Privacy Policy

One Pillar Giving Inc. (“One Pillar Giving,” “we,” “us”) respects your privacy. This policy explains what personal information we collect through onepillar.org, how we use it, who we share it with and the choices you have.

Information we collect

Information you give us

• Contact form: your name, email address and the message you send.
• Accounts: your name, email address and password. We never store your password itself, only a scrambled version (a secure “hash”) that can’t be turned back into your password.
• Two-step sign-in (optional): if you turn it on, we store a secret key shared with your authenticator app and scrambled copies of your backup codes.

Information collected automatically

• Sign-in information: when you sign in, we record the date and time, your IP address and your browser type, to keep your account secure.
• Security records: we temporarily record IP addresses to limit repeated sign-in and form attempts. Sign-ins and actions by our staff are recorded in a permanent activity log.
• Server logs: our hosting provider keeps standard technical logs (such as IP address, pages requested and time) to run and protect the website.

Cookies

We use only the cookies needed for the website to work, such as the cookie that keeps you signed in. We don’t use advertising cookies, analytics or tracking tools, and we don’t show ads.

How we use information

• To respond to your messages and questions.
• To create and manage your account, confirm your email address and help you reset your password.
• To keep the website and your account secure, prevent fraud and misuse, and keep a record of staff access.
• To meet our legal obligations.

How we share information

We do not sell or rent your personal information, and we don’t share it for advertising. We share it only with:

• Service providers that run the website for us and may only use it to provide their services: Vercel (website hosting), Neon (database) and Resend (sending email). When you choose a password, we check it against a list of passwords exposed in past data breaches using the Have I Been Pwned service; only a short, partial fingerprint of the password is sent, never the password itself.
• Our staff, who can see account names and email addresses when they need to, for example to help you.
• When required by law, or to protect the rights, safety or property of One Pillar Giving, the people we serve or others.

Our service providers store information in the United States.

How long we keep information

• Account information: while your account is open. You can ask us to delete it at any time.
• Contact form messages: as long as needed to respond and for our records.
• Sign-in sessions end after 7 days, or sooner if you sign out.
• Security records: only as long as needed for security, except the staff activity log, which is kept permanently.

How we protect information

Information is encrypted in transit (HTTPS). Passwords are hashed, staff must use two-step sign-in, and staff access is limited and logged. No method of storing or sending information is completely secure, but we work to protect yours.

Your choices and rights

You can update your name and password on your My account page. To see the personal information we hold about you, correct it, or delete your account, email us at hello@onepillar.org. We may need to confirm your identity first.

Children

Our website is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.

Applications for assistance and grants

We plan to accept applications for emergency assistance and grants through this website. Those applications will ask for more information. We will update this policy to explain how we handle it before applications open.

Changes to this policy

If we change this policy, we will post the new version here and update the effective date. If the changes are significant, we will let account holders know by email.

Contact us

Questions about this policy or your information? Email hello@onepillar.org or use our contact form.