Privacy Policy | Keystone House

Keystone House, Inc. ("we," "our," or "us") operates the Keystone House Donations mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect information when our staff uses the App to manage fundraising events — including guest check-in and check-out, payment processing, silent auctions, raffles, paddle raises, and event reporting.

This App is intended for internal use only and is distributed exclusively to authorized staff and volunteers of Keystone House, Inc. via Mobile Device Management (MDM). It is not available to the general public.

1. Information We Collect

When using the App during fundraising events, we may collect the following information about event guests:

Guest Information: Name and contact information provided at check-in for event management and communication purposes.
Payment Information: Credit and debit card data collected via card readers or NFC for event purchases, including auction items, raffle tickets, and paddle raise pledges. Payment card data is processed directly by Stripe and is not stored on our systems or devices.
Transaction Records: Records of purchases, bids, pledges, and payments made during events for reporting and accounting purposes.

2. How We Use This Information

We use the information collected through the App solely for the following purposes:

Managing guest check-in and check-out at fundraising events
Processing payments for auction items, raffle tickets, and pledges
Generating event reports and financial summaries for internal use
Fulfilling legal and accounting obligations related to charitable fundraising

3. Payment Processing

All payment processing is handled by Stripe, Inc., a third-party payment processor. When a guest makes a payment through the App, their payment card data is transmitted directly and securely to Stripe. We do not store, access, or retain full payment card numbers, CVV codes, or other sensitive cardholder data on our systems or devices.

Stripe's handling of payment data is governed by their own Privacy Policy, available at stripe.com/privacy. Stripe is certified as a PCI DSS Level 1 Service Provider.

4. Data Sharing and Disclosure

We do not sell, rent, or share guest information with third parties for marketing purposes. We may disclose information only in the following limited circumstances:

Stripe: For payment processing as described above.
Legal Compliance: When required by law, subpoena, or other legal process.
Protection of Rights: When necessary to protect the rights, property, or safety of Keystone House, Inc., our staff, or others.

5. Data Security

We take reasonable technical and organizational measures to protect the information collected through the App against unauthorized access, loss, or disclosure. The App is distributed only to authorized staff via Mobile Device Management (MDM) and is not accessible to the general public. Devices running the App are managed by Keystone House, Inc. and subject to our internal security policies.

6. Data Retention

We retain event guest information and transaction records for as long as necessary to fulfill the purposes described in this policy, including any legal, accounting, or reporting obligations. When information is no longer needed, it is securely deleted or anonymized.

7. Children's Privacy

The App is operated by staff for internal event management purposes only. We do not knowingly collect personal information from children under the age of 13. If you believe we have inadvertently collected such information, please contact us immediately so we can take appropriate action.

8. Your Rights

Event guests whose information has been collected through the App may request access to, correction of, or deletion of their personal information by contacting us using the information below. We will respond to all requests in a reasonable timeframe and in accordance with applicable law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. We encourage you to review this policy periodically. Continued use of the App following any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Keystone House, Inc. 147 Main Street, Norwalk, CT 06851 203.855.7920 info@keystonehouse.org