Privacy policy
LAST UPDATED: January 18, 2023
Bonterra LLC (“Bonterra”) is an online, cloud-based service platform that provides individuals and organizations the ability to contribute to, organize, and manage their causes (collectively, the “Services”). Bonterra Services include EveryAction, Mobilize, CyberGrants, Network for Good, Social Solutions and the respective individualized service offerings thereunder. This Privacy Policy is subject to comply withall applicable federal and state data protection laws under the United States (including without limitation, the California Consumer Privacy Act of 2018, the California Privacy Rights Act of 2020, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act) as well as the national laws of Canada, Australia, United Kingdom, and the European Union (except, please note that the services offered through Mobilize are offered only in the United States, and as such, are not subject to foreign data protection laws).
This Privacy Policy details how we collect, use and share personal information in providing our Services.
For Bonterra's Data Processing Addendum ("DPA"), please find it here.
For purposes of this Privacy Policy, we break down our users into three categories that align with how we handle their personal information:
How we refer to these individuals in the Privacy Policy
How these individuals interact with Bonterra
Examples
Our relationship with these individuals
Bonterra Users
Individuals who interact directly with our Services
· A volunteer who signs up for an event on Mobilize
· A donor who uses the FastAction portal to donate to a cause through EveryAction
· An individual who signs up with Mobilize to learn about opportunities to participate in political campaigns
· An individual who uses the ActionID Single Sign-On application to learn about the opportunities available across our Services
We have our own, direct relationship with Bonterra Users
Customers
Representatives of our prospective and existing Customers
· A representative of an organization that uses Network for Good to manage donations
· A company representative who requests a demo from CyberGrants for a corporate philanthropy campaign
· A representative of a public sector agency who uses Social solutions to measure the impact of a community engagement project
We have our own, direct relationship with Customers
Customer End Users
Individuals who are our Customers’ users
· An individual, such as a company's employee, who donates to a nonprofit through CyberGrants or EveryAction
· A volunteer who signs up for a political campaign that uses Mobilize to organize
· An individual who participates in a nonprofit's charity auction run by Network for Good
Bonterra processes the personal information of Customer End Users pursuant to agreements with our Customers – as a “services provider” or “processor.” Our Customers’ use and sharing of this information is governed by their own privacy policies.
Some of our Customers may ask us to use the Social Matching Feature, in which case we enhance the Customer’s email contact list by appending it with social media information that we obtain from third-party data providers.
We may share Social Matching profiles across our Customers. We offer individuals the right to optout of having their information shared in this way, and require Customers to provide their users with all required notices and choices for participation in Social Matching.
Personal information we collect
Information you provide to us. Personal information you may provide to us through the Services or otherwise includes:
Contact information, such as your first andlast name, professional title, business affiliation and address, email address,and phone number. First and last name, and email address, are required toaccess Bonterra’s Services.
Biographical information, such as your age and gender, political and professional affiliations, interests in charitable causes, and occupation. This information is not required to access Bonterra’s Services.
Event information, including where and when the event you sign up for through our Services is taking place, when you signed up for the event, the organizations affiliated with the event, the organization promoting the event, whether or not you actually attended the event, and any feedback you provide about the event.
Payment and transaction data that our payment service providers collect to process your payments, such as your donations or contributions to the political candidate or nonprofit cause of your choice. We do not store payment card numbers on our systems. The information you provide in connection with your purchases is handled by our third-party payment processors, such as Stripe or Plaid, in accordance with their terms of service and privacy policies.
Transaction history, including your donations or other engagement history.
Communications that we retain from any support requests you submit, questions you may send us about marketing, job opportunities, etc.
Marketing data, such as your preferences for receiving our marketing communications, and details about your engagement with those communications.
Information from cookies and other automated technologies, such as information about the devices you use to engage with our Services, and online activity data. For more details about the technologies we use, the categories of information we collect, and how we use this information, please review our
Cookie Policy.
Other information about Customer End Users that we may collect which is not specifically listed here, but which we contractually agreed to collect with each Customer. If applicable, please contact your employer or the organization that contracts with Bonterra to request a full list of personal information that we collect on their behalf, in addition to the information described above.
Third party sources. In certain cases, we combine personal information we receive from you with personal information we obtain from other sources, including:
Third parties, such as business data providers and public databases. For example, we may obtain information from corporate partners if you are using our Services through a corporate partner program, or from advocacy organizations that use our Services to manage their events. We also may obtain information from public records in order to conduct due diligence or fraud prevention checks, or to supplement your profile (i.e., to complete your zip code).
Distribution lists. To engage in an email, SMS, or calling campaign, our Customers may upload a distribution list that provides us information about their donors or constituents (such as their names, email addresses, and mobile phone numbers).We use and process this information to provide the requested services in accordance with our Customer agreement and this Privacy Policy.
Social media platforms. We may receive information about your activity when you follow us on social media and networking platforms such as Facebook or Twitter. Additionally, if you access our Services through a social networking site or a third-party login service (such as Single Sign-On (SSO) or Google), we may collect information about you from that third party that you have made available via your privacy settings.
Third-party integrations. Should you choose to integrate a third-party product within our Services, such as Google Sheets or Google Drive, we will ask you to grant us permission to view and/or download, as applicable, your Google Sheets or Google Drive. This allows us to configure your integration(s) in accordance with your preferences. We do not use this information for any other purpose.
Below is a description on all the possibilities on how Bonterra Services uses Personal Information which may be limited under the applicable agreement signed directly with Bonterra and its Customers.
A. Bonterra Users
To fulfill our contractual obligations to you, we use personal information to:
We may also use your information for the following legitimate business interests:
Recommend opportunities to engage with other organizations and campaigns that use our Services;
Communicate with you about our Services, including by sending announcements, updates, security alerts, and support and administrative messages; and
Provide support, and respond to requests, questions, and feedback.
Below is a description on all the possibilities on how Bonterra Services uses Personal Information which may be limited under the applicable agreement signed directly with Bonterra and its Customers.
B. Customers
To fulfill our contractual obligations to you, we use personal information to:
We may also use your information for the following legitimate business interests:
Recommend opportunities to engage with other organizations and campaigns that use our Services;
Communicate with you about our Services, including by sending announcements, updates, security alerts, and support and administrative messages; and
Provide support, and respond to requests, questions, and feedback.
C. Customer End Users
On behalf of our Customers, we use your personal information to:
Enable our Customers to recruit and engage with Bonterra Users;
Provide our Customers with information relating to our products, events, or other business information;
Enable Customer End Users to complete transactions and make donations through the Services;
Communicate with Customers and Customer End Users about our Services and your account, including by sending announcements, updates, security alerts, and support and administrative messages;
Provide support, and respond to requests, questions, and feedback;
Provide marketing and advertising on behalf of our Customers, including interest-based online advertising; and
Build donor profiles for political engagement through our Social Matching Feature. With the consent of the Customer End User where required under applicable law, we enrich our Customers’ email contact lists by appending Customer End Users’ email addresses with social media account information that we obtain from third party data providers.
D. Marketing and advertising, including for:
Direct marketing. We use personal information to market our Services to you, and we can do so through websites, events, programs, and other means. We may send you direct marketing communications promoting our Services, events, programs or other services that we believe are of interest. Recipients can opt out of our marketing communications as described in the
Opt out of marketing communications section below.
Interest-based advertising. We use cookies and similar technologies to engage in interest-based advertising. Please review our
Cookie Policy for more information. Where required by applicable law, we will engage in interest-based advertising only with your consent.
E. Research and development. It is in our legitimate business interests to engage in research and development, including to:
Develop new features, products, and services; and
Create aggregated, de-identified, or other anonymous data or analytics.
