Privacy Policy

1. Who this applies to

This policy applies to:

• People who donate through Dopo Help
• People who create or manage NGO profiles
• Visitors to our website or platform

When NGOs receive donor information through Dopo Help, they become responsible for their own use of that data.

2. What data we collect

2.1 Donors

We may collect:

• Contact details: name, email, country
• Donation information: donation amounts, frequency, chosen causes/NGOs, payment confirmations
• Payment data: transaction IDs, method type, status (we never store full card numbers)
• Account details: email + hashed password if you create an account
• Communication history: emails, support messages
• Technical data: IP address, device type, logs, cookies

2.2 NGO users

We may collect:

• Your contact details: name, email, role
• NGO information: registration details, bank/payout info, documents required for verification
• Account activity: updates you make on the platform
• Technical data: same as donors where relevant

2.3 Public NGO activity

To help donors understand how active supported NGOs are, we may:

• Collect publicly available posts from the NGO's social media accounts (e.g., Facebook, Instagram, Twitter/X, etc.)
• Analyse and summarise activity
• Send aggregated activity updates to donors who subscribe to updates about that NGO

We collect only publicly available information and do not access private or restricted accounts.

2.4 Website visitors

We collect basic logs, analytics (with consent), and any information you voluntarily provide through forms.

3. How we use personal data

We use data to:

• Provide the platform
• Process donations and subscriptions
• Route funds to NGOs
• Send receipts and important service updates
• Verify NGOs and maintain platform integrity
• Provide donor reports and NGO activity summaries
• Improve our service
• Maintain security and prevent abuse
• Handle support requests
• Send newsletters if you choose to receive them

We do not sell personal data to anyone.

4. Sharing your data

4.1 Sharing with NGOs

When donating, the NGO you support will receive your:

• Name
• Email address
• Phone number (if provided)
• Preference to receive/not receive email updates

In addition to your contact information, the NGO will also receive the following transaction information:

• The payer's name as provided by your bank or card issuer (e.g., cardholder name or account holder name)
• Donation amount and currency
• Donation date and transaction ID

This information is necessary for NGOs to properly acknowledge your donation and maintain appropriate donor records.

4.2 Payment processor

We use Stripe as our secure, PCI-compliant payment processor. All payments are processed directly between the donor and the Organisation via Stripe's connected accounts. Dopo Oy does not handle or store sensitive payment information or hold donor funds. Stripe acts as an independent controller for some data related to payment processing and regulatory compliance.

4.3 Service providers

We use trusted providers who help us run Dopo Help securely, such as:

• Secure database and authentication services
• Reliable hosting providers
• Email providers
• Analytics and error monitoring tools

These partners act on our behalf and must keep your data safe.

4.4 Legal requirements

We may share data if required by law (tax, accounting, investigations).

4.5 Business transfers

If Dopo Oy is merged or acquired, data may be transferred as part of the business.

5. How long we keep data

We keep data only as long as necessary:

• Donation and financial records: 6–10 years (accounting laws)
• Account data: while your account is active
• After account deletion: only what is legally required (e.g., transaction records)
• Newsletter data: until you unsubscribe
• Logs: usually up to 12 months

We delete or anonymise data that's no longer needed.

6. Cookies

We use:

• Essential cookies: needed for login, security, and platform functionality
• Optional cookies: analytics, performance, or marketing cookies (used only if you consent)

You can manage your cookie preferences through our cookie banner or browser settings.

7. Security

We use strong security measures, including:

• State-of-the-art encryption for all data transfers
• Secure, encrypted infrastructure for data storage
• Access controls and role-based permissions
• Regular updates and monitoring
• Data minimisation practices

No system is perfect, but we work hard to protect your data.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete data we no longer need
• Limit how your data is used
• Object to certain types of processing
• Withdraw marketing or cookie consent
• Download your data
• File a complaint with a data protection authority (in Finland: tietosuoja.fi)

To use any of these rights, email info@dopo.help.

9. Changes to this policy

If we make changes to this Privacy Policy, we will update the date at the top and notify you if the changes are significant.

10. Contact

For any privacy-related questions or requests:

Dopo Oy
Email: info@dopo.help