Privacy Policy

OrgFire LLC ("OrgFire," "we," "us," or "our"), a Texas limited liability company, operates the orgfire.com website and the OrgFire platform (collectively, the "Service"). This Privacy Policy describes how we collect, use, and protect information when you visit our website, join our public beta, or use the Service. We designed OrgFire to keep your community's data private and under your control.

1. Information We Collect

Account Information. When you create an account, we collect your name, email address, and password. If you create or manage an organization, we may also collect organization details such as name, address, and contact information. If you sign up to be notified about the public beta, we collect your name, email address, organization name, and anything you choose to tell us about your community.

Usage Data. We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, IP address, and device information.

Member Data. Organizations using our platform store information about their members and community, such as people, households, giving, events, and communications. This data is owned by the organization and processed by OrgFire on its behalf.

Payment Information. If you subscribe to a paid plan or collect payments through the Service, payment details are collected and processed by PCI-compliant third-party payment processors. We do not store full credit card numbers or bank account numbers on our servers; we retain only the limited tokenized references and last-four-digit summaries needed to display and reconcile transactions.

2. How We Use Your Information

• To provide, maintain, secure, and improve the Service
• To process transactions and send related information
• To send transactional communications (account confirmations, security alerts, support messages)
• To respond to your requests, including follow-up about the public beta
• To monitor and analyze usage trends to improve your experience
• To detect, prevent, and address fraud, abuse, or technical issues
• To comply with legal obligations

We do not sell your personal information, and we do not use Member Data for advertising. We may use aggregated, de-identified data to understand and improve the Service.

3. The Public Parish Registry

OrgFire maintains a free, public registry of U.S. Catholic parishes and dioceses, built from public sources such as diocesan and parish websites and public datasets. This registry contains organizational information, not private personal data. If a listing is inaccurate, anyone can report an error from any registry page, and we review reports promptly.

4. Data Sharing

We do not sell your personal information. We share information only as needed to operate the Service, with:

• Service providers ("subprocessors") who act on our instructions, such as cloud hosting, payment processing, email and messaging delivery, and analytics. These providers are bound to protect the information and to use it only to provide their services to us.
• Organization administrators who manage the organization you belong to, as part of the platform's intended functionality.
• Legal authorities when required by law, legal process, or to protect the rights, property, or safety of OrgFire, our users, or the public.

A current list of subprocessors and a Data Processing Agreement are available on request.

SMS and text messaging. If you provide a mobile number and consent to receive text messages from OrgFire or from an organization you belong to, we use that number only to send the messages you opted into, such as account notifications, verification codes, and organization communications. No mobile information — including SMS opt-in data and consent — is shared with third parties or affiliates for marketing or promotional purposes. We share a mobile number with our messaging provider (the telecommunications subprocessor that delivers the message) solely to deliver the messages you requested. You can opt out at any time by replying STOP to any message, or reply HELP for assistance. Message frequency varies; message and data rates may apply.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Member Data is retained according to the organization administrator's settings. You can export Member Data at any time, and you can request deletion of your account and its data. When you delete your account or an organization removes your data, we delete or anonymize the information within a reasonable timeframe, except where retention is required for legal, accounting, or security purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. Sensitive documents receive additional application-level encryption, and access is restricted on a need-to-know basis. No method of transmission or storage is 100% secure, but we work hard to protect your data and to notify you of any incident that affects it, as required by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Export your data in a portable format
• Object to or restrict certain processing
• Opt out of non-essential communications
• Withdraw consent where processing is based on consent

Depending on where you live, you may have additional rights under laws such as the GDPR or U.S. state privacy laws. To exercise any of these rights, contact us at [email protected].

8. Controller and Processor

For the Member Data your organization manages in the Service, your organization is the data controller and OrgFire is the data processor. For the account and contact information you provide to us directly, and for our website, OrgFire is the controller. We offer a Data Processing Agreement on request.

9. Cookies

We use essential cookies to operate the Service (session management, security). We do not use third-party advertising cookies. Analytics cookies, if used, are anonymized and do not track you across other websites.

10. Children's Privacy

The Service is intended for organizations and their staff, not for direct use by children, and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Member Data may include information about minors that an organization chooses to store; that data is controlled by the organization and handled under the organization's own policies and applicable law, including any required parental consent.

11. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of the rights described above, please contact us:

OrgFire LLC
Privacy: [email protected]
General support: [email protected]

Mailing address:
OrgFire LLC
5900 Balcones Drive, #17422
Austin, TX 78731
United States