Privacy Policy

Convicted Gentlemen Foundation (“we,” “our,” or “us”) is a 501(c)(3) nonprofit organization (EIN 39-2536706) based in Scottsdale, Arizona. This Privacy Policy explains how we collect, use, and protect information that you provide when you visit our website at app.convictedgentlemen.org, make a donation, apply to volunteer, or otherwise interact with our programs and services.

Information We Collect

We collect information you provide directly to us, including:

• Donor information:name, email, mailing address, donation amount, and payment information (processed securely by Stripe — we never see or store your card number), along with any optional notes you include.
• Program participant information:for individuals enrolled in The Conviction Curriculum®, we collect intake data, assessment responses, attendance records, and related case management information. Participant data is collected only under signed consent and is governed by separate program agreements.
• Volunteer and facilitator information: name, contact details, background check status, and training records, provided as part of your application to work with our program.
• Website usage: standard server logs (IP address, browser type, pages visited) and session cookies used to keep you signed in when you log into the platform.

How We Use Your Information

We use the information we collect to:

• Process donations and issue tax receipts
• Communicate with donors, volunteers, and program participants
• Operate The Conviction Curriculum® and measure program outcomes
• Report to government agencies and grant funders as required for program compliance (Bureau of Justice Assistance, Arizona Department of Corrections Rehabilitation & Reentry, etc.)
• Maintain financial records required by IRS regulations governing 501(c)(3) organizations
• Improve our services and protect against fraud and abuse

How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:

• Service providers:Stripe (payment processing), Resend (email delivery), Supabase (secure database), and Vercel (hosting) — all bound by their own privacy and security obligations.
• Grant compliance reporting: aggregated and, where required by our grant agreements, individual program outcome data reported to funding agencies.
• Legal requirements: if required by law, court order, or to protect the rights, property, or safety of the Foundation, its participants, or others.

Data Retention

Donor records are retained for the period required by IRS regulations for 501(c)(3) organizations (generally seven years). Program participant records are retained for the period required by our grant agreements and applicable state and federal reentry program reporting requirements. You may request deletion of your donor information at any time, subject to these retention obligations.

Data Security

We implement reasonable security measures to protect the information we collect, including encryption in transit (HTTPS), encryption at rest for sensitive fields, role-based access controls enforced at the database level, and audit logging. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your state of residence, you may have rights regarding your personal information, including the right to access, correct, or delete information we hold about you. To exercise these rights, contact us at the address below.

Children's Privacy

Our website and donation services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the public website. Information about minor family members of program participants is collected only under the signed consent of a parent or legal guardian, as part of reentry planning services.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at: