The nonprofit data on this site is public IRS data. What we collect about you is
small: the account details you give us, and how the site gets used. This page says exactly what, and
who else touches it.
The public data we publish
Organization pages are built from IRS Form 990 filings and the IRS Business Master File, which are
public records. We publish less than the filing contains: no street addresses, phone numbers or
personal email addresses. Names, titles and compensation appear as the filing organization reported
them.
What we collect when you use the site
- Account details. Your email address and, if you add them, your name, profile,
organization claims, follows, annotations, and messages you send through the site.
- Sign-in. We email you a sign-in link; a session cookie then keeps you signed in for
30 days.
- Verification documents. If you file an organization claim, the documents you
upload to show you may speak for it, and, for person verification, the photo-ID check described under
Stripe below.
- Usage. Pages you view, searches you run and buttons you click, so we can see what
is and is not working.
Who else handles your information
- PostHog (US cloud): product analytics and session replay. Replays
record how a page was used; everything typed into a form field is masked, so it never lands in a
recording. Analytics profiles are created only for people
who sign in.
- Microsoft Clarity and Google Analytics 4: additional page-usage
analytics on public pages. Neither is loaded for automated crawlers.
- Stripe: payments (badge subscriptions, person verification, pay-it-forward gifts)
and the photo-ID check. Card numbers go to Stripe, never to our servers. Stripe Identity handles the ID
image under its own privacy policy.
- Resend: sends our email (sign-in links, claim updates, replies) and tells us
when a message bounces.
- Cloudflare: sits in front of the site to filter abusive traffic, so it sees
request metadata such as IP address.
We do not sell your personal information.
Cookies
We set cookies to keep you signed in and to show the right header for signed-in members. The
analytics providers above set their own cookies to recognise a returning browser. Blocking cookies
will not stop you reading public pages; you will not be able to stay signed in.
Email
We send sign-in links and messages about things you did (a claim you filed, a reply to your
message). Product news carries an unsubscribe link.
Removal and privacy requests
To see, correct or delete your account data, or to ask us about a person's name on a public
page, email [email protected]. We can close your
account and delete what we hold about you. We cannot remove an IRS filing: it stays public at
the IRS and with other publishers of the same data, and corrections to a filing are made by the
filing organization or the IRS.