Data we collect

DonorLink collects identifying information (name, email, phone, national ID, postal address) and donation records. Identity data is used to link donations to the correct person; financial records are retained for legal compliance.

Billing data

If your organisation pays for DonorLink, we process billing data: your prepaid wallet balance and an append-only ledger of top-ups and charges, plus a Stripe customer record (company name, billing address, VAT ID, and the last four digits of the saved card). Card details are handled by Stripe, our payment sub-processor, and are never stored on our servers. Billing records are kept for the statutory accounting-retention period.

How long we keep your data

Financial records are retained for the period prescribed by the law of the organisation's jurisdiction. The retention period applies from the end of the financial year containing your last transaction.

Your rights

Under GDPR you have the following rights (subject to legal obligations for financial record retention):

• Right of access (Article 15) — download all data we hold on you.
• Right to rectification (Article 16) — correct inaccurate data.
• Right to erasure (Article 17) — subject to the legal-obligation exception for financial records.
• Right to restriction (Article 18).
• Right to data portability (Article 20) — the export bundle is JSON.
• Right to object (Article 21).

Shadow accounts

An organisation may create a record from an imported donation before you sign up. If you later register with a matching email or phone, the records will be linked after you confirm the match. Shadow records follow the same financial-record retention rules as registered accounts (5–10 years depending on jurisdiction); records without any transactions are cleared on the next cleanup cycle.

Audit logs

We keep an audit log of significant actions (logins, changes, deletions). Your email address is removed from the log when your account is fully deleted.

Contact

The data controller is the organisation you donated to. DonorLink (Allegro IT ApS, Denmark) is the data processor. The supervisory authority in Denmark is Datatilsynet.

Cookies

DonorLink uses only essential session cookies for authentication. No analytics, no third-party trackers.

Agreement

These Terms of Service govern your use of DonorLink, operated by Allegro IT ApS (CVR 34593701) from Randers, Denmark. By creating an account you agree to these terms and to our Privacy Policy.

Your account

You are responsible for maintaining the confidentiality of your password and for all activity under your account. You must provide accurate information at signup. Each person may have only one account; using a single account on behalf of multiple people, or registering with intent to impersonate someone else, is prohibited.

Pricing and payment

Use of DonorLink is billed to your organisation on a prepaid basis per matched transaction, with a free monthly allowance and a monthly cap; current rates are shown on the Pricing page. Allegro IT may change prices at any time with one month's notice. Support is not included on the free tier — to receive support, an organisation activates its wallet with the minimum top-up (100 kr / €15), which remains its usage balance. Support is then billed separately at 800 kr / €110 per hour (minimum 0.5 hours, rounded up) and may be charged automatically to the saved card.

Acceptable use

You agree not to attempt to bypass authentication, probe for accounts you do not own (for example by trying multiple national IDs), exfiltrate data belonging to other users, run automated scrapers, or otherwise misuse the platform. We log security signals and lock accounts that show patterns of abuse.

Your data and privacy

Personal data you provide is processed under our Privacy Policy. Organisations you donate to are independent data controllers; how each organisation handles its donor records is governed by that organisation's own privacy notice and our Data Processing Agreement with them.

See our Privacy Policy and the Data Processing Agreement.

Donation history consolidation

Donations you have made to organisations using DonorLink may be linked to your account when you verify the identifier (email, phone, national ID) the organisation has on file. Linking is always opt-in: you confirm each match before it is recorded. You can disavow a wrong link at any time from your profile.

Service availability

We make reasonable efforts to keep DonorLink available but provide no uptime guarantee. Maintenance windows, outages, and feature changes may happen without prior notice while DonorLink is under active development.

Termination

You can request account deletion from your profile. Some data — financial records that organisations are legally required to keep — may be retained beyond deletion until the applicable retention window expires; the Privacy Policy explains the per-country windows.

Limitation of liability

To the maximum extent permitted by Danish law, Allegro IT ApS is not liable for indirect or consequential losses arising from your use of DonorLink. Nothing in these terms limits any liability that cannot be limited by law.

Changes to these terms

We may update these terms from time to time. Material changes will be flagged in-app or by email; continuing to use the service after a change constitutes acceptance of the updated terms.

Governing law

These terms are governed by Danish law. Disputes that cannot be resolved through good-faith negotiation are subject to the jurisdiction of the Danish courts.

Questions: [email protected]