Privacy Notice

Emily Quinn LLC, trading as PledgePal, is the data controller for personal data processed through the PledgePal service. You can reach us at hello@emilyquinninc.com.

• Account data — name, email address, login credentials (stored hashed), and the account or organization you belong to.
• Event data — event names, organization names, goals, pledge levels, pledge counts and amounts, and branding assets you upload.
• Client access data — email addresses of the clients and event owners you invite, and their access status.
• Support and feedback — messages, ratings, and any contact details you include when you send feedback.
• Technical and usage data — IP address, device and browser information, screen size, pages visited, a locally stored device identifier used to pair a phone to an event, and error diagnostics.

We do not collect or store payment card details. Card details are entered directly into our payment provider's secure checkout (see section 4).

• Creating and administering accounts — performance of our contract with you.
• Providing the tally, Auctioneer View, and Audience View, and syncing them in real time — performance of our contract.
• Security, abuse prevention, and rate limiting — our legitimate interest in keeping the Service safe.
• Customer support and responding to feedback — performance of our contract and legitimate interest.
• Improving reliability and product quality using aggregated usage data — legitimate interest.
• Producing aggregated, de-identified benchmarks about live Fund-a-Need appeals (amounts raised, guests in the room, goal attainment, feature use) to measure and improve the Service — legitimate interest. See section 4A.
• Service and billing emails — performance of our contract; marketing emails only with your consent.
• Meeting legal, tax, and accounting obligations — legal obligation.

• Service providers / subprocessors — cloud hosting, database, and email delivery providers who process data on our instructions.
• Stripe, our payment provider and, for eligible transactions, Merchant of Record, for payment processing, subscription management, invoicing, receipts, and tax compliance.
• Professional advisers — legal, accounting, and insurance advisers where necessary.
• Authorities — where we are required to do so by law or to protect legal rights.

We do not sell personal data.

We combine event records from across all accounts into aggregated statistics — averages, medians, ranges, and rates — so we can analyse how well the Service performs and publish industry benchmarks.

These aggregates exclude organization names, event names, logos, account emails, client identities, and any donor or guest identity. PledgePal does not collect donor names or contact details at all; it records pledge amounts, not people. Figures drawn from too few events are suppressed, so no individual event, client, or account can reasonably be identified from them.

Once de-identified in this way the statistics are no longer personal data, and we may continue to use and publish them after an account closes. We never sell client-identifiable event data.

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Account and event data is retained while your account is active and for up to 12 months after cancellation so you can reactivate or export it. Billing records are kept as long as tax law requires. Feedback and support messages are kept for up to 3 years. After those periods data is deleted or anonymised. You can ask us to delete your data sooner.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. UK and EEA residents may also complain to their supervisory authority. Email hello@emilyquinninc.com and we will respond within one month.

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials, row-level database access controls scoped to each account, and least-privilege access for staff. No system is perfectly secure, but we work to protect your data and will notify you of a breach where required by law.

We use only essential cookies and browser local storage — to keep you signed in, to remember which event a paired phone belongs to, and to keep queued pledges safe while offline. We do not use advertising cookies. You can clear this data in your browser settings, though the Service may stop working correctly.

We will post updates to this notice on this page and, for material changes, notify you by email or in-app notice.