F. Compliance with law, including to:
Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
Protect our, your, or others’ rights, privacy, safety, or property (including by making and defending legal claims);
Audit our internal processes for compliance with legal and contractual requirements and internal policies;
Enforce the terms and conditions that govern our Services; and
Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.
Personal information sharing
How we share personal information. Below is a description on all the possibilities on how and with who Bonterra Services shares Personal Information which may be limited under the applicable agreement signed directly with Bonterra and its Customers.
We may share personal information with:
Affiliates. All the platforms affiliated with Bonterra for purposes consistent with this Privacy Policy.
Organizations and campaigns. Charities, nonprofits, and other organizations, including when you seek to engage with opportunities on our platform or when you engage with a specific organization that uses our platform for its causes.
Advertising vendors.
Third-party advertising companies, including for the
interest-based advertising purposes described above, that can collect information on our website through cookies and other automated technologies. Please review our
Cookie Policy for more information.
Service providers. Companies and individuals that provide services on our behalf or help us operate our Services (such as hosting, information technology, customer support, email delivery, and website analytics services).
Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the
compliance and protection purposes described above.
Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, Bonterra, our subsidiaries or our affiliates (including in connection with a bankruptcy or similar proceedings). Acquirees will be subject to the same terms under this Privacy Policy.
How we share social media matching data. We share social media matching data with:
Customers who purchase the Social Matching Feature. As discussed in the
How We Use Personal Information section, we build donor profiles for political engagement through our Social Matching Feature. Specifically, we enrich our Customers’ email contact lists by appending Customer End Users’ email addresses with social media account information that we obtain from third party data providers. With Customer End Users’ consent where required under applicable law, we then make the donor profiles that we build using this feature available to other Customers. Individuals who do not want their information to be shared with other Customers through this feature can opt out by
contacting us, or through the mechanisms described in the
Privacy Rights and Choices section below.
How you may share personal information through the Services. You may share personal information with:
The public. If you decide to participate in one of our Services’ features, such as our online blogs, you make this information available to other Bonterra Users, Customer End Users, and/or the general public.
Privacy rights and choices
Access to account information. You may update, correct, or delete your account information by accessing the account you have established with us on the Services.
Opt-out of marketing communications. You can opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the emails you receive from us. If you do so, you will continue to receive service-related and other non-marketing emails until you cease using our Services linked to those service updates. Please note that Bonterra is not responsible for our Customers’ communications sent to you; to opt out of communications you receive from our Customers, please follow the opt-out or unsubscribe options contained in our Customers’ communications.
Privacy rights. You have the right to submit requests about your personal information, depending on your location and the nature of your interactions with our Services:
Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
Correction of personal information that is inaccurate or out of date.
Deletion of personal information that we no longer need to provide the services or for other lawful purposes.
Opt out of the processing or sharing of your personal information for targeted advertising. We share personal information with advertising partners that display targeted advertisements to users around the web. You can limit online tracking as described in our
Cookie Policy or by contacting us at
privacy@bonterratech.com.
Opt out of the sale of your personal information. We share personal information in a manner that may be deemed a “sale” under the certain U.S. state privacy laws when our Customer participates in the
Social Matching Feature. Specifically, we may make the donor profiles that we build using this feature available to other Customers. To opt out of having your profile shared via this feature, please contact us at
privacy@bonterratech.com.
Additional rights, such as to object to and request that we restrict our use of personal information.
To make privacy-related requests, please contact us at privacy@bonterratech.com. We reserve the right to confirm the identity of the individual making a request before we respond to the request and to assess whether these rights apply to you. California residents can empower an “authorized agent” to submit requests on their behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws.
Additionally, applicable law can limit these rights, for example, by prohibiting businesses from providing certain sensitive information in response to an access request and limiting the circumstances in which they must comply with a deletion request. If we decline a request, we will explain why we took that action, subject to legal restrictions.
You are entitled to exercise all rights described in the Privacy Rights and Choices section free from discrimination.
