Privacy Policy
Last updated: 6 September 2026
In short
- Your data is stored on servers in the European Union.
- We collect what the service needs to run and nothing for advertising. There are no analytics or tracking scripts on this site, and no third-party cookies.
- Donor and pledge records belong to the organization that runs the event. We process them on that organization's behalf.
- You can download or delete your account yourself from the Account page, at any time.
1. Who we are
Nedarim is operated by Turn Byte LLC, 8 The Green, Suite 13626, Dover, DE 19901, United States ("Nedarim", "we", "us"). For questions about this policy or your data, email [email protected].
This policy applies to the hosted service at nedarim.com and its subdomains. It is written to meet the EU General Data Protection Regulation (GDPR) and the UK GDPR, and it applies to everyone whose data we handle wherever they are.
2. Two roles: controller and processor
We act as controller for the data of people who create an account, join a team, contact us, or visit this website. Sections 3 to 9 describe that processing.
We act as processor for donor and pledge data. The organization that runs an event decides what to collect, what to show on its live screen, and how long to keep it; it is the controller for that data and we process it on its instructions under our data processing agreement. Section 10 explains what that means if you pledged at an event.
3. What we collect, why, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Account: name, email address, phone number, whether the address is verified, and either a password (stored as a salted hash, never in clear) or a link to your Google account if you sign in with Google. | To create and secure your account, let you sign in, and reach you about your organization's account. The phone number is used only for that contact, never for marketing. | Performance of a contract (Art. 6(1)(b) GDPR). |
| Sign-in codes and email verification links, held only until they are used or expire (codes: 10 minutes; links: 1 hour). | To prove you control your email address. | Performance of a contract. |
| Sessions: a random session token, the IP address and browser identifier of the device that signed in, and timestamps. | To keep you signed in and to let you (and us) see and end active sessions. | Legitimate interest in account security (Art. 6(1)(f)). |
| Organization and team: organization name, contact email and postal address, each member's role, and the email addresses of people you invite (invites expire after 14 days). When an organization is created, its details and the creator's name, email and phone are also sent to our own staff mailbox so we know who signed up. | To run the shared workspace and its permissions, to invoice correctly, and to review new sign-ups. | Performance of a contract; legitimate interest in knowing who our customers are. |
| Purchases: the Stripe checkout reference, amount, currency, tier bought, who bought it and when. Card details go to Stripe directly and never reach our servers. | To issue the license you paid for and to keep the accounting records the law requires. | Performance of a contract; legal obligation (Art. 6(1)(c)) for the records. |
| Contact form: name, email, organization, phone (optional) and your message. | To answer you. | Legitimate interest in responding to enquiries; you choose what to include. |
| Technical: the IP address of each request, the page or endpoint requested, timestamps and error details, in short-lived server logs and in-memory rate-limit counters. | To keep the service running, defend it against abuse, and diagnose faults. | Legitimate interest in security and reliability. |
We do not use your data for advertising, profiling, or automated decisions that have a legal or similarly significant effect on you, and we do not sell it.
5. Where your data is stored
The database, uploaded images and backups are hosted in data centres located in the European Union. They stay there: we do not replicate them to servers outside the EU.
Our team is based in the United States and may access the service from there to operate it and to support you. That access is limited to what the task needs, and we apply the safeguards required by Chapter V of the GDPR (the European Commission's Standard Contractual Clauses) to it.
6. Who else sees your data
We share personal data only with the providers below, each bound by a contract that limits what they may do with it, and with authorities where the law requires it. We do not share it with anyone for their own marketing.
| Provider | What they process | Where |
|---|---|---|
| Our hosting provider | Runs the servers, database, image storage and backups. | European Union |
| Stripe | Takes payment when you buy a license. Stripe receives your email address and the amount; it is an independent controller for the payment itself, under its own privacy policy. | Stripe Payments Europe Ltd (Ireland) with transfers to Stripe, Inc. (US) under Standard Contractual Clauses and the EU-US Data Privacy Framework |
| Resend | Delivers sign-in codes, verification links and other transactional email. Receives your email address and the message. | United States, under Standard Contractual Clauses |
| Only if you choose to sign in with Google. Google tells us your name, email address and account identifier, and learns that you signed in to Nedarim. | Under Google's own terms; not used unless you pick that option |
7. How long we keep it
| Data | Kept until |
|---|---|
| Account, organization and team data | You delete your account or your organization is deleted. |
| Sessions | You sign out, or 30 days after the session was last used. |
| Sign-in codes / verification links | Used, or 10 minutes / 1 hour after issue. |
| Pending invites | Accepted, revoked, or 14 days after they were sent. |
| Purchase records | As long as tax and accounting law requires after the purchase (typically 7 to 10 years), even if the account is deleted. |
| Contact-form messages | Until handled, and no longer than 12 months. |
| Server logs | 30 days. |
| Rate-limit counters | Held in memory only; discarded within one hour. |
| Backups | Rolling backups are kept for 30 days. Data you delete disappears from them within that window. |
8. Your rights
Under the GDPR you can ask us to:
- Access the data we hold about you, and receive a copy in a portable format. The Account page gives you this as a JSON download immediately.
- Correct it. Your name can be changed from the account page; for anything else, email us.
- Delete it. The account page lets you delete your account yourself. Your sign-in, sessions and team memberships are removed immediately, along with any organization you were the only member of. Purchase records we must keep by law are retained with your name removed where possible.
- Restrict or object to processing we base on legitimate interest.
- Withdraw consent where processing is based on it, without affecting what was done before.
Email [email protected] for anything the account page does not cover. We answer within one month, free of charge, and may ask you to confirm your identity first.
You also have the right to complain to a supervisory authority, in particular in the EU member state where you live or work. A list is at edpb.europa.eu.
9. How we protect it
- All traffic is encrypted in transit (TLS).
- Passwords are stored as salted hashes. Sessions use random tokens in HttpOnly cookies. A password account cannot be used until its email address is verified.
- Every request is checked against the caller's organization and role on the server, so one organization cannot read or change another's data.
- Public pages expose only the fields meant to be public; donor contact details are never sent to the live screen or donate page.
- Sign-in, pledge submission and the contact form are rate-limited, and payment webhooks are cryptographically verified.
If a breach is likely to put you at risk, we will notify the supervisory authority within 72 hours and tell the affected organizations and people without undue delay.
10. If you pledged at an event
When you pledge through an event's donate page, the organization running that event receives what you entered: your name, the amount, and, if you gave them, your email, phone number and a note. That organization is the controller of this data. It decides whether to approve the pledge, whether and when to show your name and amount on the live screen, and how long to keep your record. Nedarim stores and displays it only on the organization's instructions.
What can appear publicly is limited to the name you chose to display (or "Anonymous" if you ticked that box) and the amount. Your email, phone number and note are never shown publicly and are visible only to the organization's team.
To access, correct or delete your pledge record, contact the organization. If you cannot reach them, email us at [email protected] and we will pass your request on and help them act on it.
11. Children
Nedarim accounts are for people acting on behalf of an organization and are not intended for anyone under 16. Organizations are responsible for how they handle pledges made by minors at their events.
12. Changes to this policy
When we change this policy in a way that matters, we email account holders before the change takes effect and update the date at the top of this page. Earlier versions are available on request.