🛡️ Security & Privacy

Your donor list is the
most sensitive file you own

Names, capacity estimates, giving history, private notes about people who trust your organization. We built ChaiRaise on the assumption that this data should never be casually exposed, resold, mined, or held hostage. This page describes exactly how it is protected — and every claim here is something we actually implemented.

🔐

Your donors are yours alone

Every record is scoped to your organization, and every data request is checked against your membership before a single row is returned. An org id is not a password: if you are not a member of an organization, the API refuses the request outright. There is no shared donor pool and no cross-tenant read path.

🧠

Donor data never leaves through your browser

AI features run through one authenticated server endpoint. Our AI provider key lives on the server and is never shipped to your browser, and donor details are never posted from your device to a third party. That path is auditable, rate-limited and sits entirely inside our boundary.

✉️

Your mailbox, your mail server

Connect your own email (Gmail, Outlook, or any provider) and outreach is relayed through YOUR mail server, from YOUR address. We do not keep a copy of your mailbox. Your SMTP password is encrypted with AES-256-GCM before it is stored and is never returned by our API — not even to you.

💬

WhatsApp without surveillance

WhatsApp outreach uses click-to-chat links that open your own WhatsApp with the message pre-filled. We hold no WhatsApp session and proxy no messages, so donor phone numbers and message content never pass through our servers on the way to Meta.

📤

Take your data and go, any time

One click exports every record we hold for your organization — donors, gifts, activities, pipeline, campaigns and your full audit trail — as a single JSON file. No support ticket, no export fee, no lock-in. Credentials are deliberately excluded from exports.

🗑️

Real deletion means gone

You can permanently erase an individual donor or your entire organization. Deletion is a hard delete across every table, not a hidden flag on a row we quietly keep. It is irreversible by design and requires typed confirmation.

The controls, specifically

What a security reviewer on your board will want itemized.

Encryption in transit
TLS on every connection, with HSTS enforced.
Encryption at rest
Database storage is encrypted at rest by our database provider.
Stored credentials
Mail credentials are additionally encrypted app-side (AES-256-GCM), so a database dump alone does not expose them.
Passwords
Hashed with scrypt and a per-password salt, verified in constant time. We never store or log a plaintext password.
Sign-in
Email and password, or Google SSO. Organization owner accounts are bound to verified Google identities.
Session safety
Sessions expire and the app auto-signs-out after a configurable period of inactivity.
Audit trail
Donor edits, sends and administrative actions are written to a per-organization audit log you can export.
Abuse limits
Authentication, AI, email and public forms are rate-limited to blunt credential stuffing and spam.
Browser hardening
Strict security headers: no framing, no MIME sniffing, a locked-down permissions policy and a strict referrer policy.
Payments
Card details are handled entirely by Stripe Checkout. ChaiRaise never sees or stores a card number.

Who else touches your data

The complete list of subprocessors. We do not sell donor data, we do not share it with advertisers, and we do not use your donor records to train models.

Vercel
Application hosting and edge network
Neon
Managed Postgres database
Anthropic
AI features (donor briefs, drafting) via our server
Stripe
Subscription billing and payment processing
Google
Optional single sign-on, when you choose it
Resend
Platform email, only when you have not connected your own mailbox

What we do not claim

We would rather be trusted than impressive. ChaiRaise is a young product: we do not hold a SOC 2 report or an ISO certification, and we have not commissioned a third-party penetration test. We will say so plainly here until that changes, rather than imply coverage we do not have. If your organization requires a formal security review or a signed data processing agreement, contact us and we will work through it with you directly.

Found a vulnerability?

Report it to security@chairaise.com. We will acknowledge responsible disclosures and will not pursue action against good-faith researchers.

Privacy PolicyTerms