Privacy Policy

1. Who we are

Paepah is a digital fundraising platform operated by Paepah Inc., based in Calgary, Alberta, Canada. When this policy says “Paepah,” “we,” “us,” or “our,” it means us. When it says “you,” it means anyone who visits our website, signs up as an organization, or purchases a product through a Paepah storefront.

2. What information we collect

From organizations

• Name, email address, and organization details provided during signup
• Stripe Connect account information (managed securely by Stripe, not stored by us)
• Communication history with our team

From supporters and buyers

• Email address for purchase confirmation and download delivery
• Payment information processed securely by Stripe (we never see or store card numbers)
• Products purchased and download history

Automatically collected

• Basic usage data and page analytics (via privacy-respecting tools)
• IP address and browser type for security and fraud prevention

3. How we use your information

We use the information we collect to:

• Set up and manage your organization's storefront
• Process purchases and deliver digital downloads to buyers
• Send purchase confirmations and receipts
• Facilitate payouts to organizations via Stripe Connect
• Communicate with you about your account or our service
• Prevent fraud and maintain platform security
• Improve Paepah over time

We do not use your information for advertising, and we do not sell it to any third party. Ever.

4. How we share your information

We share data only where necessary to operate the platform:

• Stripe — to process payments and manage payouts. Stripe's own privacy policy applies to payment data.
• Email service providers — to deliver receipts and account communications.
• Legal obligations — we may disclose information if required by law or to protect the rights and safety of our users.

We do not share your personal information with any other third parties.

5. Digital products and downloads

When you purchase a digital product through a Paepah storefront, you receive a secure, time-limited download link sent to your email. This link expires after a short period for security. If you have trouble accessing your download, contact us and we will help.

6. Data retention

We retain your information for as long as your account is active or as needed to provide our services. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or financial compliance purposes.

7. Your rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at [email protected].

8. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure file storage with time-limited access links, and restricted internal access to personal data. No system is perfectly secure, but we take this seriously.

9. Cookies

We use only essential cookies required to operate the platform (session management, security). See our Cookie Policy for details.

10. Children's privacy

Paepah is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page and, for significant changes, notify organizations by email.

12. Contact us

Questions about this privacy policy? Reach us at [email protected] or visit our contact page.