Privacy Policy

Account information: When you create an account, we collect your name, email address, and organization details. This is used to identify you and provide the service.

Organization data: Contacts, members, donors, membership tiers, email campaigns, automation workflows, and other data you enter into Seedwork. This data belongs to your organization — we are a processor, not the owner.

Donor records: Names, email addresses, donation amounts, and related information you store about your donors. This data is entered by your organization and managed under your responsibility.

Payment information: Billing is processed through Stripe. We never store credit card numbers or banking details on our servers. Stripe handles all payment data under their PCI Level 1 compliance.

Application hosting: Vercel (SOC 2 Type II compliant). Servers located in North America.

Database: Render PostgreSQL (encrypted at rest). Your organization's data, contacts, and records are stored here.

Payments: Stripe (PCI Level 1 compliant). All payment data is stored and processed by Stripe.

We share data with the following third parties only as needed to provide the service:

Stripe: Payment processing for subscriptions and donor transactions.

Resend: Transactional and campaign email delivery. Resend processes recipient email addresses and email content on our behalf.

We do not sell your data to anyone. Ever.

Session cookies: Used for authentication. These keep you signed in and are essential for the service to function.

sw_visitor_id: A cookie used for A/B test variant assignment on public donation and join pages. It persists for 1 year and contains only a random identifier — no personal information. This ensures you see a consistent experience when returning to a page.

Analytics: We use Vercel Analytics, which is cookieless. It collects anonymized page view data without tracking individual users.

We do not use any third-party tracking cookies.

You can export your contact list as a CSV file directly from the Contacts page in your dashboard. Full database export (including donation history, email campaigns, and other records) is not currently available as a self-serve feature. If you need a full export, contact us and we'll help.

You can request account deletion by emailing contact@seedwork.ca. Upon request, all organization data — contacts, donations, memberships, emails, settings — will be permanently deleted within 30 days. There is no self-serve deletion button in the product at this time.

Seedwork complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect only the data necessary to provide the service, use it only for the purposes described in this policy, and protect it with industry-standard security measures.

You have the right to access, correct, or request deletion of your personal information at any time by contacting us.