Privacy Policy

BigHigh5 NFP — Effective date: June 2026.

1. What We Collect

When you use BigHigh5 platforms, we may collect:

• Name and email address — when you request a Charity Tree invitation, accept an invitation, or are sent an invitation by a current member.
• Payment confirmation — Stripe processes all card payments. BigHigh5 receives a payment confirmation token and transaction ID from Stripe. We never receive, store, or have access to your full card number, CVV, or expiration date. Those stay with Stripe.
• Charity preference — the EIN and name of the 501(c)(3) you designate when joining Charity Tree or making an anonymous donation.
• Platform activity — records of invitation tokens created, payments processed, and grants directed. These records form our permanent charitable ledger and cannot be deleted.

2. What We Do Not Collect

• Your full payment card number, CVV, or expiration date (Stripe holds these).
• Government-issued identification numbers or tax ID numbers.
• Browsing history, device fingerprints, or tracking cookies beyond what Stripe's embedded JavaScript may set for fraud prevention.

3. Anonymous Donations — Donor Privacy Guarantee

Your identity is never disclosed to recipient charities. When BigHigh5 directs a grant to a charity on your behalf, the charity receives a consolidated disbursement from BigHigh5 NFP. Your name, email address, and any other personally identifying information are not included in any communication with the recipient charity.

This guarantee is central to BigHigh5's mission. We maintain strict internal controls to ensure donor anonymity is preserved throughout the grant-making process.

4. How We Use Your Information

• To process your contribution and operate the platform.
• To send you invitation emails and platform communications (via our SaaS CRM Partner).
• To maintain our permanent charitable ledger for accounting and compliance purposes.
• To verify that designated charities hold valid 501(c)(3) status (via public IRS and ProPublica data).

We do not sell, rent, or trade your personal information to any third party.

5. Data Retention and Account Closure

If your Charity Tree account is closed (whether via refund or at your request), your personal information is anonymized in our system:

• Your email address is replaced with an anonymous identifier.
• Your name is removed from invitation records.
• Your UUID, contribution history, and ledger entries are retained permanently as part of our charitable accounting records. These records are required for nonprofit compliance and cannot be deleted.

6. Third-Party Services

• Stripe — processes all card payments. Subject to Stripe's Privacy Policy.
• A SaaS CRM — handles outbound email and SMS communications. Subject to that company's privacy terms. We select our CRM software based on their ability to protect customer privacy.
• ProPublica Nonprofit Explorer — public API used to verify charity EINs. No personal data is shared.

7. Security

BigHigh5 uses industry-standard security practices including encrypted database storage, HTTPS-only access, and Stripe's PCI-compliant payment infrastructure. No system is 100% secure, and we cannot guarantee the absolute security of information transmitted over the internet.

8. Contact

For privacy questions or data requests, contact BigHigh5 NFP at the email address listed on our home page.

9. Terms of Service

Your use of BigHigh5 platforms is also governed by our Terms of Service.