Privacy Policy

Manna, Inc. (“Manna,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Manna platform at app.manna.com, secure.manna.com, or any related websites, APIs, or services (collectively, the “Platform”).

We never sell your personal information. We only share donor information with the organization you contributed to, as required by law and as described in this policy.

1. Information We Collect

1.1 Information You Provide

Organization account holders: When you create an account, we collect your name, email address, phone number, and organizational details (organization name, type, EIN, mailing address). Authorized representatives may also provide banking information for payouts via Stripe Connect.

Donors: When you make a contribution, we collect the information required to process your payment and comply with campaign finance laws, including:

• Full name
• Mailing address
• Email address
• Occupation and employer (required by the FEC for contributions to federal candidates and PACs)
• Payment information (credit or debit card number, expiration date, CVV)

1.2 Information Collected Automatically

When you visit the Platform, we automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring URL
• Cookies and similar tracking technologies (see our Cookie Policy)

2. How We Use Your Information

We use the information we collect to:

• Process donations and deliver receipt confirmations via email.
• Provide, maintain, and improve the Platform.
• Verify your identity and prevent fraud.
• Comply with campaign finance disclosure and reporting requirements.
• Communicate with you about your account, transactions, and Platform updates.
• Respond to customer support requests.
• Monitor and analyze usage trends to improve the Platform experience.
• Enforce our Terms of Service and protect the rights and safety of our users.

We do not use automated decision-making or profiling that produces legal effects on you without human review.

3. How We Share Your Information

3.1 With Recipient Organizations

When you make a contribution, the receiving Organization will receive your name, mailing address, email address, phone number (if provided), occupation, employer, donation amount, and date. This information is necessary for the Organization to comply with campaign finance reporting requirements and to communicate with you about your contribution.

3.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform, including:

• Stripe, Inc. — Payment processing. Stripe receives your payment card details to process transactions securely. See Stripe’s Privacy Policy.
• Resend — Transactional email delivery (receipts, notifications).
• Supabase — Database and authentication infrastructure.
• Vercel — Application hosting.

These providers are contractually obligated to use your information only as necessary to provide their services to us and to maintain appropriate security measures.

3.3 As Required by Law

We may disclose your information if required to do so by law, regulation, legal process, or governmental request. This includes compliance with campaign finance disclosure requirements, which mandate that certain donor information (name, address, occupation, employer, and contribution amount) be included in public filings with the FEC and state election agencies.

3.4 We Never Sell Your Data

Manna does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with advertisers.

4. Campaign Finance Disclosure

Federal and state campaign finance laws require that certain donor information be publicly disclosed. If you contribute to a federal candidate, PAC, or party committee, your name, address, occupation, employer, and contribution amount may be reported to the Federal Election Commission (FEC) and made publicly available in accordance with federal law. Similar requirements may apply under state and local campaign finance laws.

Manna collects this information on behalf of the recipient Organization. The Organization is responsible for filing all required reports. Manna does not file campaign finance reports on behalf of Organizations.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• PCI DSS compliant payment processing through Stripe — Manna never stores full credit card numbers on our servers.
• Role-based access controls within the Platform.
• Regular security monitoring and vulnerability assessments.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you in accordance with applicable law.

6. Data Retention

We retain your personal information for as long as necessary to provide the Platform, fulfill the purposes described in this policy, comply with legal obligations (including campaign finance record-keeping requirements), resolve disputes, and enforce our agreements. Donation records are retained in accordance with FEC record-keeping requirements (typically a minimum of three years after filing).

When your information is no longer needed, we will delete or anonymize it in accordance with our data retention practices.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request that we correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal information, subject to legal retention requirements.
• Portability — Request a portable copy of your data in a structured, commonly used format.
• Opt-out — Opt out of non-essential communications at any time.

To exercise any of these rights, please visit our Contact page. We will respond to your request within 30 days.

Note that certain information, such as donation records required for campaign finance compliance, may not be eligible for deletion under applicable law.

8. Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. Federal law prohibits contributions from minors under 18 to federal candidates and PACs. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the “Last updated” date. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: