1. Scope and current platform status
This notice describes the UNORA website. Campaigns, donation amounts and donor activity displayed publicly are examples. Donation checkout does not process payments. Campaign proposals are submitted to a private review area; administrator accounts and profile settings are stored.
This is a draft notice for the current platform, not a certification of legal compliance. The legal operator’s name, address, jurisdiction and verified privacy contact must be confirmed before live fundraising begins.
2. Information you provide
A campaign proposal includes the organizer’s name, email and phone number, campaign title, category, city, country, fundraising goal, duration, story, uploaded image and optional video URL, along with a permission confirmation and review status. Information you put in your story or photograph may also identify a beneficiary or other people.
Administrator accounts include account identity, sign-in information, profile details and preferences. The contact form currently previews a message only: it does not deliver email or store contact submissions.
3. Beneficiary information and consent
Medical stories, photographs and personal circumstances can reveal sensitive information. Share only what is necessary, obtain permission from people you identify, and use the authorization of a parent or lawful guardian when appropriate.
Do not upload identity documents, full medical records, bank details, passwords or payment-card information through campaign stories or the contact form. A proposal is not a request for these documents.
4. Why information is used
Proposal information is used to receive submissions, allow authorized administrators to review them, and record review status. Account information supports administrator access and profile management.
Submitting a proposal does not authorize automatic publication, advertising or distribution to donors. Any additional purpose, including marketing, requires a separately disclosed basis and appropriate choices.
5. Legal basis and regional protections
Where privacy law requires a legal basis, the operator must identify the basis applicable to each activity: for example, responding to a submission, maintaining legitimate security interests, complying with a legal obligation or obtaining consent for optional activities.
Depending on your location, protections under the LGPD, GDPR or other laws may apply. This notice does not waive mandatory rights or assert that every legal requirement has already been satisfied.
6. Private review and publication
Submitted proposals are available through the protected administrator review area, not a public submission directory. Uploaded proposal images are kept in private storage and accessed by authorized reviewers using temporary links.
Review or approval does not itself publish a campaign or enable payments. Publication arrangements, permitted content and any beneficiary consent must be confirmed before real campaign material is made public.
7. Service providers and disclosures
Lovable Cloud supports application hosting services, account access, proposal records and private image storage. Service providers may handle information to operate these services under their applicable terms.
Stripe is not connected for live donations. If payment services are activated, this notice must describe the connected provider, information shared, transaction handling and applicable payment privacy notices. No sale or advertising distribution of proposal data is part of the current submission flow.
8. Browser storage and cookies
Browser storage supports administrator sign-in and remembers interface preferences such as the administrator language. Essential session information may be needed for access to protected areas.
You can clear site storage or manage cookies in your browser; this may sign you out or reset saved preferences. Any optional analytics or marketing tools must be disclosed, with consent where required, before activation.
9. Retention and deletion
Proposals and administrator profile information remain stored until removed through an authorized process. A formal retention schedule has not yet been published; no fixed deletion deadline is promised.
Deletion requests should identify the relevant submission without including unnecessary sensitive information. Legal, security or dispute-related requirements may justify retaining limited records; any applicable exception should be explained.
10. Security and international processing
Private storage and access controls reduce unauthorized access, but no online service can guarantee absolute security. Keep administrator credentials confidential and report suspected unauthorized access.
Information may be processed outside your country depending on hosting and service providers. The operator must verify processing locations and any legally required transfer safeguards before live operations; no particular certification or encryption specification is claimed here.
11. Your rights and requests
Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, and withdraw consent where consent is the basis. You may also have a right to complain to a competent privacy authority.
The verified privacy email and request channel have not yet been supplied. The Contact Us page shows the current contact status; its preview form is not a delivered privacy request. Once the official channel is published, provide enough information to locate your submission; identity verification may be necessary.
12. Children and vulnerable people
A child should not independently submit sensitive beneficiary information. Organizers are responsible for appropriate parental or guardian authorization and protecting the dignity of vulnerable people.
If you believe a submission contains information shared without permission, seek correction or removal through the verified contact channel once available. Do not repeat the sensitive information in a public message.
13. Changes and related information
This notice must be updated when public campaigns, payment collection, email delivery, new providers or data uses change. Material changes should be explained before the affected activity begins.
Read the Terms of Use, Refund & Cancellation Policy and Help Center alongside this notice. The displayed update date records the revision of this draft, not the launch of live fundraising.