How we handle data.

Every nonprofit listed in this directory is built from publicly filed records — IRS Form 990 (and 990-PF, 990-N), Florida Department of Agriculture and Consumer Services (FDACS) charitable solicitation registrations, and Florida Department of State (Sunbiz) corporate filings.

We republish mission statements, program narratives, contact addresses, officer names, revenue bands, and verification status. We do NOT publish individual donor records, employee names beyond filed officers, or internal financial details that are not on the public record.

If your organization's public-record data is inaccurate or outdated, use the "Report a data issue" link on your profile and we'll review within five business days.

When you sign in, we collect your email and the role you choose (nonprofit or sponsor). When you complete your profile, we collect what you provide — organization details, cause interests, budget range, visibility preferences.

We do not sell user data. We do not share it with third parties except to facilitate the workflows you initiate (e.g., delivering your expression of interest to the nonprofit you selected).

Sponsors choose how their profile appears publicly:

• Public — all profile fields visible, including budget range
• Mutual interest — cause interests public; budget and details revealed after a nonprofit expresses interest
• Private — profile discoverable by matching algorithm only; not publicly browsable

Default is public — every field on the form is visible to anyone browsing the directory. Switch to mutual interest or private any time from Settings → Sponsor.

Transactional emails (sign-in links, password resets, claim-approved, interest-received) are sent as needed. Marketing emails (weekly digest, new-match notifications) require your opt-in and include an unsubscribe link in every message, per CAN-SPAM. Our mailing address is listed in every marketing email footer.

Manage comms preferences at Settings → Communications.

We use PostHog for product analytics — page views, feature use, and conversion funnels, aggregated for product decisions rather than per-person profiling. PostHog is the only third-party service that receives behavioral data from this site. We do NOT run advertising trackers, retargeting pixels, social-media pixels, or data-broker tags.

We use Sentryfor crash and error reporting (stack traces, browser version, anonymized URL) so we can fix bugs we don't see in our own testing.

Essential cookies maintain your session when signed in. No cross-site tracking cookies.

Email hello@sponsorpolk.comfrom the address on your account to request deletion or a data export. We confirm and act within 30 days, usually within 7. Deletion removes your profile, comms preferences, saved items, and interest/pitch history from public view; aggregated analytics events (which don't identify you) are retained.

Self-service deletion will arrive in Settings → Account in a future release; until then the email path above is the source of truth.

Note: nonprofit directory listings built from public records are not deleted on user account deletion — they remain in the public directory because the underlying records are public. To request removal of a nonprofit listing entirely (e.g., dissolved organization), contact us directly.

Accounts are created with email and password. You can also request a one-time magic link from the sign-in page if you'd rather not remember a password — both methods are first-class.

Passwords are stored only as salted hashes by our auth provider (Supabase Auth) and never accessible to Summit Labs. Sessions are HTTP-only cookies bound to your browser; signing out invalidates them.

All data is stored in Supabase Postgres with row-level security policies. Database backups run daily.

Security questions or reports: security@sponsorpolk.com

Summit Labs LLC
Lakeland, FL
hello@sponsorpolk.com

Privacy questions, data corrections, or deletion requests: reply to any transactional email or contact us at the address above.