Privacy

We collect your email address so you can sign in, and we record what you save while using the product. We do not run analytics software, advertising pixels, or third-party trackers of any kind. We do not sell personal information, and we do not share it with anyone except the three service providers listed below, each of which is necessary to operate the service.

• Your email address, provided when you sign in with a magic link or with Google. It is how we identify your account and the only personal detail we require.
• What you save in the product — peer groups and their members, favorites, organization claims you submit, and website evaluations you run, together with their results.
• Subscription status — whether you have an active subscription, and identifiers linking your account to a Stripe customer and subscription. We never see or store your card details.
• Usage counters for rate limiting — a count of report views and searches per account, and, for signed-out visitors, per IP address. These exist to make bulk scraping expensive, and are not used to build a profile of you.

We do not ask for your name, your organization, a phone number, or a postal address, and there is nowhere in the product to enter them.

We use no advertising or analytics cookies. What we do store is:

• Sign-in cookies, set by Supabase, which keep you signed in between visits. Removing them signs you out.
• Your theme choice (dc-theme), so a light or dark preference survives a reload.
• A per-visit lookup count (dc:lookups, dc:upgrade-dismissed), which decides when to show an upgrade prompt and whether you have dismissed it. These live in session storage and are erased when you close the tab. They never leave your browser.

• Supabase — hosts our database and handles authentication. Your email address and everything you save is stored there.
• Stripe— processes payments. When you subscribe you are sent to Stripe's own checkout; your card details go to Stripe and never to us. Stripe tells us only that a subscription started, renewed, or ended.
• Vercel — serves the site, and in the ordinary course keeps short-lived server logs that include IP addresses.

If you sign in with Google, Google necessarily learns that you signed in to this site. We receive your email address and nothing else.

The organization data in our reports comes from IRS Form 990 filings and the IRS Business Master File — public records — and from our own crawls of organizations' public websites. Form 990 includes the names and compensation of certain officers and directors; that is published by the IRS, and we reproduce it as filed.

If you are named in a filing and want to discuss how it appears here, get in touch. We cannot alter what an organization filed — that would mean amending the filing — but we can correct anything we have added on top of it, and we can explain the source of anything you are looking at.

Account data is kept while your account exists. Rate-limiting counters are short-lived and periodically deleted. Ask us to delete your account and we will remove your account record, your saved peer groups, favorites, claims and evaluations. Records we are required to keep for tax or accounting purposes — principally payment records held by Stripe — are retained for as long as the law requires.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it and close your account. Email hello@example.org from the address you signed in with and we will action it. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA; we will honour those requests regardless of where you are.

If we change this page in a way that materially affects you, we will say so here and update the date at the top. Questions go to hello@example.org.