501(c)(3) non-profit organization registered in the state of Virginia
Privacy
This page covers the sponsor portal. It is written as a description of what the software does rather than as a list of what the organisation reserves the right to do.
01 / Privacy
What is held about you
A sponsor account holds the least that will run a sponsorship and produce a receipt.
- Your name, email address and the country you gave when you signed up.
- A password stored as an Argon2 hash, which cannot be read back or reversed. If you enrol an authenticator app, its secret is stored encrypted.
- Your sessions: when you signed in, from roughly where, and with what browser, so that you can end a session you do not recognise.
- Your gifts: amount, date, method, the student they were for, and the receipt number. Card numbers are never sent to or stored by this site: they go to the payment processor.
- Letters you write and calls you request, including their moderation status and any note the moderator left.
02 / Privacy
What is held about students, and what you are shown of it
A student's record holds more than you will ever see. The extra fields exist because a school, a guardian and a field officer all need to be sure which child is which.
- Surname, date of birth, village, school and staff notes are recorded and are read by MRN staff only. No query that serves a sponsor or a visitor selects those columns.
- As a sponsor you are shown a first name, an age, a district, a grade, the disaster that affected them, their own summary and story, reviewed updates, school progress reports, and itemised spending with receipts.
- Guardians' names, phone numbers and addresses are staff-only, with no exceptions for sponsors.
- Documents proving identity are staff-only whatever audience is set on them.
03 / Privacy
Files and photographs
Uploads are held in private object storage and served through one address that checks the viewer first.
- Images are re-encoded when they are uploaded, which removes the camera's metadata, including location.
- A file is served as a redirect to a link that expires five minutes after it is issued. Nothing is public, and nothing is cached by the browser as a public URL.
- Reading a staff-only document writes a row to the audit log, so access to sensitive files is itself a record.
04 / Privacy
Who else is involved
The portal uses a small number of services, each for one job.
- A card processor and PayPal, to take payments. They receive your payment details directly and tell this site only that a payment succeeded, for how much, and what fee it carried.
- An email service, to send verification, password reset and receipt emails.
- Object storage for uploaded files and a managed Postgres database for the records above.
- There is no advertising, no analytics that profiles you across sites, and no sale or sharing of your details with anybody for marketing.
05 / Privacy
How long it is kept
Two rules pull against each other here: a charity has to be able to account for money years later, and nobody should hold personal data they no longer need.
- Financial records, including gifts, receipts, ledger entries and audit rows, are kept for as long as the law requires a non-profit to be able to account for them. They are append-only and cannot be deleted on request.
- Your account details, letters and call requests are kept while your account is open and are removed when you close it, apart from what the financial record above requires.
- A student's record is kept while they are in the programme and afterwards under MRN's own retention policy, which is the one that governs their school records.
07 / Your requests
Seeing, correcting or removing your data
Write to MRN and ask. You will get an answer from a person, not a form. Say what you want: a copy of what is held, a correction, or your account closed.
- Post
- 520 Springvale Rd, Great Falls, VA 22066, USA
Mission Rebuild Nepal is a 501(c)(3) organization. Donations are tax deductible in the United States to the extent allowed by law.