CollectiveMetrics Privacy Policy

Effective Date: June 13, 2025

1. Who We Are

CollectiveMetrics (“we,” “our,” or “us”) is a nonprofit organization incorporated in the State of Colorado. We collect limited personal information to keep supporters informed about our projects and to facilitate donations processed by trusted partners.

2. Scope

This Policy covers personal information we collect through:

  • Our website(s), emails, and any online forms we control.

  • Third-party services we use for site functionality or analytics (e.g., content-delivery networks, analytics providers).

  • Donation platforms that link to—but are not operated by—us (see § 6).

It does not cover information those third parties collect independently. Please review their privacy notices.

3. Information We Collect

Contact information you give us directly.
When you sign up for updates or contact us, you provide your name, email address, and any other details you choose to share. We use this data to send newsletters, project announcements, event invitations, and to answer your questions.

  • Device and usage information gathered automatically.
    As you browse our site, we (and our analytics vendors) receive technical details such as your IP address, browser type, device model, pages visited, and time spent on each page. We rely on this information to secure the site, troubleshoot issues, gauge interest in our content, and improve performance.

  • Donation-related data collected by our payment partners.
    If you donate, your payment card details, billing address, and transaction amount are captured by third-party processors like Stripe, PayPal, or Givebutter—not by us. They share only limited information with us (usually your name, email, and donation amount) so we can issue receipts and maintain required tax records. We never see or store your full card number or security code.

We do not knowingly collect sensitive data (e.g., health, biometric, or precise geolocation).

4. How We Use Your Information

  1. Communications: Send newsletters, project announcements, volunteer or event invitations.

  2. Site Operation & Analytics: Maintain functionality, troubleshoot, and understand usage patterns.

  3. Legal & Compliance: Enforce our terms, protect against fraud or misuse, comply with applicable laws, and maintain tax/exemption records.

  4. Consent-Based Uses: Any other purpose you expressly authorize.

5. Legal Grounds (Colorado CPA & Other US Laws)

Because we are a nonprofit, certain CPA duties (e.g., universal opt-out) may not apply. Even so, we adopt its spirit:

  • Consent: For email marketing (required by CAN-SPAM) and optional cookies where required.

  • Legitimate Interests: Running and improving our site, ensuring security, informing supporters.

  • Legal Obligation: Record-keeping for state and federal filings.

6. Donations & Payment Processors

We never see or store complete payment details. Donations made through embedded or linked pages are handled by third parties who act as separate “controllers.” They share only minimal data with us (e.g., donor name, email, amount) so we can issue acknowledgments and maintain tax records.

7. Sharing & Disclosure

We do not sell or rent your personal information. We share it only:

  • Service Providers: Email platforms, website hosts, analytics services—bound by confidentiality and used solely to perform services for us.

  • Legal/Regulatory: When required by law, subpoena, or to protect rights, property, or safety.

  • Organizational Changes: In unlikely cases of merger or dissolution, subject to your rights under § 9.

8. Cookies & Similar Technologies

We and our vendors use essential cookies for site performance and optional analytics cookies (e.g., Google Analytics). Where required, we request consent via banner. You can adjust browser settings to limit cookies; doing so may affect site functionality.

9. Your Privacy Rights (Colorado Residents)

Colorado residents may have the right to:

  1. Access personal information we hold.

  2. Correct inaccuracies.

  3. Delete information.

  4. Data Portability (receive a copy in a portable format).

  5. Opt Out of targeted advertising, certain profiling, or the “sale” of personal data (we don’t sell data, but we honor valid opt-out requests).

How to Exercise Rights: Email us at [privacy@nonprofit.org] with “Colorado Privacy Request” in the subject. We will verify your request (e.g., by email confirmation) and respond within 45 days, extendable once by 45 days where necessary.

10. Data Retention

  • Contact Information: Retained until you unsubscribe or we delete inactive lists (at least every 36 months).

  • Donation Records: Kept for at least 7 years for IRS compliance.

  • Usage Data: Stored in aggregate or anonymized form as soon as feasible; raw logs kept no longer than 14 months unless required for security.

11. Data Security

We use administrative, technical, and physical safeguards (encryption in transit, access controls, regular patching). No system is 100 % secure, so we cannot guarantee absolute protection.

12. Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided data, contact us; we will delete it.

13. International Transfers

Our servers and vendors may be located outside your state or country (often in the US). By providing information, you consent to any such transfer subject to this Policy.

14. Third-Party Links

Our site may link to external sites (social media, partner organizations). We are not responsible for their privacy practices.

15. Changes to This Policy

We may update this Policy periodically. We’ll post the revised version and, if changes are material, notify you via email or a prominent site notice. “Effective Date” will reflect the latest revision.

16. Contact Us

Questions or requests?
Email: privacy@collectivemetrics.org
Mail: 1601 29th Street, Suite 1292; #1248, Boulder Colorado 80301