1. Introduction

Better Process Group LLC ("we," "us," or "our") operates BetterGather (the "Service"), a community management platform for non-profit organizations. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

BetterGather is intended for U.S.-based organizations. This policy is written for U.S. operations and state privacy requirements.

By using BetterGather, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Our Role and Your Organization's Role

Most of the personal information in BetterGather is entered by an organization about its own members, volunteers, donors, and program participants. For that information, the organization decides what is collected and why, and we process it on the organization's behalf in order to provide the Service.

If you are a member, volunteer, or donor of an organization that uses BetterGather and you want to access, correct, or delete your records, please contact that organization directly — it controls those records. We will assist the organization in responding to your request. For information we collect directly (for example, account and billing information for the organization itself), we act on our own behalf and this policy applies in full.

3. Information We Collect

3.1 Information You Provide

We collect information you directly provide when using the Service:

  • Account Information: Name, email address, organization name, phone number, billing address
  • Community Records: Member, volunteer, and donor contacts; households and groups; event and program details; RSVPs and roster assignments; notes, documents, photos, and videos
  • Giving Data: Donation history, campaign and pledge records, grant tracking information
  • Communication Data: Emails and SMS messages sent through the Service, support requests, and related delivery records
  • Payment Information: Card details are collected and processed by Stripe; we do not store full card numbers
  • Profile Information: User preferences, availability, skills and roles, and training or certification records

3.2 Information We Collect Automatically

When you use the Service, we automatically collect:

  • Usage Data: Pages viewed, features used, time spent, clicks, and search queries
  • Device Information: IP address, browser type, operating system, and device identifiers
  • Log Data: Access times, error logs, and performance data
  • Cookies: Session cookies, preference cookies, and analytics cookies (see Section 9)

3.3 Information from Third Parties

We may receive information from third-party services you connect to BetterGather:

  • Microsoft 365 / Outlook: Calendar events and related scheduling data, when you connect a calendar
  • Microsoft Entra ID and Microsoft Entra External ID: Authentication and identity information
  • Google Sign-In: Basic profile and email address, when used to sign in
  • Stripe: Payment status, subscription state, and partial card details (such as the last four digits)

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process transactions and manage your organization's subscription
  • Deliver the emails, text messages, and notifications your organization sends
  • Schedule events, build rosters, and coordinate volunteers
  • Provide customer support and respond to your requests
  • Send administrative notifications, updates, and security alerts
  • Improve and optimize the Service through analytics and research
  • Detect, prevent, and address fraud, security issues, and technical problems
  • Comply with legal obligations and enforce our Terms of Use
  • Send marketing communications to organization contacts (with consent; you can opt out anytime)

We do not sell personal information, and we do not use your community's records to train third-party AI models.

AI-Assisted Features

Some features use AI to draft text or suggest scheduling. Where that happens, content you submit to the feature is processed by Microsoft Azure OpenAI Service under our enterprise agreement, within Microsoft's cloud, and is not used to train foundation models.

5. How We Share Your Information

We do not sell or rent personal information. We may share information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly authorize us to do so, such as when connecting a third-party integration.

5.2 Service Providers

We share information with trusted service providers who perform services on our behalf:

  • Microsoft Azure: Cloud hosting, database, and file storage
  • Azure Communication Services: Email, SMS, and voice delivery
  • Azure OpenAI Service: AI-assisted drafting and suggestion features
  • Stripe: Subscription and donation payment processing
  • Microsoft Graph: Calendar and Microsoft 365 integration
  • Azure Monitor / Application Insights: Performance monitoring and diagnostics

These service providers are contractually obligated to protect your information and to use it only for the purposes we specify.

5.3 Within Your Organization

Records are visible to users in your organization according to the roles and permissions your administrators configure. Administrators can view, export, and delete organization data.

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.5 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities (for example, court orders, subpoenas, or government agencies).

5.6 Protection of Rights

We may disclose information to protect our rights, property, or safety, or that of our users or the public, including for fraud prevention and security investigations.

6. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • Authentication: Microsoft Entra ID / External ID with multi-factor authentication support
  • Access Controls: Role-based access controls and least-privilege principles
  • Multi-Tenancy: Logical data isolation ensures your data is only accessible to authorized users in your organization
  • Private Media: Uploaded videos and sensitive files are stored in private containers and served through short-lived, token-protected links
  • Monitoring: Continuous security monitoring and incident response
  • Regular Reviews: Periodic security assessments and dependency scanning

While we implement strong security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

7. Data Retention

We retain information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

  • Active Accounts: Data is retained for the duration of your subscription
  • Canceled Accounts: Data is retained for 30 days after cancellation to allow for reactivation, then deleted
  • Backup Data: Backups are retained for 90 days, then permanently deleted
  • Legal Requirements: Some data may be retained longer to comply with legal obligations, such as donation and tax records
  • Anonymized Data: We may retain anonymized analytics data indefinitely

You can request deletion of your data at any time by contacting us (see Section 8).

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to access your personal information and request a copy in a portable format. Organization administrators can export most data directly from the Service in CSV format.

8.2 Correction

You have the right to correct inaccurate or incomplete personal information. Most information can be updated directly in the Service.

8.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions. Contact us to request account deletion.

8.4 Opt-Out

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your communication preferences. You cannot opt out of transactional messages such as invoices and security alerts. To stop text messages from an organization, reply STOP to any message from that organization.

8.5 Do Not Sell (California Residents)

We do not sell or share personal information for cross-context behavioral advertising. California residents have the right to request information about our data practices under the CCPA/CPRA.

8.6 Additional U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights, including rights to know, delete, correct, and appeal decisions about personal information processing, as applicable under state law.

How to Exercise Your Rights

To exercise any of these rights, email us at privacy@bettergather.com. We will respond within 30 days and may require verification of your identity first. If your request concerns records held by an organization that uses BetterGather, we will refer you to that organization (see Section 2).

9. Cookies and Tracking

We use cookies and similar technologies to operate the Service and understand how it is used:

9.1 Essential Cookies

Required for the Service to function, including authentication sessions and security. These cannot be disabled.

9.2 Functional Cookies

Remember your preferences and settings, such as theme, saved views, and recently visited pages.

9.3 Analytics Cookies

Help us understand how the Service is used, via Azure Application Insights. This includes page views, feature usage, and performance metrics.

9.4 Marketing Pixels

Our public marketing pages may use advertising pixels (such as the Meta Pixel) to measure campaign performance. These are used only on our public marketing pages, never inside the signed-in application.

9.5 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling cookies may limit functionality.

10. Third-Party Services

BetterGather integrates with third-party services. Your use of those services is subject to their respective privacy policies:

We are not responsible for the privacy practices of third-party services. We recommend reviewing their privacy policies.

11. Children and Minors

BetterGather accounts are for adults. You must be at least 18 years old to create an account or sign in to the Service, and we do not knowingly allow children to register accounts.

We recognize that many organizations run youth and family programs and therefore keep records about minors — for example, a child's name, age or grade, guardian contact details, attendance, and photos. That information is entered by the organization, which decides what to collect and is responsible for:

  • Obtaining parental or guardian consent as required by law and by its own policies
  • Limiting who inside the organization can view records about minors
  • Honoring requests from parents and guardians to access, correct, or delete a child's records
  • Complying with any child-safeguarding requirements that apply to its programs

We do not knowingly collect personal information directly from children, we do not use information about minors for marketing, and we do not sell it. If you believe a child has created an account or that information about a child has been provided to us improperly, contact privacy@bettergather.com and we will work with the relevant organization to delete it promptly.

12. Data Location

BetterGather is hosted on Microsoft Azure with data centers primarily in the United States. Customer data is processed in support of U.S. operations.

If data is processed by a service provider outside your local jurisdiction, we require contractual protections and security controls appropriate to the data involved.

If you have data location requirements, contact privacy@bettergather.com before onboarding.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you by email (if you have provided an email address)
  • Display a prominent notice in the Service

Your continued use of the Service after notice of changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-related inquiries, we will respond within 30 days. For urgent security concerns, please mark your email "URGENT - SECURITY".