Acceptable Use Policy

givevery exists to help nonprofits do more good. These rules protect that mission, and the trust donors place in every form on our platform. They apply to everyone who uses givevery's Services, including nonprofits, their teams and donors. It forms part of our Terms of Service. Capitalized terms have the meanings given in the Terms.

1. Who can fundraise on givevery

Only legitimate charities, nonprofits and other organizations lawfully permitted to solicit and receive donations may use givevery to raise funds. You must be able to verify your organization's identity and status (for example, a CRA charitable registration number, IRS determination letter or equivalent) on request, and pass Stripe's verification.

2. Prohibited fundraising

You may not use the Services to raise funds for, or in connection with:

• fraud, deceptive or misleading appeals, or misrepresenting how funds will be used;
• money laundering, terrorist financing, or any person or entity on Canadian, U.S., UN, UK or EU sanctions lists;
• violence, hate, harassment or discrimination against people based on protected characteristics;
• illegal goods, services or activities, or activities prohibited by Stripe's Restricted Businesses list;
• raffles, lotteries or gaming, unless you hold the required licence and have our prior written approval;
• personal fundraising for individuals where this is not permitted by law or by your charitable status;
• anything that would require givevery or Stripe to hold funds in trust, act as a money services business, or break the law.

3. Prohibited technical activity

You may not:

• access, or attempt to access, another organization's data, account or Stripe account;
• probe, scan or test the vulnerability of the Services except under our responsible-disclosure program (see our Trust Center);
• overload the Services or use them beyond normal donation and dashboard use, including automated or scripted donations, card testing or scraping;
• upload malware, or attempt to bypass authentication, MFA, rate limits, row-level security or other controls;
• reverse engineer the Services except where the law permits;
• share credentials, or use an account on behalf of an organization that has not agreed to the Terms.

4. Communications

• Only send dedication, tribute or notification emails to recipients the donor designated.
• Do not use the Services to send unsolicited commercial messages or messages that violate CASL, CAN-SPAM or other anti-spam laws.
• Receipts and confirmations must accurately reflect the gift.

5. Data and privacy

• Collect only the donor information you need, and have a lawful basis and any required notice or consent for it.
• Do not upload special-category or highly sensitive information (such as health data, government ID numbers other than those required for receipting, or financial account numbers) into free-text fields.
• Do not use donor data obtained through givevery in ways your donors would not reasonably expect, or that breach privacy law.

6. AI widget builder

If you enable the optional AI widget builder (Anthropic), do not paste donor PII into prompts, use it to generate misleading appeals or unlawful content, or make decisions about individual donors that have legal or similarly significant effects. Keep it enabled only while your team needs it.

7. Enforcement

If we reasonably believe this AUP has been violated, we may remove content, rate-limit, suspend or terminate access as described in the Terms. We may also report the activity to Stripe, regulators or law enforcement. Where practical and lawful, we will notify you and give you an opportunity to respond first.

8. Reporting

Report abuse or a suspected fraudulent fundraiser to security@givevery.com.