Dona privacy policy

This policy explains what Dona collects about you, why, who sees it, and how to change or remove it. It is written to be read. If something here is unclear, write to hello@3sb.io.

1. Who this covers

Dona is operated by Relai Group, Inc. through 35th Street Builders (“3sb”). This policy covers dona.3sb.io, the Dona web app, and the emails Dona sends. It goes with the Dona terms of service.

2. What Dona collects

Dona collects the least it can and still move your money.

• Your email address. It is your account. Dona signs you in with a link sent to it and emails you about every event that touches your money.
• About each card you add: a payment token issued by Stripe, the card brand, the last four digits, the expiry month and year, and Stripe’s fingerprint for the card, which lets Dona refuse the same card twice. Dona also records what you said was on the card, how much was pulled, and each charge attempt with its outcome and decline code.
• About your bank: the id of the Stripe connected account created for you, the bank’s name, and the last four digits of the account. Nothing else about the account is stored by Dona.
• Your ledger: every credit and debit to your wallet, every transfer, its fee, and its status. This is the record of what Dona owes you.
• Activity: when you signed up, when you last signed in, which terms version you accepted and when, your email preference, and a hashed form of the network address a card was added from, used only to slow down abuse.
• How you found Dona: on your first visit Dona remembers the utm_source, utm_medium, utm_campaign, and utm_content tags on the link you arrived by, the referring site, and the page you landed on. That is copied onto your account when you sign up. It is used to understand which channels bring people to Dona, nothing else.

3. What Dona never sees

Card numbers, expiry dates, and security codes are entered in a field hosted by Stripe inside the Dona page. They go to Stripe and never reach Dona’s servers, logs, or database. Dona holds a token that only Stripe can turn back into a card. The same is true of your bank details: you enter them with Stripe during Connect onboarding, and Stripe collects the identity information it needs. Dona does not collect identity documents, your date of birth, or your Social Security number.

4. How Dona uses it

• To sign you in and keep you signed in.
• To find the balance on a card you add, credit your wallet, and move money to your bank.
• To email you about pulls, transfers, limits, idle balances, seats, and changes to the terms.
• To enforce the limits in the terms: the $500.00 wallet ceiling, the $4.00 minimum, one card per fingerprint, and the caps on how many cards can be added or declined in a day.
• To spot card testing and fraud, and to report it to Stripe, card issuers, or law enforcement where the terms allow.
• To keep the ledger that reconciles every wallet against Dona's own Stripe balance.
• To see, in aggregate, how people find Dona and where they stop.

Dona does not sell your information, does not show advertising, and does not run third-party analytics or tracking scripts.

5. Who Dona shares it with

• Stripe processes card charges, holds the tokenized card, runs Connect onboarding and identity verification, and sends payouts. Stripe’s privacy policy governs what Stripe collects.
• Resend delivers Dona’s email. It receives your address and the message.
• Neon hosts Dona’s database and Vercel hosts the application, both in the United States.
• Card issuers and networks see Dona’s charge attempts against a card you add, as they would any purchase.
• Law enforcement or a regulator, where the law requires it, and a successor to the business if Dona is sold or merged, under this same policy.

Dona’s own staff with the admin role can see your account, your cards as described above, your ledger, your transfers, and the emails Dona sent you. Every action they take that touches money is logged.

6. Cookies and what your browser stores

Dona sets a small number of first-party cookies and browser storage keys. None come from advertisers.

• Session cookie, set when you sign in. It lasts 30 days if you ticked “remember me on this browser”, otherwise the session ends after 24 hours.
• Remember choice, a cookie that lives for 20 minutes after you ask for a sign-in link so the link knows how long to keep you signed in.
• First-touch attribution, a cookie for 30 days holding the utm tags, referrer, and landing page from your first visit.
• Theme, last balance, and install prompt, stored in your browser only, never sent to Dona: your light or dark choice, the balance shown on the offline screen, and whether you dismissed the “add to home screen” prompt.

Stripe’s card field sets its own cookies inside its frame, described in Stripe’s policy.

7. Email

Dona emails you when you ask for a sign-in link and on every event that touches your money: a card pulled, a card that could not be pulled, a transfer started, landed, or returned, your wallet reaching $500.00, 90 days idle, and anything to do with a pay-once seat. You can turn card emails off in settings. Emails about transfers, limits, idle balances, seats, and changes to the terms always send, because they are how Dona tells you what happened to your money. Dona logs each email it sends so it never sends the same one twice.

8. How long Dona keeps it

While your account is open, everything above. When you close your account, Dona removes your email address, bank name and last four, attribution, sessions, and card records, and keeps the ledger rows, transfer records, and the audit trail under an anonymised account for reconciliation and legal compliance. Stripe keeps its own records under its own policy. Charge attempt records are kept with the card they belong to.

9. Security

Everything travels over HTTPS. Sign-in links are single use and expire in 15 minutes. Sessions are signed cookies that your browser cannot read. Card data is handled entirely by Stripe, which is PCI certified, so a breach of Dona could not expose a card number. Network addresses are stored only as a salted hash. No system is perfectly secure, and if Dona learns of a breach affecting your data it will email you at the address on your account.

10. Your choices

• See your data: your wallet, ledger, cards, and transfers are all shown in the app.
• Change your email preference in settings.
• Link a different bank at any time from the transfer or settings screens.
• Close your account from settings once your wallet is empty and nothing is pending. Dona then does what section 8 describes.
• Ask for a copy or a correction by writing to hello@3sb.io from the address on your account.

Residents of states with consumer privacy laws, including California, have the rights those laws provide. Dona does not sell or share personal information for advertising and honours requests to know, correct, or delete as described here.

11. Children

Dona is for adults. You must be 18 or older to hold an account, and Dona does not knowingly collect information from anyone younger. If you believe a minor has an account, write to hello@3sb.io and it will be closed.

12. Changes to this policy

Dona may change this policy. Material changes are emailed to the address on your account and posted here with a new effective date. Continuing to use Dona after a change takes effect means you accept it.

13. Contact

Attention: Dona @ 3sb
Relai Group, Inc.
hello@3sb.io