Privacy Policy

Last updated: April 24, 2026

Selflessly, Inc. (“Selflessly,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website at selflessly.io, our platform at app.selflessly.io, and any related services (collectively, the “Services”).

1. Who we are

Selflessly, Inc. · Indianapolis, Indiana, USA · privacy@selflessly.io · 317-799-9569

2. What information we collect

Information you provide directly

  • Account information: Name, work email, company, job title, phone number, profile photo
  • Payment information: Credit card or bank details (collected and stored by Stripe — we do not store full card numbers)
  • Giving and volunteering activity: Donations made, nonprofits supported, volunteer hours logged, campaign participation, matching gift requests
  • Content you create: Campaign descriptions, donation notes, uploaded documents
  • Communications: Support tickets, sales inquiries, feedback

Information collected automatically

  • Usage data (pages visited, features used, time on platform)
  • Device and browser data (IP address, browser type, OS)
  • Cookies and similar technologies
  • Log data (timestamps, error reports)

3. How we use your information

  • Provide the Services (process donations, track hours, run campaigns, generate reports)
  • Personalize your experience (nonprofit recommendations, volunteer opportunities)
  • Communicate with you (receipts, notifications, support)
  • Improve our Services
  • Ensure security and prevent fraud
  • Comply with legal obligations

4. How we share your information

We do not sell personal information. We share information with:

  • Your employer (aggregate participation data — not individual donation amounts unless you choose to make them public)
  • Nonprofit recipients (name, email, donation amount for acknowledgment and tax receipts)
  • Service providers (Stripe, Clerk, Railway, Loops, CAF America, community foundations, HubSpot, Cloudinary)
  • Legal authorities when required by law

5. AI processing and Phil

Phil uses a private, gated AI instance. Your data is never used to train AI models. Memory refreshes weekly. Mental wellness interactions are not shared with employers. Company administrators can disable Phil. Individual users can decline to interact.

6. Your rights

You may request access, correction, deletion, or portability of your data. Contact privacy@selflessly.io. You can opt out of marketing emails via the unsubscribe link in each email.

7. Data retention

Transaction records retained for 7+ years (tax compliance). Communications retained up to 3 years. Analytics anonymized after 24 months. Backups deleted after 90 days.

8. Cookies

We use strictly necessary, functional, and analytics cookies (Google Analytics 4). You can control cookies through browser settings.

9. Security

We implement encryption (TLS 1.2+), role-based access controls, security audits, and incident response procedures. SOC 2 compliance is planned.

10. Children's privacy

Services are not directed to individuals under 18. We do not knowingly collect information from children.

11. Changes

We may update this policy and will notify you of material changes via email or platform notice. Continued use constitutes acceptance.

12. Contact

Selflessly, Inc. · Indianapolis, IN · privacy@selflessly.io · 317-799-9569