DOCS

Privacy policy

Last updated: May 29, 2026

This privacy policy describes how Fundations (“we”, “us”, or “our”) collects, uses, and shares information through the getfundations.com website and the Fundations Pro license service. It does not govern the data your WordPress site collects from donors through the Fundations plugin. That data is your responsibility as the site operator and data controller.

What we collect

Website visitors

We collect standard web server logs (IP address, browser type, pages visited, referrer, timestamps) for security monitoring and traffic analysis. These logs are retained for up to 90 days.

If you use the contact form or support system, we collect your name and email address to respond to your request.

Customers (Pro license purchasers)

When you purchase Fundations Pro, our payment processor collects your payment information directly. We receive a transaction record that includes your name, email address, purchase date, amount, currency, and the license key assigned to your purchase.

We do not store full credit card numbers or CVV codes.

Plugin telemetry (Appsero)

Fundations Pro uses the Appsero SDK for license validation. When you activate a Pro license, Appsero receives your site URL, WordPress version, PHP version, and plugin version. This data is used solely for license validation and to deliver plugin updates. You can review Appsero’s privacy practices at appsero.com.

The free Fundations plugin, distributed on WordPress.org, does not use Appsero or any telemetry service.

How we use data

We use the data we collect to process and fulfil Pro license purchases, validate Pro licenses on customer sites via Appsero, deliver plugin updates to Pro customers, respond to support and contact requests, detect and prevent fraud and abuse on the website, and comply with legal obligations.

We do not sell personal data to third parties.

Payment processing

Payments for Fundations Pro are processed by a third-party payment processor. Your payment details (card number, billing address) are entered directly on the processor’s secure page and are not stored on our servers. We receive only the transaction confirmation and the information needed to fulfil your order.

Cookies

The getfundations.com website may set cookies for session management, security, and analytics. No cross-site tracking cookies are used.

Data retention

Data typeRetention period
Server logs90 days
Customer purchase recordsDuration of the business relationship, plus as required by applicable law (typically 7 years for financial records)
Support correspondence2 years after last contact

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at the address below. We will respond within 30 days.

Third-party services

ServicePurposePrivacy policy
AppseroLicense validation and update deliveryappsero.com/privacy
Payment processorOrder fulfilment(processor’s own policy)

Data about your donors

If you run a fundraising site using Fundations, you collect personal data from your donors: names, email addresses, and payment information. You are the data controller for that data. Fundations stores it in your WordPress database, on your server, under your control. We have no access to donor data collected by your site.

You are responsible for providing an appropriate privacy policy to your donors and complying with applicable data protection laws (GDPR, CCPA, etc.).

Fundations provides tools to help you meet these obligations:

  • WordPress Privacy Exporter integration (Tools, Export Personal Data)
  • WordPress Privacy Eraser integration (Tools, Erase Personal Data)
  • Suggested privacy policy text (Settings, Privacy)
  • Data retention settings for automatic anonymisation of old records

See GDPR & Privacy Tools for details.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of getfundations.com or Fundations Pro after a policy update constitutes acceptance of the revised terms.

Contact

For privacy questions or to exercise your data rights, contact us through the getfundations.com website.