Privacy Policy

FieldBase (“we”, “us”) is a donor ledger for small organizations, operated by Chang Hyun Kwon as a sole proprietorship. This policy explains what we collect, why, and who else handles it.

Two kinds of information

About you, our customer: we decide how it’s used, as described below.

About your donors: the names, contact details and gift records you put into FieldBase belong to your organization. Your organization decides what to store and why; we handle that information only on your behalf, to provide the service to you, and never use it for anything else.

What we collect about you

• Your email address, to sign you in with emailed links and to contact you about your account. We never sell it.
• Your organization’s details — name, contact email, base currency, tax ID, fiscal sponsor and statement signer — which appear on the statements you produce.
• Your role and team: which organizations you belong to, and the email addresses of people you invite. Members of an organization can see each other’s email addresses.
• Billing: if you subscribe, Paddle tells us your subscription status and its own customer and subscription IDs. We never see or store card numbers.

What your organization stores about donors

Names, email addresses, phone numbers, postal addresses, giving frequency and pledges, gifts (date, amount, currency, exchange rate, fund, payment method, anything the donor received in return) and private notes. Year-end statements are generated from this on demand and are not stored. Only members of your organization can see it; the database enforces that separation for every request.

Cookies

We set only the cookies the service needs to work: sign-in cookies that keep you signed in (and a short-lived one while you’re signing in), and one that remembers which organization you were last working in. We don’t use advertising or analytics cookies. Paddle’s checkout sets its own cookies when you open it.

Who handles data for us

• Supabase — our database and sign-in service, which also sends sign-in emails
• Vercel — hosts the website and application
• Paddle.com, our Merchant of Record, and its payment providers — process subscriptions and payments
• Frankfurter (frankfurter.dev) — supplies European Central Bank exchange rates; it receives only currency codes and dates, never personal information

These providers may process data outside your country. Data is encrypted in transit, and our database provider encrypts it at rest.

How long we keep it

We keep your account and your organization’s records while your account exists, including after a plan ends, so you can still read and export them. When you ask us to delete your account or your organization, we delete it within 30 days.

Your choices

You can ask for a copy of your information, ask us to correct it, or ask us to delete it, by emailing hello@fieldbaseledger.com. We act on requests within 30 days. If a donor asks your organization about their information, you can export their gift records from FieldBase, and we’ll help you correct or delete their details.

Changes

If this policy changes materially, we’ll note it here and email account holders.