PRIVACY POLICY

  1. Overview
    This Privacy Policy explains how One-Life Org, Inc. (“we,” “our,” “us”) collects, uses, stores, and safeguards personal data in connection with the operation of this Site.
  2. Information We Collect
    We may collect:
    • Email address – provided voluntarily for account creation, donations, and communication.
    • Cookies and JWT tokens – used for secure login, preferences, and authentication.
    • Analytics data – via Google Analytics to understand user behavior and site performance.
    • Transaction details – processed securely by third-party payment providers for donation purposes.
  3. Use of Information
    Information collected is used to:
    • Facilitate membership and donation processing.
    • Provide receipts, updates, and project impact reports.
    • Improve Site security, functionality, and user experience.
    • Comply with legal, accounting, and tax obligations.
  4. Data Sharing and Processors
    We do not sell or rent user data. Limited data may be shared only with trusted third-party service providers (e.g., PayPal, Stripe, Coinbase, Google Analytics) strictly for payment or analytics purposes and under confidentiality obligations.
  5. Data Retention
    • Donation and tax-related records are retained for up to 7 years.
    • Member data is retained for 3 years after inactivity unless deletion is requested.
    • Analytics data may be stored for up to 26 months by Google Analytics.
  6. Data Security
    All data is encrypted in transit (TLS/SSL) and at rest using industry-standard protocols. Access is restricted to authorized personnel only. Regular backups and security audits are maintained to prevent unauthorized access or loss.
  7. International Data Transfers
    User data is processed and stored in the United States. For users within the European Economic Area (EEA), data transfers are based on the EU Standard Contractual Clauses to ensure adequate protection.
  8. Cookies and Consent
    We use cookies and JWTs to enable login, preferences, and analytics. Users in applicable regions (e.g., EU/California) will see a cookie consent notice and may withdraw consent anytime through browser settings or the provided opt-out link.
  9. Children’s Privacy
    This Site is not directed at children under 13 years of age. We do not knowingly collect personal data from minors. If such data is found, it will be deleted immediately upon notice.
  10. User Rights
    Users may request access, correction, or deletion of their personal data by contacting or submitting a request via the Contact Page. We may verify identity before processing such requests.
  11. Third-Party Links
    Our Site may contain links to third-party websites. We are not responsible for their privacy practices and encourage users to review their respective privacy policies.
  12. Policy Updates
    We may update this Policy periodically. Members will be notified by email, and non-members will be informed via a notice on the Site. The Effective Date above reflects the latest version.
  13. Contact Information
    For privacy inquiries, complaints, or data requests, contact: