Privacy Policy

This Privacy Policy explains how Give Panda, LLC ("Give Panda," "we," "us," or "our"), a Wyoming limited liability company that operates the Gift of Parenthood crowdfunding platform, collects, uses, shares, and protects information about you when you visit our websites (including giftofparenthood.org and give.giftofparenthood.org), use our web application, donate, or organize or contribute to a fundraiser (collectively, the "Service").

About the entities. The crowdfunding platform is operated by Give Panda, LLC, a for-profit company. Charitable grants are awarded separately by Gift of Parenthood, Inc., a Pennsylvania nonprofit corporation and 501(c)(3) organization. Where this policy refers to grant applications or grant awards, Gift of Parenthood, Inc. is the responsible party for that activity and processes your information for those purposes.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

---

1. Important Notice About Health and Reproductive Information

We are not a healthcare provider, and we are not a "covered entity" or "business associate" under the Health Insurance Portability and Accountability Act (HIPAA). Information you share with us is not protected by HIPAA.

If you choose to share information about your fertility journey, treatments, providers, diagnoses, adoption process, or related topics, you are doing so voluntarily and we will treat that information as "consumer health data" subject to the protections described in this policy. Do not share clinical records, diagnostic results, prescriptions, or other medical documentation unless we specifically request it as part of grant verification, in which case we will limit collection to what is necessary.

Where applicable state law (such as Washington's My Health My Data Act, Connecticut's Data Privacy Act, or Nevada's SB 370) provides additional protections for consumer health data, those protections apply to you, and Section 8 of this policy describes how to exercise the related rights.

2. Information We Collect

2.1 Information You Provide

We collect information you give us directly, which may include:

• Account information: name, email address, password, date of birth, phone number, mailing address, country of residence
• Profile and story content: photographs, videos, audio, written narratives about your family-building journey, partner or family member information you choose to include
• Donation and payment information: billing name and address, payment card details (handled by our payment processor; we do not store full card numbers), donation amounts, donor preferences
• Fundraiser information: campaign descriptions, fundraising goals, beneficiary details, payout bank account information (handled by Stripe Connect)
• Grant application information: financial circumstances, family-building goals, intended use of funds, supporting documentation, references (processed by Gift of Parenthood, Inc.)
• Contacts you import: if you use the invite feature, you can import contacts from your device, a vCard file, a CSV file, or a connected Google account. We store only each contact's name, email address, and phone number, and use them solely to send the invitations you explicitly request. See Section 5.3.
• Communications: emails, messages, support tickets, and survey responses
• Identity verification information: government-issued ID, tax identification number (SSN, SIN, NI number), and similar information collected by Stripe for payout accounts

2.2 Information Collected Automatically

When you use the Service, we and our service providers automatically collect:

• Device and connection information: IP address, browser type and version, operating system, device identifiers, language preferences, time zone
• Usage information: pages viewed, links clicked, referring and exit pages, time spent, features used, video and content interactions
• Cookies and similar technologies: described in Section 6
• Approximate location: derived from IP address (we collect precise geolocation only with your permission)

2.3 Information From Third Parties

We may receive information from:

• Payment processors and platforms like Stripe (transaction details, account verification status)
• Identity verification services for fundraiser organizers and grant recipients
• Social media platforms if you connect your account or interact with our content
• Analytics and advertising partners (aggregate or pseudonymous information)
• Public sources for fraud prevention and verification purposes

2.4 Sensitive Information

Some information we collect is treated as "sensitive" under applicable laws, including consumer health data, precise geolocation, government identifiers, financial account information, and information about minors. We process sensitive information only as needed to operate the Service, fulfill your requests, comply with law, or with your consent.

3. How We Use Your Information

We use information to:

• Operate, maintain, and improve the Service
• Create and manage your account, fundraiser, donation, or grant application
• Process payments, payouts, and refunds
• Verify identity and prevent fraud, abuse, and unlawful activity
• Communicate with you about your account, transactions, applications, and the Service
• Send newsletters, updates, fundraising appeals, and program announcements (you can opt out at any time)
• Personalize content and recommendations
• Conduct research, analytics, and program evaluation (typically using aggregated or de-identified data)
• Comply with legal obligations, respond to lawful requests, and protect our rights and the rights of others
• Train and improve our internal tools, including AI-assisted administrative tools, using de-identified or aggregated data where feasible

4. AI and Automated Tools

Google user data is never used with AI or machine learning. Data obtained from Google APIs — including Google Contacts imported through the optional "Invite Friends" feature — is never processed by, transferred to, or used to create, train, or improve any artificial intelligence or machine learning model, whether ours or a third party's, and is never transferred to any third-party AI or ML service. It is used only to send the invitations you explicitly request (see Section 5.3). Gift of Parenthood integrates no third-party AI service providers of any kind.

The remainder of this section describes AI use that is entirely separate from, and never applied to, Google user data.

