirements, corporate structure, or other relevant circumstances.
For material changes, HPLY may provide notice through the Services, email, account messages, a banner, a separate consent prompt, or another appropriate method where required by applicable law. HPLY will obtain consent where consent is legally required.
The Effective Date at the beginning of this Policy identifies when the current version became effective.
20. Contact Information
Questions, privacy requests, appeals, or other privacy-related communications may be directed to:
HPLY Inc. 3517 Camino del Río South, Suite 215 Mailbox #83 San Diego, CA 92108 United States
Email: support@hply.org
Please include enough information for HPLY to understand and respond to the request. HPLY may request additional information when reasonably necessary to verify identity, authority, residency, or the scope of a privacy request.