Third-party services
Our Services can contain links to websites and other online services operated by third parties. In addition, our content can be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of or representation that we are affiliated with any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions.
Information security
We employ current industry standard and legally required technical, organizational, and physical safeguards designed to protect the personal information we collect.
Children's privacy
Our Services are not intended for use by children under 18 years of age. If we learn that we or a Customer has collected personal information through our services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.
Job applicants
When you visit the Careers portion of the website, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other information of the type that may be included in a resume. This may also include diversity information that you voluntarily provide. We use this information on the basis of our legitimate business interests to facilitate our recruitment activities and process employment applications, such as by evaluating a job candidate for an employment activity, to monitor recruitment statistics and to respond to surveys. We may also use this information to provide improved administration of the services and as otherwise necessary (i) to comply with relevant laws or to respond to subpoenas or warrants served on us, (ii) to protect and defend our or others’ rights or property, (iii) in connection with a legal investigation and (iv) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy or our Terms of Use.
Retention
We retain personal information for as long as appropriate to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we process personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. If applicable, we will retain personal information as agreed upon in the Customer’s signed contract.
Cross-border processing of personal information
If you provide us with your personal information when using the Services, then please note that we are headquartered in the United States. To provide and operate our Services, it is necessary for us to process personal information in the United States.
If we transfer personal information across borders such that we are required to apply appropriate safeguards to personal information under applicable data protection laws, we will do so. Please contact us for further information about any such transfers or the specific safeguards applied.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you, for example through posting the Privacy Policy on our Services.
You can reach us by email at privacy@bonterratech.com or at the following mailing address:
Bonterra, LLC.
10801 North MoPac Expressway, Suite 400
Austin, TX 78759 USA
Notice to EU, UK and Swiss residents
EU and UK Representatives.
We have appointed a representative in the EU and the UK. for the EU, please contact our representative by email at info@verasafe.com. In the UK, please contact our representative by email at info@verasafe.com. Visit www.VeraSafe.com for more information.
If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you can contact us or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator here.
Cookie Policy
This Cookie Policy explains how Bonterra uses cookies and similar technologies inconnection with our Services.
What are cookies and similar technologies?
Cookies are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, helping us understand activity and patterns, and facilitating online advertising.
Local storage technologies, like HTML5, provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
Web beacons, also known as pixel tags or clear GIFs, are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
What are cookies and similar technologies?
We, our service providers, and our advertising partners automatically log information about individual’s interactions with our services and communications, such as:
Device information, such as computer or mobile device operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state, or geographic area.
Online activity information, such as pages or screens viewed, how long individuals spend on a page or screen, the website they visited before browsing to our website, navigation paths between pages or screens, information about activity on a page or screen, access times and duration of access, and whether individuals open our marketing emails or click links within them.
We also can allow our advertising partners to collect this information through our website.
This Cookie Policy refers to all these technologies collectively as “cookies.”
What types of cookies and similar technologies does Bonterra use?
We use the following categories of cookies:
Essential. These cookies arenecessary to allow the technical operation of our services (e.g., they enableyou to move around on a website and to use its features).
Functionality / performance.We use these cookies to enhance the functionality and performance of theServices.
Analytics. We use these cookies to help us understand how our Services are performing and being used. For example, we use Google Analytics to collect information about how users use our Services, which we then use to compile reports that disclose trends without identifying individual visitors, and help us improve our Services. For more information on Google Analytics, click here. For more information about Google’s privacy practices, click here. You can opt out of by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout.
Advertising. We and our third-party advertising partners use these cookies to collect information about how you use our website and use that information to serve online ads that may be relevant to your interests. Please find examples of the third-party advertising cookies we use and links to their platform opt out pages in the following section.
How can you control the use of cookies?
Other than “essential cookies,” which are required to allow our Services to operate, you can control our use of cookies through our Cookie Settings.
You can also limit online tracking by:
Note that because these opt out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.
Do Not Track. Some Internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Back