We use artificial intelligence ("AI") and machine learning tools as administrative aids in operating the Service. Specifically, we may use AI to:

• Draft routine communications (such as application acknowledgments, status updates, and donor thank-yous) which our staff reviews before sending
• Summarize grant applications and supporting materials for human reviewers
• Detect potential fraud, duplicate accounts, or policy violations
• Translate content
• Improve search, categorization, and editorial workflows

Google user data is excluded from every use listed above, as stated at the start of this section.

Self-hosted, offline image model. So that faces stay centered when fundraiser cover photos are cropped, the Service runs a face-detection model (face-api.js "TinyFaceDetector") entirely within our own infrastructure: the model weights are served from our own domain and the analysis runs locally in the browser. No image is ever transmitted to a model provider or any third-party AI service, and the model performs detection only — it is never trained or fine-tuned on user data. It is applied solely to fundraiser cover images uploaded by organizers, and never to Google user data.

Grant selection decisions are made by human reviewers based on need-based criteria. AI tools may help organize and summarize information for those reviewers, but no grant decision is made solely by an automated system.

If we ever change this practice, for example by introducing automated decisioning that materially influences grant outcomes, we will update this policy, provide notice to applicants, and offer the rights required by applicable law (including the right to request human review of an adverse decision).

5. How We Share Information

We share information in the following circumstances:

5.1 Service Providers

We share information with vendors and service providers who help us operate the Service, including:

• Payment processing: Stripe, Inc. (donations, fundraiser payouts, grant disbursements)
• Email and communication: our email service providers
• Hosting and infrastructure: cloud and content delivery providers
• Analytics: privacy-aware analytics providers
• Customer support tooling
• Identity verification and fraud prevention
• AI and language services: bound by contract to use information only for the services they provide to us

These providers are contractually limited to using information for our purposes.

5.2 Payment Processors

When you donate, organize a fundraiser, or receive a grant, payment-related information is handled by Stripe under Stripe's own terms and privacy policy. For grant recipients and fundraiser organizers, Stripe collects identity verification information directly. We receive transaction status and limited account details, not full card or bank numbers.

5.3 Contacts You Import

If you import contacts to invite friends to a fundraiser, we store only each contact's name, email address, and phone number, and use them solely to send the invitations you explicitly request — never for marketing to your contacts, and we do not sell or share them. Invitations identify you as the sender, are limited to one per person per fundraiser, and recipients are not added to any mailing list. If you connect a Google account, we access your Google contacts read-only, at your direction, only to populate this list; we request the minimum scope, do not store your Google credentials or access token, and use the data only as described here. You can delete your imported contacts at any time from your dashboard.

Gift of Parenthood's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data — raw, aggregated, anonymized, or derived — to create, train, or improve any generalized or foundational AI or machine learning model, and we do not transfer it to any third-party AI or ML service. See Section 4.

5.4 Other Users and the Public

If you organize a fundraiser, your campaign content (story, photos, fundraising progress, organizer name) is publicly visible. If you accept a grant, you may be featured in Gift of Parenthood, Inc.'s communications under its Materials Release Agreement, with the privacy choices described there.

5.5 Legal and Safety

We may disclose information when we believe in good faith it is necessary to:

• Comply with applicable law, legal process, or government requests
• Enforce our Terms of Service or other agreements
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of Give Panda, Gift of Parenthood, our users, or others

For requests related to reproductive healthcare, gender-affirming care, or other sensitive matters, we will scrutinize the legal basis carefully and require valid legal process where the law permits.

5.6 Business Transfers

If we are involved in a merger, acquisition, financing, sale of assets, dissolution, or similar transaction, information may be transferred as part of that transaction, subject to the receiving party honoring this Privacy Policy or providing equivalent protection.

5.7 With Your Direction or Consent

We share information for any other purpose disclosed to you at the time of collection or with your consent.

5.8 What We Do Not Do

We do not sell consumer health data. We do not share consumer health data for cross-context behavioral advertising. We do not use precise geolocation to track you near healthcare facilities, and we do not engage in geofencing of any healthcare facility.

6. Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar technologies to operate the Service, remember your preferences, measure usage, and (where permitted) personalize content. Categories include:

• Strictly necessary: needed for the Service to function (always on)
• Functional: remember your preferences and improve experience
• Analytics: help us understand usage patterns
• Advertising: where used, deliver relevant content (you can opt out)

You can manage cookie preferences through our cookie consent tool and your browser settings. We honor the Global Privacy Control (GPC) signal as an opt-out of sale and sharing for residents of states whose laws require it, including California, Colorado, and Connecticut. See our Cookie Policy for more detail.

7. Data Retention

We keep information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. General retention guidelines:

• Account information: while your account is active, plus a reasonable period after closure for fraud prevention, legal, and tax recordkeeping
• Donation records: at least seven years for tax and audit purposes
• Fundraiser records: while the fundraiser is active, plus a reasonable period for payout reconciliation, tax recordkeeping, and dispute resolution
• Grant application records: applicant case files retained per IRS Publication 4221-PC requirements (typically at least seven years)
• Communications: typically two to three years
• Aggregated or de-identified data: may be retained indefinitely

You may request deletion as described in Section 8. Some information may be retained longer where required by law, for legitimate business purposes, or where deletion is technically infeasible (in which case we isolate and protect it).

