Upic Solutions Privacy Policy
Overview and Scope
Upic Solutions, Inc. (the “Company,” “we,” “our,” or “us”) is a 501(c)(3) nonprofit organization based in Cincinnati, Ohio. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect personal information (“PII”).
This Policy applies to upicsolutions.org, donorengage.org, the DonorEngage donor portal, and any other website, application, or service that links to it (together, the “Services”). It also applies when you interact with us by phone, email, text message, or in person.
By using the Services or submitting information to us, you acknowledge the practices described in this Policy.
Information We Collect
PII means information that identifies, relates to, or could reasonably be linked to you or your household. It does not include deidentified or aggregate information, or publicly available government records. In the last 12 months we have collected the following categories:
| Category | Examples |
| Identifiers | Name, mailing address, email, phone number, IP address |
| Donor information | Gift amount, date, frequency, designation, tribute or memorial details, receipts |
| Donor account information | Login email, password (stored only in hashed form), giving history, recurring-gift settings, communication preferences |
| Payment information | Card type, last four digits, and expiration date (full card numbers are held by the payment processor, not by us) |
| Employment information | Employer name and workplace giving or matching-gift details |
| Internet activity | Pages viewed, referring site, browser and device type, interactions with the Services |
Sensitive PII
The only sensitive information we collect is account login credentials. We do not collect Social Security, driver’s license, or passport numbers, precise geolocation, or biometric or health data.
Deidentified information
We may also collect information that does not identify you, such as device type, operating system, browser, internet service provider, referring and exit pages, and date and time stamps. We take reasonable measures to keep it from being re-identified.
How We Collect Information
The information we collect depends on how Users use our Services or otherwise interact with us. We collect PII and Deidentified Information in various ways, including:
Directly from You
When you donate, create a donor account, complete a form, sign up for messages, or contact us.
Automatically
Through cookies and similar technologies when you use the Services. We use functional cookies to run the Services and keep them secure, statistics cookies (such as Google Analytics) to understand how the Services are used, and marketing cookies (such as Google advertising cookies) to measure and target our outreach. On your first visit, a banner lets you accept or decline non-functional cookies. Our Cookie Policy lists each cookie, its purpose, and how long it lasts, and you can change your choices at any time on our Opt-out Preferences page or in your browser settings.
From Third Parties
Including United Way agencies and employers that run workplace giving campaigns through our Services, and service providers that help us verify or update contact information. Their privacy practices may differ from ours.
How We Use Information
- Donations and fundraising: process gifts, issue receipts and tax acknowledgments, manage recurring gifts and pledges, route designated gifts, and maintain donor records
- Communications: thank you, send updates and solicitations, and answer questions and support requests
- Improving the Services: understand how the Services are used and improve their content and layout
- Advertising: show and measure our outreach on other websites and platforms through Google advertising cookies
- Safety and security: authenticate users, secure payments, prevent fraud and abuse, conduct audits, and enforce our terms
- Legal obligations: meet tax, accounting, reporting, and other legal requirements
We take reasonable steps to keep PII accurate and complete. We will not collect new categories of PII or use PII for materially different purposes without notifying you. You may opt out of solicitations and marketing at any time (see Your rights and choices).
How We Disclose Information
We do not sell PII for money, and we do not rent or trade donor or email lists. However, our websites use Google advertising cookies. Under some state privacy laws, this may be considered a “sale” or “sharing” of PII for cross-context behavioral advertising. You can opt out at any time on our Opt-out Preferences page.
We disclose PII only as follows:
- United Way agencies and recipient organizations: to process and deliver gifts you designate, including to charitable organizations a United Way agency directs your gift to
- Your employer: for workplace giving campaigns and matching gifts you request
- Service providers: such as payment processors, hosting, CRM, email and SMS delivery, analytics, and mailing vendors, who may use PII only to provide services to us
- Affiliates: organizations under common control with Upic Solutions, Inc. [delete if none]
- Legal and safety reasons: to comply with law, a subpoena, or court order; to cooperate with law enforcement; or to protect the rights, property, or safety of us, our users, or others
- Organizational changes: in a merger, acquisition, or transfer of assets, subject to this Policy or notice to you of any different terms
- Advertising partners: Google, through advertising cookies on our websites, subject to your opt-out choices
In the last 12 months, we have disclosed Identifiers, Donation information, Employment information, and Internet activity for these business purposes. We have also made Identifiers (such as cookie IDs and IP addresses) and Internet activity available to advertising partners, which some state laws may treat as a sale or sharing.
