GivePanda is run by GivePanda, LLC. This page says what we collect when you use givepanda.com, why, who else handles it, and what you can ask us to do with it. If anything here is unclear, write to hello@givepanda.com and a person will answer.
The short version
- Your page is public by design. Everything else is not.
- We never see your card number, and we never keep your identity documents.
- We do not sell your information, and we run no advertising trackers.
- You can ask us to delete your account and everything with it.
What we collect, and why
Your account. Your name, your email address, and a password we store only as a one-way hash. We use them to sign you in and to email you about your own page.
Your page. What you write, the amount you are raising, the kind of care, your city and state if you give them, and any photos you add. Photos have the hidden location and device details every phone writes into them removed before they are stored. A page is public at its own address and listed on our Browse page from the moment you publish it, and nothing on it is public before then.
Gifts. When someone gives, we record the amount, the name and email they enter, any note they write, and whether they asked to be anonymous. Card details go directly to Stripe and never reach our servers. Unless a supporter chooses to be anonymous, their name and note appear on the page they gave to; their email address never does.
Identity verification. Before money can be paid out, the organiser verifies their identity through Stripe Identity. Stripe holds the document and what it reads from it. We keep the result and a reference number — never the document, the extracted name, or the date of birth. A verification expires after a year.
Clinic confirmation. If an organiser asks a clinic to confirm a treatment cost, we store the clinic's name and contact details, the figure the clinic confirms, and when it did so.
Invitations. If an organiser pastes email addresses to invite people to their page, we use those addresses to send the invitation — spread over a few days — and for nothing else. We do not add them to any list.
Messages to us. When you use the contact form, we keep your name, your email address, and what you wrote, so we can reply.
The newsletter. If you enter your email in the footer, we keep the address, where on the site you signed up, and when. We send no more than one note a month, and every note has an unsubscribe link.
Technical records. Our hosting provider keeps standard request logs. To spot automated abuse we keep a salted, truncated hash of an IP address alongside a sign-up or a gift, not the address itself. A share link carries a short tag saying which channel it was sent through, so an organiser can see what worked.
Pages that started somewhere else
Some fundraisers on GivePanda were first created on a partner organisation's website, which uses GivePanda's technology. For those pages the partner provides the page content and its totals, and the page is edited there. A gift made on GivePanda is handled by GivePanda in exactly the way described on this page, whichever site the page began on.
Who else handles it
We use a small number of providers to run the service, and each one sees only what it needs to do its job:
- Vercel — hosts the site and keeps request logs.
- Supabase — stores your account, your page and your photos.
- Stripe — takes payments, pays organisers out, and verifies identity.
- Resend — delivers our email: receipts, notices, invitations, the newsletter.
We do not sell, rent, or trade your information with anyone. We will share it if the law requires us to, or to prevent fraud or harm.
GivePanda is building a financing service, Gap Match, which is not yet available. If it launches, information would be shared with a lender only when you ask for offers, and only a fixed, limited set of fields — never your story, your photographs, or the kind of treatment you are paying for. See our financing disclosures.
The one model we run over your photograph
A phone takes tall photographs and a card is wide, so more than half of a cover photo has to be cropped away. To decide which half, your browser runs a small face-detection model over the picture you choose and keeps the faces in frame. Four things about it, because a photograph of your family deserves them said plainly:
- It runs on your device. The model is served from our own domain and the analysis happens in your browser — your photograph is never sent to a model provider or to any other company for this.
- It detects only. It finds where faces are in the frame. It does not recognise anyone, match anyone against anything, or identify who is in the picture.
- Nothing you upload trains it. The model is fixed; we do not train or tune it on your photographs or anyone else’s.
- All we keep is two numbers — where in the frame to crop toward. Not a face, not a measurement of one.
You can change where your photo crops, or set it yourself, whenever you like. If the model finds nothing, your photo simply uses a sensible default crop.
Cookies
We set the cookies needed to keep you signed in, and nothing else. We run no advertising or analytics trackers.
How long we keep it
Your account and page stay for as long as your account exists. A page you have ended stays visible to you, not the public, until you ask us to delete it. Records of payments are kept for as long as the law requires us to keep them, even after an account is deleted.
What you can ask us to do
- See or correct anything we hold about you.
- Delete your account and everything with it, apart from the payment records the law requires.
- Remove your name or note from a page you gave to.
- Unsubscribe from the newsletter — one click in any note, or an email to us.
Email hello@givepanda.com. You do not have to explain why.
Children
GivePanda is for adults. We do not knowingly collect information from anyone under 18, and we will delete it if we learn we have.
Changes
When this page changes, the date at the top changes with it. If a change affects what we do with information we already hold, we will email account holders before it takes effect.