Skip to Main Content

Privacy notice

EFFECTIVE DATE: AUGUST 2025

Previous version of Privacy Notice

‍Bonterra LLC (“Bonterra,” “we,” “us,” or “our”) is an online, cloud-based service platform that provides individuals and organizations the ability to contribute to, organize, and manage their causes (collectively, the “Services”). Bonterra Services which make up the Bonterra family of brands include EveryAction, Mobilize, NGP VAN, CyberGrants, Network for Good, DonorDrive , Apricot, GiveGab and the respective individualized service offerings thereunder.

 

Our role

With exception to data collected from Bonterra Users (defined in the chart below), we are a business-to-business (B2B) company, meaning our customers are businesses and not consumers.

We act primarily as a service provider to our customers. As such, we do not control the personal information we receive from our customers about their   (known as “Customer End Users”) which we process solely on our customers’ behalf. We are not responsible for the privacy practices of our customers. If you are a Customer End User and are seeking information about an organization’s privacy practices, we recommend that you check with them directly.

By engaging with our Services, you (our direct customers and Bonterra Users as defined below) agree and acknowledge our collection, use, and disclosure practices, and other activities, as described in this Privacy Notice. If you do not agree with the practices disclosed in this Privacy Notice, discontinue use of the Services.

 

Scope

This Privacy Notice details how we collect, use and share personal information in providing our Services to our Customers, Bonterra Users (all as defined below) and website visitors (each, referred to as “you”), as well as our data practices with respect to the personal information we receive from our Customers End Users (as defined below) and process on our Customer’s behalf.

This Privacy Notice is intended to comply with all applicable United States federal and individual state data protection laws as well as the national laws of Canada, Australia, United Kingdom, and the European Union (except, please note that the services offered through Mobilize and NGP VAN are offered only in the United States, and as such, are not subject to foreign data protection laws). Please see the Privacy Rights and Choices section of this Privacy Notice for information about rights you may have pursuant to applicable privacy laws.

If you are located in the United Kingdom or the European Union, please see the Notice to EU, UK and Swiss Residents section of this Privacy Notice for more information.

For purposes of this Privacy Notice, we break down our users into three categories that align with how we handle their personal information:

How we refer to these individuals in the Privacy Notice How these individuals interact with Bonterra Examples Our relationship with these individuals
Bonterra Users Individuals who interact directly with our Services
  • A donor who uses the FastAction portal to donate to a cause through EveryAction
  • An individual who signs up through Mobilize’s frontdoor and signs up Mobilize’s newsletter
We have our own direct relationship with Bonterra Users
Customers Representatives of our prospective and existing Customers
  • A representative of an organization that uses Network for Good to manage donations
  • A company representative who requests a demo from CyberGrants for a corporate philanthropy campaign
  • A representative of a public sector agency who uses Social Solutions to measure the impact of a community engagement project
We have our own direct relationship with Customers
Customer End Users Individuals who are our Customers’ users
  • An individual, such as a company’s employee, who donates to a nonprofit through CyberGrants or EveryAction
  • An individual who makes an online contribution to a campaign through NGP Van
  • A volunteer who signs up for a political campaign/activity that uses Mobilize to organize it
  • An individual who participates in a nonprofit’s charity auction run by Network for Good
Bonterra processes the personal information of Customer End Users pursuant to agreements with our Customers – as a “services provider” or “processor.”

Our Customers’ use and sharing of this information is governed by their own privacy policies.

1. Personal information we collect

Information you provide to us. We collect the following categories of Personal information that you may provide to us through the Services or otherwise includes:

Third party sources. In certain cases, we combine personal information we receive from you with personal information we obtain from other sources, including:

Bonterra does not collect sensitive personal data in its role as a data controller. If Customers choose to collect Customer End User’s sensitive personal data through Bonterra’s services, Bonterra processes that data only on Customer’s behalf and protects it with appropriate safeguards.

2. How we use personal information

Below is a description of how Bonterra Services may use personal information.

A. Bonterra Users

To fulfill our contractual obligations to you, we use personal information to:

We may also use personal information for the following legitimate business interests:

B. Customers

To fulfill our contractual obligations to you, we use personal information to:

We also use personal information for the following legitimate business interests:

C. Customer End Users

On behalf of our Customers, we use personal information to:

D. Marketing and advertising, including for:

E. Research and development.

It is in our legitimate business interests to engage in research and development, including to:

F. Compliance with law, including to:

3. Personal information sold or shared to third parties

We do not sell personal information in exchange for money in any jurisdiction.

However, the California Consumer Privacy Act (“CCPA”) defines the term “sale” very broadly, including in such a way that transfers of information relating to advertising cookies could be considered a sale. As described in our Cookie Policy, we work with certain third-party services to assist us in delivering interest-based advertisements to you.

If you are a California resident, and to the extent that any of these services are considered a “sale” of personal information under the CCPA, then you have the right to opt-out of the sale.  Below please find a description of the ways in which you may do so.

4. Retention

For Bonterra Customers and Bonterra Users, only:  we retain personal information for as long as appropriate to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we process personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

For Customer End Users, only: We will retain personal information as agreed upon in the Customer’s signed agreement.

5. Disclosure of personal information

How we disclose personal information. Below is a description of how and to whom we may disclose personal information, which may be limited under the applicable agreements signed directly by Bonterra with its Customers. Where a third-party is identified, please go to their linked privacy notices for information regarding their collection and use of personal data.

