ScanRaise is operated by StanHattie LLC ("we", "us", "our"). This Privacy Policy describes how we collect, use, and protect your information when you use our platform.
Organization accounts: Name, email address, phone number, organization name, address, and role within the organization.
Donors: Name and email address (if provided), donation amount, and any messages included with donations. This applies to donations made through individual fundraiser QR codes, organization-level donation pages, event ticket purchases, and merchandise orders.
Event attendees: Name and email address provided during ticket purchase or free event registration.
Store buyers: Name, email address, size selection, and order details for merchandise purchases.
Auction bidders: Name, email address, bid amounts, and buy-now purchase details.
Raffle entrants: Name, email address, ticket quantity, and entry details.
P2P fundraiser creators: Name, email address, display name, personal story text, goal amount, and optional photo URL. Edit access is managed via time-limited HMAC tokens sent to the creator's email.
Email campaign recipients: Email addresses of donors who have transacted with an organization. Unsubscribe preferences are recorded per organization.
Donor CRM data: Organizations may add tags and notes to donor records. Tags and notes are visible only to organization admins.
Fundraiser participants: First name and last initial only. This information is entered by adult organizers, not by children or participants directly.
Campaign content: Organization logos, campaign descriptions, and milestone information uploaded by organizers.
When you use ScanRaise, we automatically collect: device information, IP address, browser type, operating system, pages visited, QR codes scanned, and time spent on the platform. We use cookies for essential platform functionality and analytics.
All payment processing is handled by Stripe. ScanRaise does not collect, store, or have access to full credit card numbers or bank account details. We receive limited transaction data from Stripe (donation amount, last four digits of the card, and transaction status). Stripe's handling of payment information is governed by Stripe's Privacy Policy.
We never sell your personal information to third parties.
ScanRaise is not directed at children under 13. We do not knowingly collect personal information from children under 13. When organizations list participant names (such as students doing fundraisers), those names consist of first name and last initial only, entered by adult organizers — never by the children themselves. Children do not create accounts, provide email addresses, or directly interact with the platform. If we learn that a child's personal information has been inadvertently collected, we will delete it promptly.
We retain account information for the duration of your account plus 3 years for legal and tax compliance. Donation records are retained for 7 years per IRS guidelines. Stripe retains payment data per their own retention policy. You may request deletion of your data at any time by contacting us.
We use industry-standard security measures including encryption in transit (TLS/SSL), secure hosting infrastructure, and access controls. Payment data is handled by Stripe, which maintains PCI DSS compliance. No system is 100% secure, and we cannot guarantee absolute security of your data.
When a verified erasure request is processed, ScanRaise anonymizes the requester's personal information across all record types associated with the specified organization, including: donations, event tickets, merchandise orders, auction bids, raffle entries, and email unsubscribe records. The donor CRM record is deleted. Anonymized transaction records (with personal identifiers removed) are retained for the organization's financial reporting. Erasure is scoped to one organization at a time — if you have interacted with multiple organizations, you must request erasure from each.
Iowa: Under the Iowa Consumer Data Protection Act, Iowa residents have the right to access, delete, and opt out of the sale of their personal data.
California: Under the CCPA/CPRA, California residents have the right to know what personal information is collected, request deletion, opt out of the sale of personal information, and not be discriminated against for exercising these rights.
To exercise any of these rights, contact us at support@scanraise.com.
What we collect: GPS coordinates, accelerometer data, device orientation, and photos — only when a participant opts in to activity tracking for athon-style fundraisers.
Purpose: Activity verification for athon-style fundraisers (walk-a-thons, run-a-thons, swim-a-thons, read-a-thons, and similar campaigns where donors pledge per unit of activity).
Consent: All sensor data collection requires explicit opt-in. Participants tap "Start Tracking" and grant browser permissions. No data is collected passively or without consent.
Storage: Verification data is stored encrypted. GPS paths, step samples, and photos are retained for 90 days after campaign end, then automatically deleted.
No sale: We never sell, license, or share raw biometric or sensor data with third parties.
Third-party integrations: When participants connect Strava or Fitbit, we access only activity data (distance, duration, laps) via their OAuth APIs. We do not access health records, heart rate, sleep data, or other sensitive health information.
BIPA compliance: We do not collect fingerprints, voiceprints, retina scans, or facial geometry. GPS coordinates and accelerometer readings are not classified as biometric identifiers under the Illinois Biometric Information Privacy Act.
Data subject rights: All sensor data is subject to the same GDPR/CCPA rights described elsewhere in this policy. You may request deletion of all verification data at any time.
Children: Activity tracking for participants under 13 requires parental consent as described in our COPPA section above.
We may update this Privacy Policy from time to time. We will notify registered users by email or by posting notice on the platform. The "Last updated" date at the top reflects the most recent revision.
StanHattie LLC
Des Moines, Iowa
support@scanraise.com