Privacy Policy

Effective October 26, 2026

TruePyramids is run by TrueGivers LLC (“we”, “us”). This policy explains what we collect when you use truepyramids.com, what we do with it, who helps us run the service, and the choices you have. The short version: we keep gift amounts, dates and constituent IDs, never your donors’ names or contact details, and we never sell anything.

What we collect

Your account

You sign in with Google or Microsoft; we never see or store a password. Your provider tells us your name, email address, whether the email is verified, and an ID for your account, and for Microsoft work accounts the organization that issued it. We keep your name, email, the sign-in ID, the organizations you belong to and your role in each.

Your organization

The organization name, its team and invitations (the invited email address), the pyramids, scenarios, campaigns and prospect plans you create, organization settings, and, for Plus, the plan you’re on and its billing status.

Payments

Plus is paid through Stripe’s checkout and customer portal. We never see or store card numbers. We keep the Stripe customer and subscription IDs, the plan interval, its status and when the current period ends.

Ratings and feedback

When you rate a pyramid we keep the stars, any feedback you write, and whether you chose to share the rating publicly. To show where shared ratings come from (“User from Illinois”), we send your IP address to MaxMind once, when the rating is saved, and keep only the state, province or country it returns. The IP address itself is not stored.

Technical logs

Like most sites, our servers record requests, errors and timings so we can keep the service running. These logs mask visitors’ IP addresses and are kept for 30 days.

Your donor data

Your organization’s gift data belongs to your organization. We process it only to build your pyramids, campaigns, plans and history, and we act on your organization’s behalf when we do.

What we keep: transaction IDs, constituent IDs, gift dates, amounts and types, capacity ratings if your file has them, and other columns you keep as details (like appeal or fund).
What we remove: anything that looks like personal information, such as names, email addresses, phone numbers and postal addresses, is removed the moment we read your file and is never stored.
Your original file is deleted as soon as it’s processed. A file nobody finishes reviewing is deleted after 24 hours.
CRM connections are read-only. We read gifts and the fields you choose, never change anything in your CRM, and keep the connection’s tokens or API key encrypted.
Constituent IDs stay yours. Exports list IDs so you can match them back in your own CRM.

Please don’t upload data you don’t have the right to share with a service provider, and don’t put personal information in columns you keep as details.

How we use it

To run the service: sign you in, build and update your pyramids, sync your CRM, and keep your organization’s data separate from everyone else’s.
To send the email the service needs: invitations, “your pyramid is ready” notes and sync failures. Stripe sends payment receipts. Besides a short welcome series when you join, which you can turn off in Settings › Your profile or with the link in any of those emails, we don’t send marketing email.
To take payments and keep billing records.
To keep the service secure and fix problems.
To show shared ratings on the home page, only when you chose to share them.

We don’t sell personal information, share it for advertising, or use your donor data to train AI models.

The AI assistant

The AI assistant (part of Plus, or free with your own API key) only sees totals, like gift counts and amounts by level, your goal, your prospect rule and tier summaries. It never sees donor records or constituent IDs.

With Plus, requests go to Anthropic. If your organization adds its own Anthropic or OpenAI key, requests go to that provider on your organization’s account and under its terms with them. Your key is stored encrypted and never shown again.

Who helps us

We use these service providers, each only for the job listed:

Microsoft Azure: Hosting, database, file storage, key storage, logs and email delivery, in the United States (Central US).
Google and Microsoft: Signing you in.
Stripe: Payments and billing for Plus.
Anthropic, and OpenAI if you choose it: The AI assistant, with totals only.
MaxMind: Turning an IP address into a region for shared ratings.
Google Fonts: Delivering the site’s fonts, which shares your IP address with Google when a page loads.
Your CRM: Only if you connect it: reading your gifts.

We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply.

Cookies

We use only the cookies the site needs to work: one that keeps you signed in, one that remembers which organization you last used, one used briefly while you sign in with Google or Microsoft, and one that protects forms from being submitted by other sites. We don’t use advertising or tracking cookies. Your browser may also remember small preferences, such as a panel you closed.

Keeping and deleting

Uploads and pyramids can be deleted in Settings › Data, which deletes everything built from them. Team members can delete what they added; the owner can delete anything.
Your organization’s owner can Delete everything in Settings › Data. That deletes the workspace: every upload, pyramid, plan, snapshot and rating, its CRM connections and its team, and cancels Plus.
Pyramid history keeps each pyramid’s monthly snapshots until you delete the pyramid or the workspace; snapshots taken after syncs are thinned to one a month after 90 days.
Deleted data leaves our database backups within 7 days.
Stripe keeps billing records as the law requires.
To delete your own account (your name, email and sign-in), email us.

Security

Every connection uses HTTPS. Data is encrypted at rest. CRM credentials and API keys are encrypted with keys held in Azure Key Vault. Each organization’s data lives in its own database schema, and every request is checked against your membership. No system is perfectly secure; if we learn of a breach that affects you, we’ll tell you.

Your choices and rights

You can see and change your name in Settings › Your profile, leave sharing off when you rate, and delete data as described above. You can also ask us to tell you what personal information we hold about you, correct it, or delete it, and we’ll respond within 45 days. Depending on where you live (for example California), you may have further rights under local law; we honor them and won’t treat you differently for using them.

If your organization uploaded data about you as a donor, it holds only an ID and gift amounts here; please contact that organization, and we’ll help them with your request.

TruePyramids is for organizations and isn’t meant for anyone under 16.

Changes and contact

If we change this policy, we’ll update the date above, and for significant changes we’ll email account owners before they take effect.

Questions or requests: support@truepyramids.com, or TrueGivers LLC, PO Box 364, Oak Park, IL 60303.