Last updated: August 6, 2025
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy has been created with the help of the Free Privacy Policy Generator.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
- Company (referred to as either “the Company”, “We”, “Us” or “Our”) refers to Streams of Mercy, Inc., PO Box 2078 Wylie, TX 75098.
- Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- Country refers to: Texas, United States.
- Device means any device that can access the Service such as a computer, cellphone, or digital tablet.
- Personal Data is any information that relates to an identified or identifiable individual.
- Service refers to the Website.
- Service Provider means any natural or legal person who processes the data on behalf of the Company, including third parties who facilitate our services.
- Usage Data refers to data collected automatically, generated by use of the Service or from the Service infrastructure (e.g. page duration).
- Website refers to Streams of Mercy, accessible from https://streamsofmercy.org.
- You means the individual accessing or using the Service, or the legal entity on whose behalf such individual is acting.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with personally identifiable information such as:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Usage Data
Usage Data
Usage Data is collected automatically and may include Your Device’s IP address, browser type and version, pages visited, date/time of visit, time spent on pages, unique device identifiers, and diagnostic data. When using a mobile device, We may collect device type, unique ID, operating system, browser, and related diagnostic data.
We may also collect information transmitted by Your browser whenever You use the Service.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies (e.g. beacons, tags, scripts) to analyze and improve Our Service. Technologies include:
- Cookies or Browser Cookies: small files on Your device. You may refuse cookies, though some features may be unavailable.
- Web Beacons: small image files embedded in pages or emails to monitor actions like opens or page views.
Cookies may be “Persistent” or “Session”. Persistent Cookies remain until deleted manually, while Session Cookies expire when the browser closes.
- Necessary / Essential Cookies (Session Cookies) – enable essential Service features and prevent fraud.
- Cookies Policy / Notice Acceptance Cookies (Persistent) – record whether You accepted the cookie notice.
- Functionality Cookies (Persistent) – remember choices You make (e.g. login, preferences) to improve your experience.
Use of Your Personal Data
Your Personal Data may be used by the Company for:
- Providing and maintaining Our Service.
- Managing Your Account.
- Fulfilling contracts You enter with Us.
- Contacting You for updates or informational purposes.
- Sharing news, promotions, or relevant offers (if You opt in).
- Handling Your requests.
- Evaluating business transfers, mergers, or asset sales.
- Data analysis to improve marketing, satisfaction, and the Service.
We may share Your information with:
- Service Providers, for analytics and communications support.
- Affiliates, subject to our policy.
- Business partners for promotional or service purposes.
- Other users when information is publicly shared by You.
- Authorities when required by law.
Retention of Your Personal Data
We retain Your Personal Data for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal obligations, resolve disputes, and enforce policies. Usage Data is kept for internal analysis and may be retained longer for security or legal reasons.
Data Retention & Disposal
This section explains how Streams of Mercy, Inc. securely retains and disposes of donor, user, and Plaid-related token data.
| Data Type | Retention Period | Notes |
|---|---|---|
| Stripe ACH bank account tokens | Until donation settles + 3 years | Support refunds or disputes |
| Donor personal/contact information | 7 years | IRS compliance and bookkeeping |
| Donation transaction records & receipts | 7 years | Financial audit and transparency |
| Contracts or signed documents | Permanent | Archival/legal purposes |
| System logs & backups | 1 year | Then rotated or deleted |
| Test/development data | Quarterly purge | Removed after testing cycles |
| Data under legal hold or audits | Until hold is lifted | Overrides standard schedule |
Disposal Methods
- Digital data: Secure delete or irreversible wipe using industry-standard methods (e.g. randomized overwrite).
- Physical records: Shredded via certified provider or secure internal shredding.
- All disposal events are logged with date, data type, and responsible personnel.
Legal Holds & Exceptions
Records under audit, litigation, donor dispute, or regulatory investigation are retained until the hold is formally lifted.
Roles & Policy Review
- The Executive Director is responsible for policy enforcement and compliance.
- Staff receive annual training on retention and disposal processes.
- The policy is reviewed at least annually or when legal requirements change.
Transfer of Your Personal Data
Your Personal Data may be processed in locations outside Your jurisdiction. We take reasonable steps to ensure data is treated securely and according to this Policy regardless of location.
Delete Your Personal Data
You can update or delete Your information by accessing Your Account settings or contacting Us directly. Certain data may be retained if legally required.
Disclosure of Your Personal Data
Business Transactions
In the event of business change or asset sale, Your data may be transferred. We will notify You if this occurs.
Law enforcement or Legal Obligations
We may disclose data to comply with legal obligations, protect rights, or safeguard users.
Security of Your Personal Data
While we strive to use commercially acceptable methods to protect Your data, no online transmission or storage is 100% secure.
Children’s Privacy
Our Service is not intended for children under 13. We do not knowingly collect data from minors. If notified, we will remove such data.
Links to Other Websites
Our Service may contain links to third-party sites that have their own privacy policies. We are not responsible for those practices.
Changes to this Privacy Policy
We may update this Policy over time. We will notify You via email or notice on the Service before changes become effective and update the “Last updated” date.
You should review this Policy periodically; changes take effect when posted.
Contact Us
- By email: info@streamsofmercy.org
- By visiting our Contact page
