Privacy policy
What Munchi collects when you run a fundraiser, sell for one, or order from one; why we collect it; who helps us handle it; and how to ask us to see or delete it.
This is a draft. It is being reviewed and is not yet in effect. It describes how the site works today; if you have a question about it, contact us.
Who we are
Munchi runs dessert fundraisers from Las Vegas, Nevada. This policy covers munchifunds.com and the emails it sends. To reach us about your information, email contact@munchifunds.com.
What we collect
From organizers, the adults who run a fundraiser: your email address, which you sign in with; your name; your phone number if you give it; your group’s name, type and city; your school’s name if the group is a school group; and the details of each campaign you build. If you add a passkey, your device gives us a public key for it, never your fingerprint, face or PIN.
About sellers: only a first name and a last initial, entered by the organizer, and a code we make for each seller’s order link. We never ask for a seller’s age, address, photo, email or phone.
From buyers: your name and email address, your phone number if you give it, and what you ordered. You pay on Square’s checkout page; your card details go to Square, never to Munchi. We keep Square’s reference numbers for your payment and any refund.
From anyone who uses the contact form: your name, email address, group if you give one, and your message.
When you agree to our terms, at sign-up or when you order: your email address, the exact wording you agreed to, and when, kept as a record of the agreement.
From every visitor who submits a form: a one-way scrambled form of your internet address and, for some forms, your email address, used to stop the same person sending too many requests; the scrambled address is also kept with each order and each record of an agreement, to help spot abuse. They are scrambled with a secret key, so the original address can’t be worked out from them.
Why we use it
To sign organizers and staff in; to review, run and deliver fundraisers; to take orders, send receipts and handle refunds; to pay each group its share; to answer messages; and to keep the site secure. Organizers see how many boxes each seller sold, never who bought them.
We send emails about your account, your campaign or your order. We do not send marketing email, and we do not sell or share your personal information for money or for advertising.
Who helps us
We use a small number of companies to run the site, and they handle your information only to provide their service to us: Supabase stores our data and signs people in; Square takes payments and refunds; Resend delivers our emails; Cloudflare runs the security check on our forms; Upstash keeps the scrambled counters that limit repeated requests; and our hosting provider runs the site itself.
We will also share information if the law requires it.
How long we keep it
We keep order and payment records for as long as we need them for accounting and taxes, and other information for as long as we need it to run fundraisers or to answer you. The counters used to limit repeated requests expire on their own within an hour.
How we protect it
Every table in our database is locked to the people who need it: organizers see only their own campaigns, buyers see only their own order through a private link, and staff access is limited by role. Card details never touch our servers. Changes made by staff are recorded in a log that cannot be edited.
Your choices and requests
You can ask to see the information we hold about you, to correct it, or to delete it, by emailing contact@munchifunds.com or using the contact form and choosing “A privacy request”. We will confirm it’s you before we act, and some records, such as payments, may need to be kept for accounting.
Munchi does not sell personal information. If you would still like to record a request not to have your information sold, send it the same way and we will honor it.
Children
The site is not directed to children under 13, and no one under 13 may create an account or submit a form. See our children’s privacy page for how sellers’ information is handled.
Changes
If we change this policy, we will update it here with a new effective date. If a change matters to how we use information you have already given us, we will tell you by email.
Questions
Email us at contact@munchifunds.com, or use the contact form.