8. Your Rights and Choices

Your rights depend on where you live. We honor the rights described below regardless of jurisdiction where reasonably possible.

8.1 Rights Available to U.S. Residents

If you are a U.S. resident, you may have the following rights, depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Florida, Delaware, New Jersey, New Hampshire, Kentucky, Maryland, Minnesota, Rhode Island, and others):

• Right to know / access: confirm whether we process your information and obtain a copy
• Right to correct: ask us to fix inaccurate information
• Right to delete: request deletion of your information
• Right to portability: receive a copy in a portable format
• Right to opt out of sale or sharing for cross-context behavioral advertising: we do not sell information for money, but some sharing for analytics or advertising may qualify; you can opt out
• Right to opt out of profiling that produces legal or similarly significant effects: we do not currently engage in this kind of profiling for grant decisions, as described in Section 4
• Right to limit use of sensitive information
• Right to non-discrimination for exercising these rights
• Right to appeal a denied request (where required by your state)

To exercise these rights, email support@giftofparenthood.org with your name, email associated with your account (if applicable), state of residence, and the specific request. We will verify your identity through reasonable means and respond within the timeframe required by your state's law (typically 45 days, with possible extension).

8.2 California Residents

In addition to the rights above, California residents have rights under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"), including the rights to know specific categories and sources of personal information, the purposes of collection, the categories of third parties with whom we share, and to direct us to limit use of sensitive personal information. California minors aged 13 to 17 have specific rights regarding the removal of content they posted (Cal. Bus. & Prof. Code § 22581).

8.3 Washington, Nevada, and Connecticut Consumer Health Data

If you are a resident of Washington, Nevada, or Connecticut, you have additional rights with respect to your "consumer health data," including:

• Right to confirm whether we are collecting, sharing, or selling your consumer health data and to access that data
• Right to withdraw consent to our collection and sharing of consumer health data
• Right to deletion of consumer health data, including from any of our service providers and processors
• Right to a complete list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, along with active contact information

We do not sell consumer health data, and we do not share consumer health data for cross-context behavioral advertising. To exercise these rights, contact support@giftofparenthood.org. We will respond within the timeframes required by applicable law, including a right to appeal under Washington's My Health My Data Act.

8.4 European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, our processing is subject to the General Data Protection Regulation (GDPR) or its UK equivalent. Our lawful bases for processing include:

• Consent: where you have given us consent (you can withdraw at any time)
• Contract performance: where processing is necessary to provide the Service you requested
• Legitimate interests: such as operating the Service, preventing fraud, communicating with donors and applicants
• Legal obligation: where required by law
• Vital interests in narrow circumstances

You have rights to access, rectification, erasure, restriction of processing, data portability, objection, and to lodge a complaint with your supervisory authority. Information you provide is transferred to and processed in the United States, and we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

8.5 Canada

If you are in Canada, our processing is subject to applicable Canadian privacy laws, including PIPEDA and provincial laws (such as Quebec's Law 25). You have rights to access and correct your information and to withdraw consent. Contact us at support@giftofparenthood.org.

8.6 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any email or contacting us. You may continue to receive transactional and account-related communications.

8.7 Authorized Agents

You may designate an authorized agent to make a request on your behalf where state law allows. We will require reasonable verification of the agent's authority and your identity.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. Safeguards include encryption in transit, access controls, vendor security review, and employee training. No system is perfectly secure, and we cannot guarantee that information will never be compromised. If we experience a data breach affecting your information, we will notify you and applicable regulators as required by law, including under the FTC Health Breach Notification Rule where it applies.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13 without verifiable parental consent, we will delete it. Parents or guardians who believe their child has provided information to us can contact us at support@giftofparenthood.org.

For users aged 13 to 17, we follow age-appropriate practices and provide California minors the rights described above. If you are under 18 and believe your information should be removed, please contact us.

11. International Data Transfers

We are based in the United States, and information you provide is processed in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we use appropriate transfer mechanisms (such as Standard Contractual Clauses).

12. Third-Party Sites and Services

The Service may contain links to or integrations with third-party websites and services we do not control. Their privacy practices are governed by their own policies, which we encourage you to review.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (where we have your address) or by prominent notice on the Service before the changes take effect, and we will update the "Last Updated" date at the top. Your continued use of the Service after changes take effect means you accept the updated policy.

14. Contact Us

If you have questions or want to exercise any rights described in this policy:

Give Panda, LLC Attn: Privacy 150 E B St, Lobby #1810, SMB #24817 Casper, WY 82601 United States Email: support@giftofparenthood.org

For matters concerning the charitable grant program, you may also contact Gift of Parenthood, Inc. For media or other inquiries, please use the contact form on our website.