PicturePledge — Privacy Policy

Effective Date: May 15, 2026 Last Updated: May 15, 2026

Plain-English Summary (not legally binding)

PicturePledge collects only the information needed to run a fundraising platform safely. Here's the short version:

• For Donors: We collect your name, email, and payment info to process your Pledge. Payment details are handled by Stripe — we never see your card number. Organizers can see your name and amount unless you choose to pledge anonymously.
• For Organizers: We collect additional info (phone, identity verification, payout details via Stripe) so we can pay you and so Donors can trust your Campaign.
• We don't sell your data. Ever.
• We use cookies for basic functionality and fraud prevention. We don't run third-party ad tracking.
• You can ask us to delete your data at any time. Some records (like completed transactions) we have to keep for tax and legal reasons.
• We honor universal "do not track" signals like Global Privacy Control.

The full Privacy Policy below explains the details and your rights under federal and state law.

1. WHO WE ARE

This Privacy Policy describes how Ridgework Studio LLC, a Colorado limited liability company doing business as PicturePledge ("PicturePledge," "we," "us," or "our"), collects, uses, and discloses information when you use the PicturePledge website, applications, or related services (the "Service").

PicturePledge is the controller of personal data we collect about you, except where Stripe acts as the controller of payment data (see Section 4).

2. INFORMATION WE COLLECT

2.1 Information you give us directly

Account information (all users):

• Name
• Email address
• Password (stored as a salted hash; we never see your plaintext password)
• Optional: profile photo, display name

Additional Organizer information (required to create a Campaign):

• Phone number (for identity verification)
• Government-issued ID and bank account information collected and held by Stripe for KYC and payouts. PicturePledge receives only a verification status, not your ID or banking details
• Tax information (collected by Stripe for 1099-K reporting)

Campaign content (Organizers):

• Photos, videos, written descriptions
• Funding goals and intended use of funds
• Updates and posts

Pledge information (Donors):

• Name (legal name from your payment method)
• Optional display name and message
• Pledge amount and date
• Payment details (collected and held by Stripe — PicturePledge receives only a transaction confirmation and the last 4 digits of the card for your reference)

Support and communications:

• Messages you send us via email or in-Service forms
• Customer support history

2.2 Information we collect automatically

When you use the Service, we automatically collect:

• Device and connection data: IP address, browser type and version, operating system, device type, language preferences
• Usage data: pages viewed, links clicked, time spent, referring URLs, session timestamps
• Cookies and similar technologies — see Section 7

2.3 Information from third parties

• Stripe — verification status, transaction status, dispute/chargeback notifications, payout status
• Analytics providers — aggregated, non-identifying usage data
• Fraud and abuse detection services — risk scores and signals for transactions and accounts

2.4 Information about children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. The Service is available only to users 18 and older.

3. HOW WE USE INFORMATION

We use the information we collect to:

• Operate the Service — create and manage accounts, host Campaigns, process Pledges (via Stripe)
• Verify identity — confirm Organizer and Donor identities, prevent impersonation
• Prevent fraud and abuse — detect suspicious Campaigns, suspicious Pledges, and account takeovers
• Communicate with you — transactional emails (account, security, payment confirmations), service updates, and responses to support inquiries
• Comply with legal obligations — tax reporting, sanctions compliance, court orders, and law enforcement requests
• Improve the Service — analyze usage patterns, fix bugs, design new features (using aggregated, non-identifying data wherever possible)
• Enforce our Terms — investigate violations and take action

We do not use your personal information for:

• Cross-context behavioral advertising
• Targeted advertising on other websites
• Sale to data brokers
• AI model training

4. STRIPE'S ROLE

PicturePledge uses Stripe, Inc. to process all payments via Stripe Connect. When you make or receive a payment:

• Stripe collects and stores your payment details (card number, bank account info, government ID for Organizers). PicturePledge does not have access to these.
• Stripe acts as an independent data controller for the payment information it collects. Stripe's use of your data is governed by Stripe's Privacy Policy.
• PicturePledge acts as a controller for the limited transactional metadata we receive (status, amounts, timestamps, last 4 digits of card).

Use of the Service is also subject to the Stripe Services Agreement and Stripe Connected Account Agreement.

5. WHEN AND WITH WHOM WE SHARE INFORMATION

5.1 With Campaign Organizers

When you make a Pledge, the Campaign Organizer can see:

• Your display name (or "Anonymous" if you choose anonymity)
• The Pledge amount (or hidden if you choose)
• Your message (if you wrote one)
• The date of your Pledge

Organizers do not see your email address, payment information, or full legal name unless you choose to share it via the message field.

Anonymity is opt-in per Pledge. You can pledge anonymously by selecting "Hide my name" before submitting.

