Privacy policy

• Your account: your name, email address, and password (stored only as a one-way hash we can't read).
• Your charity's profile: its name, website, location, cause, mission, and anything optional you add, such as an EIN, contact name, email, or phone.
• Your answers to the assessment questions, and the scores and report made from them.
• Public information about your charity that we look up for the report, such as your public web pages, Google results and listing, and IRS filings.
• A help request, if you send one: your name, email, phone, best time to call, and your message.
• A service provider check, if you run one: your business's website, name, service, city, and state, the public information we look up for it, and, if you unlock the detailed findings, your name, email, and phone. A service provider check never creates an account.
• Public information about service businesses that we look up for a service provider check, such as the business's web pages, Google listing and reviews, public Instagram and YouTube accounts, what an AI assistant says about it, and the names and Google ratings of other nearby businesses in the same line of work. Anyone can run a check on any business, so a report may be about a business that didn't ask for it.
• Basic technical data: a sign-in cookie, your network address (used briefly to limit repeated sign-in attempts and spam), and anonymous page-visit counts. When you start a service provider check, we also save a one-way scrambled version (a hash) of your network address with the check, to limit repeated checks; we can't turn it back into your address. The service provider check also sets a random visitor cookie (no name or contact details) so we can limit how many free checks one browser starts, and remembers which page sent you here (such as “homepage” or “sample report”) for up to 30 days.
• Bot prevention and abuse monitoring: the service provider check forms use Cloudflare Turnstile, which looks at your browser and connection to tell people from automated programs. Cloudflare processes that information under its own privacy policy. We keep only daily totals (such as how many checks were started or turned away), and scrambled limit counters that we delete after about two days.

• To create your report and keep your progress.
• To contact you about a help request, only if you send one and agree to be contacted.
• To email you a service provider report when you unlock the detailed findings, and to answer questions about it. The score is shown without any contact details.
• To email you about joining My GiveBack Hub, only if you leave the separate box checked when you unlock a service provider report. It starts checked; uncheck it to get just your report.
• To follow up on service provider checks: My GiveBack Hub staff are notified of each completed check, and its business details (website, name, service, city, state, and results) are added to My GiveBack Hub's own provider records. Your name, email, and phone are added only if you leave the box above checked.
• To send occasional tips and updates, only if you checked the box to get them. You can stop them any time on your Account page.
• To keep the service secure and working, and to understand in general how it's used.

We don't sell your information, and we don't share it for other organizations' marketing.

People on your account who have access to your charity, and My GiveBack Hub staff who run GiveBackIQ. Sample reports on this site are for fictional charities. A service provider report can be opened by anyone who has its link, so share the link only with people you choose.

We use a few trusted service providers to run GiveBackIQ. They receive only what they need to do their part, and only for that purpose:

• Hosting, storage, and security providers run the site, store our database, count page visits, and check forms for automated (bot) use. For the service provider check, that is Cloudflare Turnstile.
• Email providers send our emails, such as report links and password resets.
• Search, listing, and social media providers receive a charity's or business's name, location, service, website, or the social account username its website links to, so we can check its listing, reviews, website speed, and public social accounts.
• AI providers receive a charity's or business's name, location, mission or service, website, and public web pages to run the page reviews and assistant check.

For a list of the specific service providers we use, email support@mygivebackhub.org.

We keep your account, assessments, and reports while your account is open so you can come back to them. Saved lookup results are kept for up to two weeks. Ask us to delete your information and we will, unless we need to keep something by law.

We keep a service provider check, its report, and any contact details given with it until you ask us to delete them, so the report link keeps working and we can answer questions about it. If you opted in to hear about joining My GiveBack Hub, ask us any time to stop.

• Turn tips and updates on or off on your Account page.
• Ask for a copy of your information, a correction, or deletion of your account by emailing support@mygivebackhub.org.
• If you ran a service provider check, or a check was run on your business, email support@mygivebackhub.org with the business's name and website to ask for a copy, a correction, or deletion of the check and its report, or to stop us contacting you about it.

GiveBackIQ is meant for charities, local businesses, and the adults who run them. It isn't meant for children under 13.

If we change this policy, we'll update the date at the top of this page.

Questions? Email support@mygivebackhub.org.