Your Data Stays Yours
Rally Corp's Customer Data Commitment
Last updated June 1, 2026
Nonprofits trust Rally Corp with something precious: their relationships with donors, members, and volunteers. We take that seriously. This page explains, in plain language, how we handle the contact and donor data you bring to our platform.
This commitment applies to all Customer Data across Rally Corp products, including our messaging platform and Fundraise.so.
What we mean by "Customer Data"
Customer Data is the information you upload, collect, or generate while using Rally Corp. It includes:
- Contact lists you import or sync from your CRM
- Donor names, phone numbers, and email addresses
- Donation records and giving history
- Message history and opt-in records
- Any other personal information about your supporters
Note: This is different from the data we collect about visitors to our own website, which is covered in our Privacy Policy.
Our commitments
You own your data.
Your donor and contact data belongs to your organization. Not to us. Using Rally Corp does not transfer any ownership rights to Rally Corp, ever.
We never sell your data.
We do not sell, rent, trade, or license Customer Data to anyone. Not to advertisers, not to data brokers, not to other nonprofits. There is no version of our business model where your donor list becomes a product.
We never use your data for our own marketing.
We do not message your donors on our behalf. We do not build marketing lists from your contacts. We do not use your donor data to benefit any other Rally Corp customer.
We only process your data to serve you.
We act as a service provider (a "processor") on your behalf. We use Customer Data for one purpose: delivering the services you signed up for. That includes sending your messages, processing donations, syncing with your CRM, and providing support when you ask for it.
We only share data when the service requires it.
Delivering a text message or processing a donation requires trusted infrastructure partners, such as mobile carriers and payment processors. These providers are bound by contracts that limit them to processing your data only to deliver our services. They cannot sell it or use it for their own purposes. A current list of subprocessors is available on request.
Your data leaves when you do.
If you close your account, you can export your data. After a reasonable wind-down period, we delete Customer Data from our active systems in line with our retention schedule and legal obligations.
We protect it.
Customer Data is encrypted in transit and at rest. Access inside Rally Corp is limited to team members who need it to support you.
Optional: anonymized benchmarking and AI features
Some customers want to know how their results compare to similar nonprofits, or want AI features that improve their messaging. These are optional and off by default.
If you opt in:
- We use de-identified, aggregated data only — such as click rates, response rates, and giving patterns across many organizations
- Donor names, phone numbers, emails, and message content are never included
- We will never attempt to re-identify this data, and we require the same of any provider involved
- Results are only ever shown as aggregate benchmarks. No other customer can see your data
You can opt out at any time from your account settings.
What about "Do Not Sell" laws like the CCPA?
Some privacy laws give consumers the right to opt out of the sale of their personal information. For Customer Data, this is simple: we do not sell it, so there is nothing to opt out of.
Donors who want to exercise privacy rights over data held by your organization should contact your organization directly. We will support you in fulfilling those requests.
Questions?
If your team needs a signed Data Processing Agreement, a subprocessor list, or answers for a security review, email us at contact@rallycorp.com. We are happy to help.
Mailing Address
Rally Corp, Inc.8690 Aero Drive, Suite 115-2
San Diego, CA 92123