5.2 With service providers

We share limited information with vendors that help us operate the Service, under written agreements that restrict their use of your data. Categories include:

• Payment processing: Stripe, Inc. (see Section 4)
• Application hosting: Vercel, Inc.
• Image storage: Cloudflare R2 (Cloudflare, Inc.)
• Database and authentication: Supabase, Inc.
• Transactional email: Resend (Resend, Inc.)
• Privacy-respecting analytics: Vercel Web Analytics (does not use cookies for cross-site tracking)
• Error monitoring: Sentry (Functional Software, Inc.)
• Fraud detection: Stripe Radar (built into Stripe's payment platform)
• Customer support: Direct email; no third-party support platform at this time

5.3 With law enforcement and to comply with law

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process
• Enforce our Terms of Service
• Protect the rights, property, or safety of PicturePledge, our users, or others
• Investigate suspected fraud or illegal activity
• Cooperate with law enforcement

We do not sell user data to law enforcement and we challenge overbroad requests where appropriate.

5.4 In a business transfer

If PicturePledge is acquired or merged with another entity, your information may be transferred as part of that transaction. You will be notified by email and/or prominent notice on the Service of any change in ownership or use of your personal information.

5.5 With your consent

We will share information for any other purpose only with your explicit consent.

5.6 We do not sell your data

PicturePledge does not sell personal information for monetary or other valuable consideration. We do not engage in cross-context behavioral advertising.

6. DATA RETENTION

We retain personal information only as long as needed to provide the Service and meet legal obligations:

After applicable retention periods, we delete or de-identify personal information.

7. COOKIES AND SIMILAR TECHNOLOGIES

We use a small number of cookies and similar technologies:

Strictly necessary (cannot be disabled)

• Session cookies — keep you logged in
• CSRF tokens — security
• Stripe cookies — fraud prevention on payment forms

Functional (you can disable)

• Preference cookies — remember language, display options

Analytics (you can disable)

• Vercel Web Analytics — privacy-respecting usage measurement that does not use cookies for cross-site tracking. No third-party advertising cookies.

We do not use:

• Third-party advertising cookies
• Cross-site tracking pixels
• Session replay tools that record keystrokes or form input

You can manage cookies through your browser settings. Disabling necessary cookies may prevent the Service from working.

8. YOUR PRIVACY RIGHTS

Your rights depend on your state of residence. PicturePledge will honor verified requests regardless of state where the law does not require us to.

8.1 Rights available to all users

• Access — Request a copy of the personal information we hold about you
• Correction — Ask us to correct inaccurate information
• Deletion — Ask us to delete your personal information (subject to retention requirements for transaction records, fraud, and legal compliance)
• Withdraw consent — For any processing based on consent
• Account closure — Close your account at any time

8.2 Rights for Colorado residents (Colorado Privacy Act)

• All rights in Section 8.1
• Right to opt out of sale, targeted advertising, and profiling for significant decisions. (PicturePledge does not engage in any of these.)
• Right to data portability — receive your information in a portable, machine-readable format
• Right to appeal — if we deny a privacy request, you may appeal to legal@picturepledge.com; if unresolved, you may contact the Colorado Attorney General at coag.gov

8.3 Rights for California residents (CCPA/CPRA)

• All rights in Section 8.1
• Right to know what categories and specific pieces of personal information we collect
• Right to limit use and disclosure of sensitive personal information
• Right to opt out of sale or sharing. PicturePledge does not sell or share personal information for cross-context behavioral advertising
• Right to non-discrimination for exercising privacy rights
• Authorized agents — you may designate an agent to make requests on your behalf with verification

8.4 Universal opt-out signals (GPC)

PicturePledge honors the Global Privacy Control (GPC) signal. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for any applicable rights in your jurisdiction.

8.5 How to exercise your rights

To exercise any of these rights, contact us at privacy@picturepledge.com with:

• The right you wish to exercise
• Enough information for us to verify your identity (typically the email associated with your account)
• The specific data or action you're requesting

We will respond within 45 days (or longer where permitted by law, with notice to you).

9. SECURITY

We take reasonable steps to protect your information:

• TLS encryption for all data in transit
• Encryption at rest for sensitive stored data
• Salted password hashing (passwords are never stored in plaintext)
• Stripe handles all payment data in a PCI DSS-compliant environment
• Access controls — internal access limited to employees who need it for their work
• Monitoring and alerting for suspicious activity
• Periodic security review of code and infrastructure

No system is perfectly secure. If you believe your account has been compromised, contact security@picturepledge.com immediately.

10. INTERNATIONAL USERS

PicturePledge is operated from the United States and is currently available to U.S. residents only. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your country. We do not currently support transactions originating outside the U.S.

11. LINKS TO OTHER SITES

The Service may contain links to third-party websites (including Campaign content posted by Organizers). PicturePledge is not responsible for the privacy practices of third-party sites. Review their privacy policies before sharing personal information.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date. For material changes — those that meaningfully expand how we use or share your information — we will provide at least 30 days' advance notice by email or prominent notice on the Service. Continued use of the Service after the effective date constitutes acceptance.

13. CONTACT US

For privacy questions, requests, or concerns:

Email: privacy@picturepledge.com Security incidents: security@picturepledge.com Mailing address: Ridgework Studio LLC d/b/a PicturePledge Attn: Privacy 2205 W 136th Ave Ste 106 PMB 7871, Broomfield CO 80023

For complaints unresolved by PicturePledge, residents of certain states may contact their state Attorney General or privacy regulator.