Privacy Policy of Act Now Button LLC

Last Updated: April 15, 2026

Act Now Button LLC ("Act Now," "we," "us," or "our") operates the https://www.actnowbutton.com website and related services (the "Service").

This Privacy Policy informs you of our policies regarding the collection, use, disclosure, and retention of Personal Information when you use our Service.

By using our Service, you agree to the collection and use of information as described in this Privacy Policy. The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible at https://www.actnowbutton.com, unless otherwise defined herein.

1. Information Collection and Use

We collect the minimum information necessary to provide our Service. The type of information collected depends on how you interact with the platform:

1.1 Supporters (People Taking Action)

When you take an action on a campaign (donate, sign a petition, register for an event), we may collect:

• Donation actions: Anonymized supporter identifier, campaign identifier, creator attribution identifier, donation amount, Stripe payment reference, timestamp, and hashed IP address. If you request a tax receipt, your name and mailing address are collected via Stripe Checkout and passed directly to the receiving charity for receipting purposes; Act Now does not store these fields in its own database. We do not store your payment card details — these are processed directly by Stripe.
• Petition/Signature actions: Email address (for verification purposes only), name (if provided), campaign identifier, creator attribution identifier, timestamp, and hashed IP address.
• Signup/Pledge actions: Email address (for verification purposes only), campaign identifier, creator attribution identifier, timestamp, and hashed IP address.
• Event participation: Name, campaign identifier, creator attribution identifier, verification status, and timestamp.

1.2 Creators, Charities, and Sponsors

When you create an account, we collect the information you provide during registration, including your name, email address, organization details, and Stripe account information (processed by Stripe).

1.3 All Visitors

We collect Log Data including your browser type, pages visited, time and date of visit, time spent on pages, and other diagnostic data.

2. How We Use Your Information

We use collected information to:

• Verify actions and attribute them to campaigns and creators.
• Process payments through Stripe.
• Send transactional emails (verification confirmations, account notifications).
• Detect and prevent fraud.
• Improve our Service.

We do not use your information to:

• Send unsolicited commercial messages (we comply with CASL — see Section 8).
• Sell or share your personal information with advertisers.
• Build profiles for purposes unrelated to our Service.

Sharing Information with Charities

When you take an action on a campaign, your information may be shared with the campaign charity as follows:

• Donations: Your donation information is shared with the receiving charity through Stripe as part of the payment process. If you requested a tax receipt, your name and mailing address are also shared with the charity to enable them to issue an official donation receipt in compliance with Canada Revenue Agency requirements. The charity is responsible for issuing the receipt and protecting your information under their own privacy policy.
• Non-donation actions (petitions, signups, events): A required consent checkbox at the point of action confirms your agreement to share your information with the charity to process the action.
• Charity updates (optional):If a charity has enabled an updates opt-in on their campaign, you may choose to share your email address with the charity for follow-up communications. This is always optional, unchecked by default, and requires your explicit consent. The charity's description and privacy policy are displayed alongside this option.

3. Data Retention and Minimization

We retain personal information only as long as necessary for the purposes described in this policy:

IP Address Handling

We do not store raw IP addresses. We store only cryptographically hashed IP addresses for fraud detection and duplicate action prevention. Hashed IPs cannot be reversed to identify you.

4. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request correction of inaccurate personal information.
• Deletion: You may request deletion of your personal information. Note: Anonymized action records required for financial audits cannot be deleted but will have all personally identifiable information removed.
• Portability: You may request your personal information in a machine-readable format.
• Withdrawal of Consent: You may withdraw consent for marketing communications at any time.

To exercise these rights, contact us at privacy@actnowbutton.com.

We will respond to all requests within 30 days.

5. Cookies

Our website uses cookies to collect information and improve our Service. You have the option to accept or refuse non-essential cookies. If you refuse cookies, some portions of our Service may not function properly.

Cookies We Use

Essential cookies:

• Authentication cookies — Maintain your login session. Set when you sign in. Expire when you sign out or after your session ends.
• Attribution cookie (anb_ref)— When you visit a campaign through a creator's attribution link (actnow.to), we set a cookie on actnowbutton.com to remember which creator referred you. This ensures the creator receives proper attribution for actions you take. This cookie contains the creator's handle, the campaign identifier, and a timestamp. It expires after 30 days. Multiple actions taken during this window are credited to the same creator. If a supporter clicks a different creator's link before acting again, the most recent creator receives attribution (last-touch). It does not contain any personal information.
• Language preference cookie (actnow_supporter_language) — Stores your preferred language (English or French) for supporter-facing forms. Expires after 1 year.

Analytics cookies:

• PostHog— Product analytics to understand how our Service is used. See PostHog's privacy policy for details.

You can manage cookie preferences through your browser settings.

6. Payment Processing

All payments are processed by Stripe. We do not store credit card numbers, bank account details, or other payment credentials. Stripe's privacy policy governs the handling of payment information: https://stripe.com/privacy.

• Donationsflow directly from supporters to the charity's Stripe account. Act Now does not hold, pool, or redirect donation funds.
• Sponsor charges are processed by Stripe based on verified campaign performance. These are separate transactions from supporter donations.
• Creator compensation is processed by Stripe.

7. Service Providers

We use the following third-party service providers:

• Stripe — Payment processing
• Supabase — Application infrastructure and authentication
• Postmark — Transactional email delivery
• PostHog — Product analytics
• Sentry — Error monitoring

These providers have access to personal information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

8. CASL Compliance (Canada's Anti-Spam Legislation)

• Transactional emails (verification confirmations, account notifications, security alerts) are sent without express consent as permitted by CASL.
• Commercial electronic messages are sent only to users who have provided express consent during account registration.
• All commercial emails include: clear sender identification, our physical mailing address, and a functional unsubscribe mechanism.
• Charity outreach: Act Now does not send outreach emails to organizations that have not consented. When users wish to invite a charity to join the platform, we provide a message template for the user to send from their own channels.

9. Quebec Law 25 Compliance

For users in Quebec, the following additional protections apply:

• Privacy Officer: Our designated privacy officer can be contacted at privacy@actnowbutton.com.
• Privacy Impact Assessments: We conduct privacy impact assessments before implementing systems that process personal information.
• Incident Response:We maintain an incident response plan. In the event of a data breach that presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and affected individuals.
• French Language: This privacy policy is available in French. Use the language toggle at the top of this page to switch between English and French. Consumer-facing disclosures within the Service are available in French for Quebec users.
• Consent: We obtain express, specific consent before collecting personal information, with clear disclosure of the purposes for which the information will be used.

10. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we immediately delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Links to Other Sites

Our Service may contain links to third-party sites not operated by us. We strongly advise you to review the privacy policies of any third-party sites you visit. We have no control over the content, privacy policies, or practices of third-party sites.

12. Security

We use commercially acceptable means to protect your personal information, including encryption in transit and at rest, access controls, and regular security reviews. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where required, by email notification. Changes are effective immediately upon posting.

14. Contact Us

If you have questions about this Privacy Policy, your personal data, or wish to exercise your privacy rights:

• Email: privacy@actnowbutton.com
• General inquiries: hello@actnowbutton.com
• Mailing address: 150 Elgin Street, Floor 8, Ottawa, ON K2P 1L4, Canada