Privacy Policy

Introduction

This Privacy Policy describes how Asymmetric.al ("we", "us", or "our") collects, uses, and shares information about you when you use our services. Effective Date: April 2, 2026.

If you have questions about this policy, please contact us at info@asymmetric.al.

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately.

Information We Collect

We collect the following categories of information:

• Identifiers, account, and profile information
  • Name, email address, phone number, mailing address, profile image, and account identifiers
  • Tenant or organization affiliation, role, display name, and account preferences
  • Authentication, session, and security metadata managed through Supabase or related platform services
• Donation, pledge, and billing information
  • Donation amounts, currency, status, receipts, refunds, and related finance records
  • Recurring pledge data, billing dates, campaign or fund associations, and receipt history
  • Payment method metadata, processor identifiers, and related Stripe transaction details
• Communications, support, and preference information
  • Notification settings, update preferences, unsubscribes, and suppression records
  • Transactional email logs, delivery events, bounce events, and inbound email metadata
  • Support correspondence, hosting/support records, and related troubleshooting notes
• User content and generated materials
  • Posts, comments, reactions, uploaded files, assets, templates, and generated PDFs or related documents
• Technical, device, security, and location information
  • IP address, browser type, user agent, session cookies, and security or diagnostic logs
  • Audit trail records and operational monitoring data
  • Location data or coordinates when voluntarily provided or embedded in service use

Data Retention

We retain your data for the following periods:

• Account and profile data: Retained while the account remains active, then up to 24 months after account closure or last activity.
• Donation, pledge, receipt, refund, tax, and finance records: Retained for 7 years.
• Support records: Retained for the term of the relationship plus 3 years.
• Email send logs, delivery events, bounce events, and suppression records: Retained for 12 months, except suppression records may be kept longer where needed to honor opt-out status.
• Inbound email bodies, parsed content, and attachment or payload snapshots: Retained for 90 days.
• Audit logs and security logs: Retained for 24 months.
• Uploaded content and generated files in live systems: Deleted within 30 days of a deletion request or account closure, unless a legal hold, fraud review, dispute, safeguarding need, or tax/finance record exception applies.
• Backups: Rolling overwrite within 35 days.
• De-identified aggregate analytics: May be retained longer or indefinitely where the data cannot reasonably identify an individual.
• Legal holds, fraud review, disputes, safeguarding, and tax obligations: May require longer retention where reasonably necessary.

Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Essential cookies — required for the service to function

Third-Party Services

We share data with the following third-party services:

• Vercel Inc. — Provides application hosting, deployments, edge/network delivery, and managed infrastructure for the hosted service.
• Supabase Inc. — Provides authentication, database, storage, and backend platform services for the hosted service.
• Stripe, LLC — Provides payment processing, donation checkout, recurring billing, and related financial transaction handling.
• Plus Five Five, Inc. d/b/a Resend — Provides transactional email delivery, webhook processing, inbound email handling, suppression management, and related email infrastructure.
• Unlayer, Inc. — Provides embedded email and PDF builder features where those features are enabled.

Your Rights

You have the following rights regarding your personal data:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal information, subject to legal and operational exceptions.
• Request restriction of processing in certain circumstances where applicable law provides that right.
• Object to certain processing, including processing based on legitimate interests where applicable.
• Request portability of personal information you provided to us where applicable.
• Withdraw consent at any time for processing based on consent.
• Opt out of certain marketing communications.
• Opt out of the sale or sharing of personal information if those concepts apply under the law where you live.
• Limit certain uses of sensitive personal information where required by law.
• Lodge a complaint with your local supervisory authority or regulator where applicable.

Contact Us

Contact us:

• Legal Name: Global Fellowship Inc. (doing business as Asymmetric.al)
• Address: PO Box 1, Meadow Vista, CA 95722, United States
• Email: info@asymmetric.al