> For the complete documentation index, see [llms.txt](https://docs.helpyousponsor.com/policies/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.helpyousponsor.com/policies/privacy-policy.md). # Privacy Policy Reeve Group LLC (“HelpYouSponsor,” “HYS,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the HelpYouSponsor SaaS platform, mobile apps, API, documentation sites, and any related services (collectively, the “Service”).\ \ Who We Are & Roles Under Data-Protection Law\ \ Data Controller. For visitors to our marketing sites, trial users, and account administrators, Reeve Group LLC is the data controller.\ \ Data Processor. When nonprofit clients store donor, child-sponsorship, or volunteer information in HYS, we act as a data processor on their behalf. Each organization remains the controller for that data and is responsible for providing its own lawful basis and notices.\ \ Information We Collect\ \ Account data: name, email, password hash, and organization details. Source: you.\ \ Donor & recipient data: contact info, donation history, sponsorship records, and photographs of children where applicable. Source: your organization or its donors.\ \ Financial data: last four digits of card or bank information and billing address. Full payment details are routed directly to supported gateways, including Stripe, PayPal, Flutterwave, Authorize.net, and QPayPro, and are never stored on our servers. Source: you or the payment gateway.\ \ Usage data: IP address, device type, browser settings, referring URLs, pages viewed, and actions taken. Source: automated collection.\ \ Analytics & diagnostic data: Google Analytics, Firebase, and Sentry error-tracking events. Source: automated collection.\ \ Cookies & similar technology: session cookies, preference cookies, and analytics pixels. Source: automated collection.\ \ Third-party integrations: data you authorize HYS to access or exchange through QuickBooks, Zapier, custom webhooks, email/calendar providers, payment processors, and other integrations. Source: you or the connected provider.\ \ Google Workspace Data\ \ If you connect a Google account to HelpYouSponsor, we request access only to the Google data needed to provide email and calendar relationship sync.\ \ Depending on the features enabled by your organization, HYS may access your Google account email address and profile, read Gmail message metadata and message content, send email only when you explicitly initiate a send action in HYS, read Google Calendar event metadata and event details, and create or update calendar events only when you explicitly schedule or update an event from HYS.\ \ HYS uses this Google user data to match emails and meetings to existing donor records, display relationship history, support follow-up workflows, and perform staff-initiated email or calendar actions. HYS does not sell Google user data, use it for advertising, or use it to train generalized AI models.\ \ Google-derived email bodies and calendar descriptions are private by default. Your organization may configure whether metadata or selected content is visible to other authorized staff. HYS stores OAuth tokens encrypted, does not expose tokens to the frontend, and removes tokens when an account is disconnected.\ \ HYS retains synced Google-derived data only as needed to provide the service, honor your organization's retention settings, maintain audit/security records, and comply with legal obligations. You may disconnect your Google account in HYS at any time. You or your organization may request deletion of synced Google-derived data, subject to backup, audit, and legal retention requirements.\ \ HYS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.\ \ How & Why We Use Your Information\ \ We use information to provide, secure, and maintain the Service; create user accounts; and process payments. Legal basis: contract performance.\ \ We use information to power features such as consent management, audit trails, and role-based access controls that help organizations meet GDPR obligations. Legal basis: legitimate interests or legal obligation.\ \ We use analytics and diagnostic information to monitor performance, detect fraud, debug issues, and analyze product adoption through tools such as Google Analytics, Firebase, and Sentry. Legal basis: legitimate interests.\ \ We use contact information to send administrative messages, security alerts, and product updates. Legal basis: legitimate interests or consent where required.\ \ We use information to display marketing material where permitted and with opt-out available. Legal basis: consent.\ \ We use information to comply with AML/KYC, tax, and other regulatory requirements. Legal basis: legal obligation.\ \ Sharing & Disclosure\ \ We do not sell or rent personal information. We share it only as necessary.\ \ Service Providers. We share information with cloud hosting providers, analytics services, email delivery services, customer-support tools, payment gateways, and other vendors that help us operate the Service.\ \ Your Organization. If you are a donor, volunteer, or staff member, your data is visible to the nonprofit that invited or manages you.\ \ Legal & Compliance. We may disclose information to courts, regulators, or law-enforcement agencies when required; to enforce our Terms of Service; or to protect rights, privacy, safety, or property.\ \ Business Transfers. We may disclose information in connection with a merger, acquisition, financing, reorganization, or asset sale.\ \ Each third-party processor is bound by written agreements requiring comparable data-protection standards.\ \ International Data Transfers\ \ We store data primarily in the United States and may replicate it to other regions for redundancy. Where GDPR applies, transfers are secured by Standard Contractual Clauses or an adequacy decision.\ \ Security\ \ We employ encryption in transit, encryption at rest, network firewalls, least-privilege IAM, and continuous monitoring. Sentry alerts and automated audits help us detect anomalous behavior. Despite these measures, no method of transmission is 100% secure, and we cannot guarantee absolute security.\ \ Data Retention\ \ We keep account data for as long as your organization’s subscription remains active plus up to 90 days for backup integrity. Donor and recipient records are retained under the controller’s instructions. We may hold log files up to 12 months for security and compliance.\ \ Your Rights\ \ GDPR / UK GDPR. Access, rectification, erasure, restriction, portability, and objection.\ \ CCPA / CPRA (California). Right to know, delete, and opt out of “sale” or “sharing” of personal information. We do neither, but honor requests.\ \ Marketing Preferences. You can unsubscribe via email footer or in-app settings.\ \ Cookies. Browser controls allow you to block or delete cookies; disabling them may impair functionality.\ \ Submit requests by emailing or via in-app support. We will verify your identity before processing.\ \ Children’s Privacy\ \ HelpYouSponsor is not intended for children under 13 as direct users. However, nonprofits may store children’s data for sponsorship purposes. Controllers must obtain verifiable parental consent as required by law. We process such data only under their instructions and with heightened security, including encryption and access controls.\ \ Cookies & Tracking Technologies\ \ HYS uses first-party session cookies for authentication and preference storage, plus third-party cookies from Google Analytics and Firebase for aggregate usage metrics. Detailed cookie categories and expiry times appear in the in-app Cookie Preferences Center, where you may opt out.\ \ Third-Party Links\ \ Our documentation, blog, and apps may link to external sites. We do not control their privacy practices; please review any third-party policy before providing data.\ \ Changes to This Policy\ \ We may update this Privacy Policy to reflect new features, legal requirements, or business practices. When we do, we will post the revised version with an updated “Last updated” date and, for material changes, provide notice via email or in-app banner.\ \ Contact Us\ \ Questions, requests, or complaints:\ \ Email: or \ \ Mail: Reeve Group LLC — Privacy Office, full postal address available on request\ \ Website: \ If you are in the EEA/UK and believe we have not resolved your concern, you have the right to lodge a complaint with your local supervisory authority.