Payment Processing and Security
Card and bank details are entered directly with a third-party payment processor over encrypted (TLS) connections. The processor may vary depending on the organization you are giving to, but every processor available through our Services must be PCI DSS compliant. We do not store full card or bank account numbers. The processor’s own privacy policy also applies to the payment details you provide to it.
We protect PII with administrative, technical, and physical safeguards, including role-based access, encryption in transit, secure hosting, and vendor security reviews. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your PII, we will notify you as required by law.
Data Retention
We keep PII while you have an account with us or as needed to provide the Services. After that, we keep donation and tax records for [7] years after your last gift to meet legal, tax, and audit requirements. We then delete or deidentify PII within a reasonable period, except where the law requires us to keep it longer.
Your Rights and Choices
Wherever you live, you may:
- Access the PII we hold about you and receive a copy in a portable format
- Correct inaccurate PII, or update it yourself in the donor portal
- Delete your PII, except records we must keep by law, such as tax records
- Opt out of advertising that may count as a sale or sharing of PII, and limit our use of sensitive PII, on our Opt-out Preferences page
- Opt out of solicitations, marketing emails, mail, calls, or text messages. Use the unsubscribe link, reply STOP to texts, or contact us. We will still send receipts and service notices.
- Change or cancel recurring gifts in the donor portal or by contacting us
State Privacy Rights
Some state laws, including laws in California, Colorado, and Oregon, give residents additional rights, such as the right to know what we disclose and to opt out of targeted advertising. We honor these rights where they apply, and we will not discriminate against you for using any of them.
How to Make a Request
Email [email protected], call us at (877) 459-5489, write to us, or submit a request on our Opt-out Preferences page (see Contact information). You do not need an account. An authorized agent may submit a request on your behalf. We will verify your identity using information we already hold, and we use the information you provide only to process your request.
Timing
We confirm receipt within 10 days and respond within 45 days. If we need more time, up to 45 additional days, we will tell you why in writing. We do not charge a fee unless a request is excessive or repetitive. If we deny a request, we will explain why and how to appeal.
Complaints
If you have a concern about how we handle PII, contact us. We will investigate and respond within 45 days. If you are not satisfied, you may contact your state attorney general.
Other Terms
Text Messages
We do not routinely send text messages. If you opt in to text messages, we use your mobile number only to send the messages you agreed to receive, such as donation receipts, reminders, and updates. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. We do not share, sell, rent, or otherwise disclose mobile phone numbers or SMS opt-in and consent data with third parties for their marketing.
We do not send bulk email you have not agreed to receive, and we honor unsubscribe requests as required by the CAN-SPAM Act.
Do Not Track and Global Privacy Control
The Services do not respond to browser Do Not Track signals. We are implementing support for Global Privacy Control (GPC) signals. Until then, please use our Opt-out Preferences page to opt out of the sale or sharing of PII for advertising.
Children
The Services are not directed to children under 13, and we do not knowingly collect PII from them. We do not knowingly collect PII directly from anyone under 18 without a parent or guardian. If you believe a child has given us PII, contact us and we will delete it.
Third-Party Links
The Services may link to sites we do not control, including United Way and charity websites. Their own privacy policies apply.
Changes to this Policy
We review this Policy at least once a year. We will post any update here with a new effective date. For material changes, we will also notify donors by email or a notice on the Services before the change takes effect. We will not reduce your rights under this Policy without your consent.
Contact Information
For questions, requests, or complaints about this Policy:
- Mail: Upic Solutions, Inc., Attn: Privacy Officer, 7870 E. Kemper Road, Suite 470, Cincinnati, OH 45249
- Email: [email protected]
- Phone: (877) 459-5489
- Online: our Opt-out Preferences page
Effective Date
This Policy is effective as of October 7, 2026 and replaces all prior versions, including the version last modified January 1, 2024, and our former Data Privacy Statement.