Privacy Policy
Last updated 27 October 2026.
Who we are
Give-Kit is operated by STACHOLD GROUP LLC. For the staff and board accounts that sign in to the tool, we decide what is collected and why. For a nonprofit's own campaign records — its participants, its gifts, its donors — the nonprofit decides, and we hold and process that data on its behalf. If you gave to a campaign and want something changed or removed, the organisation you gave to can do it, and so can we on their instruction. Either way, write to [email protected], or by post:
STACHOLD GROUP LLC
126 C Street NW, Third Floor
Washington, DC 20001
United States
This website
give-kit.com is a handful of static files on Cloudflare Pages. It sets no cookies, carries no analytics, no tracking pixel and no third-party script of any kind — its security policy forbids JavaScript outright, so there is none to run. Nothing is loaded from another company's servers: no fonts, no embedded video, no social buttons. There is no cookie banner because there is nothing to consent to.
Cloudflare, which serves the site, keeps ordinary server-log information such as your IP address while delivering and protecting it. That is Cloudflare's processing, under their terms, and we do not build anything on top of it.
This section is about the marketing site only. The tool at app.give-kit.com and the campaign pages it serves are covered below, and Zeffy's donation forms are Zeffy's.
If you donate to a campaign
The clearest thing we can tell you: your payment never touches Give-Kit. When you scan a QR code you are handed to a donation form hosted by Zeffy, and the payment happens there. Your card number, expiry and security code are never sent to us, never pass through our servers and are not stored by us in any form. What Zeffy does with your data is covered by Zeffy's own privacy policy, which is worth reading, because that is where your donation actually is.
What Zeffy passes back to us, and what we keep, is the record of the gift:
- the amount, the currency and the date
- its status, and whether it was later refunded
- which donation form it came through — which is how the gift is credited to the right participant, whether that is a local business, a troop, a team or a classroom
- your name and email address, where Zeffy passes them to us. If Zeffy does not, we do not have them and the gift is counted anonymously
We use that to credit the participant you gave through, to add your gift to the public total, and to let the organisation reconcile its own books. We do not email donors. We do not sell or rent donor data, we do not use it for advertising, and one organisation's donors are never visible to another.
Your name on a public page
A donor is not listed publicly by default. A gift is shown on a participant's page only as part of the total unless the donor has chosen to be named, and when they have, the page shows a first name only — never a surname, never an email address, never an amount tied to a person.
Scanning a QR code
Scanning a participant's code records that a scan happened, so an organisation can tell whether the signs are working. That record holds the time, the browser's user-agent string and the referring page — not your IP address, and nothing that identifies you. It is counted per participant, not per person, and it is not joined to a gift.
If you have an account in the tool
Accounts are for a nonprofit's staff and board, not for donors. Donors never sign in. For an account holder we hold a name and email address, which organisation and role the account belongs to, and when it last signed in.
There are no passwords. Signing in means asking for a link, which is emailed to the address on the account, expires in fifteen minutes and works once. We therefore hold no password for you to reuse elsewhere and none to lose. An active session records the IP address and browser it was started from, which is what lets you see and end a session you do not recognise.
Changes to gift records are written to an audit log — who changed what, and when. A nonprofit's money is in it, so the history has to be answerable.
If you write to us
Messages to [email protected] arrive as email and are kept in a mailbox while the conversation is live. They are not added to a mailing list and not passed to anyone else.
Who else sees this data
| Who | What for |
|---|---|
| Zeffy | Hosts the donation forms and processes every payment. Card data lives here and only here |
| DigitalOcean | Runs the application and the Postgres database it stores campaign records in |
| Cloudflare | Serves this website, and delivers the sign-in emails the tool sends |
That is the whole list. There is no advertising network, no analytics company, no data broker and no customer-messaging tool in it, and we do not sell or share personal data for advertising.
Where it is held
In the United States. Give-Kit is built for US nonprofits and their local donors, and we have not set up transfers for anyone else.
How long we keep it
A campaign's gift records belong to the organisation that ran it and are kept for as long as that organisation has an account, because a nonprofit needs its own giving history and cannot reconstruct it from Zeffy alone. If an organisation leaves, its records are deleted on request, and otherwise within a reasonable period after the account closes.
A fixed retention schedule has not been set. It should be agreed with each organisation rather than announced here, since they are the ones with records-retention obligations of their own, and we would rather say that than publish a number we had made up.
Your rights
Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, and to get a copy of it. Write to [email protected], or to the postal address above, and we will deal with it, at no charge.
One honest limitation: if you donated, much of your data is in Zeffy rather than here, and a deletion here does not reach it. We will tell you what we hold, delete our copy, and point you at the right place for the rest.
Security
Everything is served over HTTPS. There are no passwords to leak. No card data exists in our systems to be stolen. Each organisation's data is scoped to that organisation in the application and there is an automated test that fails the build if a new part of the system forgets. Messages arriving from Zeffy are cryptographically signed and are rejected if the signature does not verify, so a gift cannot be forged into a total. Access to the production database is limited to the people who maintain the software.
If something went wrong in a way that affected you, we would tell the organisation whose data it was, promptly and in plain language.
Changes
When this changes materially we will tell the organisations using Give-Kit before it takes effect, not afterwards. The date at the top is the date of the version you are reading.