Privacy policy

KindPath is software used by Canadian charities and faith communities. Two different relationships are involved, and they are governed differently:

• Donor information — names, addresses, email addresses, giving history. The organization you gave to is the one that decides what happens to this information. KindPath processes it on that organization's behalf and under its instructions.
• Organization account information — staff names, sign-in credentials, billing details. KindPath is responsible for this directly.

If you are a donor and you want your information corrected or removed, contact the organization you gave to. They can act on it immediately; we act on their instruction.

• To issue tax receipts. The Income Tax Act requires an official donation receipt to carry the donor's name and address. We collect these because a receipt is invalid without them.
• To process gifts. Payment card details are entered directly with the payment provider and are never transmitted to or stored on KindPath's servers. We retain only a gateway token and the last four digits, where the gateway reports them.
• To keep the service working and secure. Sign-in times, audit records of who issued or voided a receipt, and error diagnostics.

We do not sell personal information, and we do not use donor information to advertise to anyone.

Transactional messages — your receipt, a failed-payment notice — are sent because you made a gift, and Canada's Anti-Spam Legislation permits them without separate consent.

Marketing and newsletter messages are sent only to people who have opted in. Every such message identifies the sending organization and includes a one-click way to unsubscribe. You can change your preferences at any time in your donor portal.

Data is stored in Canada. Certain sub-processors — email delivery and error monitoring — may process limited information outside Canada. Personal information may be accessible to the courts or law enforcement of a jurisdiction where it is stored.

Each organization's data is isolated at the database level using PostgreSQL row-level security, so one organization's staff cannot read another's records even in the event of an application-level fault. This isolation is verified automatically before every deployment.

Records supporting an official donation receipt are retained as long as the Income Tax Act requires — currently a minimum of two years after the end of the last calendar year to which the receipt relates, and longer for certain records. This is why a receipt is voided rather than deleted when a gift is refunded: the record must survive, clearly marked as no longer valid.

Information not subject to a retention obligation is deleted at the organization's instruction, or when an account closes.

Under PIPEDA, and under Law 25 in Quebec, you may ask for access to the personal information held about you, ask for it to be corrected, withdraw consent to non-essential uses, and — in Quebec — request portability of the information you provided.

Requests go to the organization that holds your record. KindPath supports them in responding and will act on their instruction.

If a breach creates a real risk of significant harm, affected organizations and, where required, the Office of the Privacy Commissioner of Canada and the Commission d'accès à l'information du Québec will be notified as the law requires.

Questions about this policy, or about how an organization handles your information, can be sent through the contact form on this site.