What we collect, why, who we share it with, and how you can control it — stated plainly rather than buried in boilerplate.
The short version: we collect what the product stores to draft copy and run accounts. We do not sell personal information. Your organization's profile is not shown to other customers, and it is sent to the AI provider when you generate. The marketing site and the app load Google Analytics. The marketing site also loads a Google Ads tag.
We collect the information needed to run the service:
Donor names and gift details are not a separate donor database, and the product does not require them for every piece. If you enter them, they are stored in Copy History and sent to the AI provider with the prompt. Other people in your organization do not see your Copy History; it is stored per user and per organization.
We use the information above to run the service: signing you in, drafting copy from your organization's profile and your request, processing subscriptions, sending account email, and operating the site. We do not sell personal information.
The marketing site loads Google Analytics and a Google Ads tag. The application loads Google Analytics and sends events such as trial start. That is advertising and analytics measurement, described in section 8. It is separate from the fundraising copy, which is not used to target ads.
When you generate copy, the prompt sent to the model includes your organization's saved profile (mission and related fields, audiences, writing examples, and, when those features are on, voice samples, A/B notes, and research summaries) plus the instructions and any donor or spreadsheet fields you entered for that piece. PDF and URL extraction send the document text or the fetched page text to Anthropic as well.
The code default, and the database seed, is Anthropic Claude Sonnet 4.5 (claude-sonnet-4-5). A platform administrator can switch the writing model for every organization without a deploy. The other choices in the admin screen are other Claude models and xAI Grok 4.5. Grok is used only when that model is selected and an xAI API key is configured. The live value is a row in the database, so this page cannot state which model production is on beyond that default.
Claude requests can include Anthropic's web search tool. The model decides whether to search. Search queries then go to Anthropic, and Anthropic's published subprocessor for that tool is Brave Search. Grok requests do not include that tool. Grok requests are sent with store: false.
Anthropic's and xAI's API terms say they do not train their models on customer API content. This repository does not turn on a zero-data-retention agreement with either provider. How long each provider keeps a prompt is their policy, not a setting in our code.
One customer's profile is not shown to another customer's account. A platform administrator can open every organization's data. That access is described on the Security page.
The companies that receive personal information or customer content are listed on the vendor page, including what each one receives. The short list is Clerk, Stripe (via Clerk Billing), Cloudflare, Anthropic, xAI when an administrator selects it, Resend, Google Analytics, Google Ads on the marketing site, Google Fonts on the marketing site, and Brave Search as Anthropic's web-search subprocessor when a Claude model searches.
We don't share your information with any other third party except as required by law, to protect our legal rights, or with your explicit direction. If we're ever acquired or merge with another company, your information may transfer as part of that transaction, subject to this policy. We do not promise advance notice before this vendor list changes; the page is updated when the code changes.
Canceling a subscription does not delete your organization's data. The profile, voices, audiences, and copy history stay, and access waits on an active subscription.
A platform administrator can delete an organization. That delete removes the Clerk organization and the local profile, audiences, examples, voices, voice documents, A/B tests, research notes, newsletter sections, copy history, and generation jobs. It does not remove a Mission Partner application: that row keeps the organization name, website, contact name, email, and phone, with the organization link cleared, so the one-application-per-email rule still holds. Billing history rows are also kept, with the organization link cleared. There is no delete button for a whole organization in the customer interface. An organization admin can delete the Clerk organization from Clerk's own team screen; that does not by itself delete the database rows.
To request a full-organization deletion or a data export, email info@inspiregenerosity.today. We complete that deletion or export within 30 days of a verified request. Deleted data may persist in Cloudflare's D1 point-in-time recovery history for its retention window before it ages out. This repository does not record that window.
Identity is Clerk. Hosting and storage are Cloudflare. Access checks for customer data run in our code on each request. The Security page lists what is in place and what is not. You can turn on two-step verification with a text-message code, with backup codes, from Account & security in the app. You can also add a passkey and sign in with it. Both are optional, and sign-in doesn't require them.
If we confirm a security breach that affects your data, we notify affected customers without undue delay, and within 72 hours of that confirmation.
You can edit the organization profile in the app, and you can delete individual examples, voices, voice documents, A/B tests, research items, and history entries. There is no self-serve export of the whole organization and no self-serve delete of the whole organization. Email info@inspiregenerosity.today to request a full-organization deletion or a data export. We complete that deletion or export within 30 days of a verified request. Deleted rows may remain in Cloudflare's D1 point-in-time recovery history for its retention window, as described in section 5.
This marketing site loads Google Analytics 4 (measurement ID G-E6RQEM3MHR) and a Google Ads tag (AW-18434608718) on its pages, and it loads fonts from Google Fonts. The application at app.inspiregenerosity.today loads the same Google Analytics tag and does not load the Google Ads tag. Those tags can set cookies and send page and event data to Google, subject to the visitor's browser.
The application also uses cookies set by Clerk for sign-in, and browser storage for interface state such as whether the onboarding tutorial has been seen. Clerk and Stripe set their own cookies when their sign-in and payment frames load.
Inspire Generosity is a business tool intended for use by adults working on behalf of an organization. It is not directed at, and we do not knowingly collect information from, children.
Clerk, Stripe, Anthropic, xAI, Resend, and Google are United States companies. Cloudflare runs a global network. This repository does not set a D1 database jurisdiction, so we do not name a region for the database. If you use the service from outside the United States, your information is processed by those providers.
We may update this policy from time to time. If we make material changes, we'll make reasonable efforts to notify active subscribers before the changes take effect.
Questions about this policy, or a request regarding your data, can be sent to info@inspiregenerosity.today. Security reports can go to security@inspiregenerosity.today. The vendor list is on the vendor page.
We'll answer it directly — no ticket queue, no runaround.
Contact Us