Privacy policy

Door Money, based in New York, decides what personal information the site collects and why. Questions and requests go to hello@doormoney.co.

Only what the marketplace needs to run. By where it comes from:

• ▪The new-fundraisers email. Email address, a first name where one is given, the page it was entered on, and the account it belongs to where one holds the same address.
• ▪Accounts. Email address and sign-in details, a first and last name, and an account photo where one is added.
• ▪Organizers. The profile: a name, an address on the site, and optionally a description, a photo, a website, a social handle and a city, region and country. The fundraiser: its category, purpose, audience, dates, locations, goal, sponsorship options and prices. For music, the list of shows, and optionally a photo per show and a self-reported attendance figure. Evidence of delivery, which may be a photograph, a link, a document or a note. Stripe collects identity and bank details directly for payouts; Door Money stores only the Stripe account reference.
• ▪Sponsors. Name or business name, email address, the materials sent for a placement (a name, a logo, a credit line or artwork), what they bought or bid on, and the payment status. Card numbers go straight to Stripe and never touch Door Money. A bidder saves a card with Stripe when bidding; Door Money stores Stripe's reference to the customer and the card, not the card.
• ▪Public patron profiles. Optional, and off until the patron turns one on: a display name, a username, whether the profile is for a person or an organization, a description, a location, a website, interests, the categories supported, a tag in the patron's own words, a photo, a header image and the page's color.
• ▪Fans who back through the widget. Display name, email address and the tier chosen.
• ▪Automatically. Server logs with IP address, browser type and the pages requested, kept briefly for security and debugging. Door Money counts page views with Vercel Web Analytics, which sets no cookies and stores no IP addresses. No tracking pixels.

• ▪To run the marketplace: publish fundraisers, hold money, pay organizers, and send records.
• ▪To show sponsors where the organizer and the sponsor agreed they would appear.
• ▪To send email about a sponsorship: confirmations, approvals, reminders, payouts, and the record.
• ▪To prevent fraud and meet legal duties, including the checks Stripe requires.
• ▪To answer questions and fix problems.

Door Money does not sell personal information and does not use it for advertising. The only marketing email it sends is the new-fundraisers email, and only about fundraisers on Door Money. The box for it is ticked on the sign-up form and can be cleared there before the account is opened; an account that leaves it ticked is subscribed when the account is created. It can be turned off at any time afterwards, on the account page or through the unsubscribe link that every such email carries.

A published fundraiser is a public page. It shows the organizer's name and profile, the fundraiser, each sponsorship option, its price, and the name of the sponsor who bought it or is bidding on it. A sponsor who bids anonymously is shown as an anonymous sponsor, and that bid can never be published on a profile. The organizer still sees who they are, since the organizer has to approve the materials. A draft is private, and so are its options and prices.

A music fundraiser's widget shows how much has been backed and can show the display names of fans who backed it.

A patron's public profile is off until the patron turns it on. Each sponsorship or backing on it is published one at a time, by the patron. The profile photo and the header image are kept in private storage and shown through links that expire.

The record goes to the sponsor and the organizer. Its page is not listed anywhere and search engines are told not to index it, but anyone holding its link can open it. For music, the show photos on a record are stored publicly. Outside music, evidence is private: only the sponsor, the organizer and Door Money can see an item unless the organizer publishes it. An item that shows a child is never published, and nothing from a youth team is.

• ▪Stripe. Processes payments and payouts and runs fraud checks. Stripe sees payment details and, for organizers, identity and bank details. Stripe's own privacy policy covers what it does with them.
• ▪Supabase. Hosts the database, sign-in, and uploaded files such as logos, photos and evidence.
• ▪Resend. Delivers email on Door Money's behalf.
• ▪Vercel. Serves the site, counts page views without cookies, and keeps short-lived server logs.
• ▪Organizers. See the name and email of each sponsor who buys from them and each fan who backs them, and the materials a sponsor sent, so they can approve the materials and thank them.
• ▪Sponsors. See the organizer's name, the fundraiser, and what the record shows, including the evidence for what they bought.

Door Money also shares information when the law requires it, or to protect someone's safety or Door Money's rights. These providers store data in the United States. Door Money never gives anyone else a list of its organizers, sponsors, patrons or fans.

• ▪New-fundraisers email addresses: until the person unsubscribes or asks to be removed.
• ▪Account details: while the account is open, then 30 days.
• ▪Transactions, records and payout history: seven years after the fundraiser ends, as financial records law requires.
• ▪Photos and evidence: as long as the record they belong to.
• ▪Server logs: 30 days.

Anyone whose information Door Money holds can ask, by email, for any of these:

• ▪A copy of the information Door Money holds about them.
• ▪A correction, where something is wrong.
• ▪Deletion, except where the law requires Door Money to keep a record of a payment.
• ▪No more marketing email.
• ▪A stop to any use they object to, with an explanation of why.

Door Money answers within 30 days and does not charge for it. People in places with stronger privacy laws, such as California, the European Union and the United Kingdom, have these rights by law and Door Money honours them in full. Anyone unhappy with an answer can complain to their local data protection authority.

The site runs over HTTPS only. Stripe handles cards, so Door Money never holds card numbers. Database access is limited to the server, and the keys that bypass access rules never reach a browser. Sign-in sessions use secure cookies (see the cookie policy).

No system is perfect. If a breach puts anyone at risk, Door Money tells the people affected and any regulator the law names, without undue delay.

Accounts are for adults. Door Money does not knowingly collect information from anyone under 18 and deletes it on request when it finds out. A youth team's organizer is an adult, and evidence that shows a child stays private.

Door Money posts changes here and updates the date at the top. For changes that affect how information is used, Door Money emails account holders before the change takes effect.

Requests and questions about privacy go to hello@doormoney.co.