6. Privacy rights and choices

For Customer End Users only: When a customer uses our Services, we may process Customer End User personal information as a service provider on that Customer’s behalf. We are not responsible for and have no control over the privacy and data security practices of such Customer, which may differ from those explained in this Privacy Notice. The data protection rights listed above do not apply to Bonterra where we process Customer End User personal information as a service provider on behalf of a Customer. If your data has been submitted to us by or on behalf of a Bonterra Customer and you wish to exercise your privacy rights, please contact them directly. Bonterra will, upon request from the controller, assist in responding to data subject rights requests.

Please note that Bonterra is not responsible for our Customers’ communications sent to Customer End Users; to opt out of communications you receive from our Customers, please follow the opt-out or unsubscribe options contained in our Customers’ communications to opt-out of communications sent by our Customers.

For Customers and Bonterra Users only:  

You have the right to submit requests for your personal information, including:

(a) right to know what information we collect, disclose, and sell;

(b) right to access a copy of your data;

(c) right to request deletion or correction of your data; and

(d) right to opt out of the sale of your data or the sharing of your data for purposes of targeted behavioral advertising.

In the sections above titled “Personal information we collect”, “How we use personal information”, “Personal information shared or sold to third parties” and “Disclosure of personal information” we have included descriptions of: the data we collect; the categories of sources of such information;  the purposes for which we use, sell, share, and disclose the data; the types of data impacted and the categories of third-parties to whom the data is sold; and the disclosure of data to third parties for business purposes.

We do not sell your name and contact information (i.e. email, address, phone). However, as described in the How We Use Personal Information section above, we may share cookies and automated technology information to show you advertising of your interest. To opt-out of such data sharing, please follow the link “Cookie Settings” located at the bottom of each page of Bonterra websites or the process described in section 3.

We also honor the Global Privacy Control, a browser-based opt-out signal. We do not respond to other browser based-signals that do not meet applicable State law requirements, which may include Do Not Track Signals.

To exercise your data deletion, access or update your personal information, please e-mail us at [email protected], and expressly mention the Bonterra product you are a user of.   If we decline a request, we will explain why we took that action, subject to applicable legal restrictions.

Authorized agents may be used to submit rights requests, in which cases we will take steps to verify the consumer’s identity and that the agent has authority to act on the consumer’s behalf.

7. Information Security

We employ current industry-standard and legally required technical, organizational, and physical safeguards designed to protect the personal information we collect.

8. Children’s Privacy

Our Services are not intended for use by children under 18 years of age in the U.S. If we learn that we or a Customer has collected personal information through our Services from an individual under 18 without the consent of their parent or guardian as required by law, we will delete it.

9. Legal Framework for Data Transfers

If you provide us with your personal information when using the Services, then please note that we are headquartered in the United States. To provide and operate our Services, it is necessary for us to process personal information in the United States.

If we transfer personal information across borders such that we are required to apply appropriate safeguards to personal information under applicable data protection laws, we will do so. Please contact us for further information about any such transfers or the specific safeguards applied.

Bonterra is committed to protecting your personal data regardless of where you are located. This includes implementing global measures to protect users’ data, including:

10. Data Privacy Framework

When we transfer user data from the EEA, UK and Switzerland, we do so on the basis of the necessity to fulfill our agreements with Customers, consent, adequacy decisions regarding the country of transfer (available here or here and transfer mechanisms such as the EU-US Data Privacy Framework (“EU-US DPF”), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (“Swiss-US DPF”), as set forth by the US Department of Commerce. Such data remains subject to the GDPR or equivalents after such transfer.

Bonterra has certified to the United States Department of Commerce that it adheres to (1) the EU-US Data Privacy Framework (“EU-US DPF”) Principles regarding the processing of personal data received from EEA member countries in reliance on the EU-US DPF, and from the UK (and Gibraltar) in reliance on the UK Extension to the EU-US DPF; and (2) the Swiss-US Data Privacy Framework Principles (“Swiss-US DPF”) regarding the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. In the event of a conflict between this notice and the Principles mentioned above, the Principles shall govern. In the event that the EU-US DPF or the Swiss-US DPF are invalidated, Bonterra will transfer data that is subject to these certifications in reliance on the other data transfer mechanisms described above.

11. Notice to EU, UK and Swiss residents

You can learn more about the EU-US DPF and Swiss-US DPF here, and view Bonterra’s certification, including the scope of data subject to our certification here.

12. Changes to this Privacy Notice

We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will notify you (for example, by posting the Privacy Notice on our Services).

13. How to contact us

You can reach us by email at [email protected] or at the following mailing address:

Bonterra, LLC.

‍10801 North MoPac Expressway, Suite 400

Austin, TX 78759 USA

This Cookie Policy explains how Bonterra uses cookies and similar technologies in connection with our Services.

What are cookies and similar technologies?

How do we use cookies and other similar technologies?

We, our service providers, and our advertising partners automatically log information about individuals’ interactions with our Services and communications, such as:

We may also allow our advertising partners to collect this information through our website.

This Cookie Policy refers to all these technologies collectively as “cookies.”

What types of cookies and similar technologies does Bonterra use?

We use the following categories of cookies:

‍How can you control the use of cookies?

‍Other than “essential cookies,” which are required to allow our Services to operate, you can control our use of cookies through our Cookie Settings.

You can also limit online tracking by:

Note that because these opt out mechanisms are specific to the device or browser on which they are exercised, you will need to opt-out on every browser and device that you use.

Do Not Track. Some Internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit https://allaboutdnt.com/.

For visitors in the EU, UK, and other jurisdictions that require consent for non-essential cookies, we will not set analytics, advertising, or personalization cookies unless you have provided explicit consent through our cookie banner or settings tool.