Privacy Policy
Last Updated: November 15, 2025
Your privacy matters to us. At CoveOfEdu, we are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data. This Privacy Policy explains our practices and your rights regarding your personal information.
Table of Contents
1. Overview
This Privacy Policy applies to coveofedu.org (the "Website") operated by CoveOfEdu, a 501(c)(3) nonprofit organization (EIN: 92-2455469). By using our Website, you consent to the data practices described in this policy.
Key Principles:
- We only collect information necessary to serve our mission
- We never sell or rent your personal information
- We use industry-standard security measures to protect your data
- You have control over your personal information
- We are transparent about our data practices
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily provide when you:
| Activity | Information Collected |
|---|---|
| Make a Donation | Name, email, billing address, payment information, donation amount |
| Subscribe to Newsletter | Email address, name (optional), subscription preferences |
| Contact Us | Name, email, message content, any information you choose to provide |
| Create an Account | Name, email, password (encrypted), profile preferences |
| Participate in Programs | Name, contact information, educational background, program-specific data |
2.2 Information Collected Automatically
When you visit our Website, we automatically collect:
- IP address and geographic location
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referral source (how you found our Website)
- Device information (mobile, tablet, desktop)
- Cookies and similar tracking technologies (see Section 6)
2.3 Information from Third Parties
We may receive information from:
- Payment processors (transaction details, fraud prevention data)
- Social media platforms (if you interact with our social content)
- Analytics providers (aggregated website usage data)
- Email service providers (email engagement metrics)
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Mission-Critical Activities
- Processing and acknowledging donations
- Providing tax receipts and donation records
- Delivering educational programs and services
- Measuring and reporting on our impact
- Improving our programs and infrastructure
3.2 Communications
- Sending donation confirmations and receipts
- Delivering newsletters and educational content
- Providing updates on our programs and impact
- Responding to your inquiries and requests
- Sending important notices about policy changes
3.3 Website Operations
- Maintaining and improving Website functionality
- Analyzing usage patterns and trends
- Personalizing your experience
- Preventing fraud and ensuring security
- Troubleshooting technical issues
3.4 Legal Compliance
- Complying with 501(c)(3) reporting requirements
- Meeting tax and accounting obligations
- Responding to legal requests and preventing illegal activities
- Protecting our rights and property
4. Information Sharing and Disclosure
4.1 We DO NOT Sell Your Information
Important: CoveOfEdu never sells, rents, or trades your personal information to third parties for marketing purposes. Your trust is fundamental to our mission.
4.2 When We Share Information
We may share your information only in these limited circumstances:
- Service Providers: Trusted third-party vendors who help us operate our Website and programs (payment processors, email services, analytics providers). These providers are contractually obligated to protect your data.
- Legal Requirements: When required by law, subpoena, court order, or government regulation.
- Protection of Rights: To protect the rights, property, or safety of CoveOfEdu, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or dissolution (though we would notify you and seek consent).
- With Your Consent: When you explicitly authorize us to share your information.
4.3 Donor Recognition
We may publicly recognize donors unless you request anonymity. You can opt out of public recognition at any time by contacting us.
5. Data Security
We implement industry-standard security measures to protect your personal information:
5.1 Technical Safeguards
- SSL/TLS encryption for data transmission
- Encrypted storage of sensitive information
- Secure payment processing through PCI-DSS compliant providers
- Regular security audits and updates
- Firewalls and intrusion detection systems
- Access controls and authentication requirements
5.2 Organizational Safeguards
- Limited access to personal information (need-to-know basis)
- Employee training on data privacy and security
- Confidentiality agreements with all staff and volunteers
- Regular security awareness training
- Incident response procedures
5.3 Payment Security
We do not store complete credit card information on our servers. All payment processing is handled by secure, PCI-DSS compliant third-party payment processors.
Data Breach Notification: In the unlikely event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable laws and take immediate steps to mitigate the impact.
7. Your Privacy Rights
You have the following rights regarding your personal information:
7.1 Access and Portability
- Request a copy of your personal information we hold
- Receive your data in a portable format
7.2 Correction and Update
- Correct inaccurate information
- Update your contact details and preferences
7.3 Deletion ("Right to Be Forgotten")
- Request deletion of your personal information
- Note: We may retain certain information for legal/tax compliance
7.4 Opt-Out Rights
- Unsubscribe from marketing emails (click "unsubscribe" in any email)
- Opt out of public donor recognition
- Disable cookies through browser settings
- Request to stop processing your information for specific purposes
7.5 How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@coveofedu.org. We will respond within 30 days.
8. Children's Privacy
Our Website is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.
If you are under 13, please do not provide any information on this Website. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
For users between 13-18 years old, we require parental or guardian consent before collecting personal information or processing donations.
9. Third-Party Links
Our Website may contain links to third-party websites (social media, payment processors, partner organizations). We are not responsible for the privacy practices of these external sites.
We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to coveofedu.org.
10. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
10.1 Retention Periods
| Data Type | Retention Period |
|---|---|
| Donation Records | 7 years (IRS requirement for 501(c)(3) organizations) |
| Email Subscriptions | Until you unsubscribe |
| Website Analytics | 26 months (Google Analytics default) |
| Contact Form Inquiries | 3 years or until resolved |
| Account Information | Until account deletion requested |
10.2 Secure Deletion
When we delete your information, we use secure deletion methods to ensure it cannot be recovered or reconstructed.
11. International Users
Our Website is operated in the United States. If you are accessing the Website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.
By using our Website, you consent to the transfer of your information to the United States and acknowledge that U.S. data protection laws may differ from those in your country.
11.1 GDPR Compliance (European Users)
If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:
- Right to object to processing
- Right to restrict processing
- Right to lodge a complaint with a supervisory authority
- Right to withdraw consent at any time
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
We will notify you of material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to registered users
- Displaying a prominent notice on our Website
Your continued use of the Website after changes are posted constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Inquiries
Email: privacy@coveofedu.org
General Contact: info@coveofedu.org
Website: coveofedu.org
Organization: CoveOfEdu
Tax ID (EIN): 92-2455469
Status: 501(c)(3) Nonprofit Organization
We will respond to privacy inquiries within 30 days.
Thank you for trusting CoveOfEdu with your information. Your privacy is essential to our mission of building educational infrastructure with transparency and integrity. We are committed to protecting your data and using it only to further our shared goal of transforming education for students who need it most.