What Sponsors holds
In plain wordsTechnical detail
| What | Why | Who can see it | Kept for | Retention schedule |
|---|---|---|---|---|
| What a sponsor account is linked toAlso about people who are not members | Which sponsored projects and grant rounds a sponsor's account may see on its own page. Set by the president. | Staff | Kept while the sponsor account exists; removed with it. | Row L5 |
| A sponsor's API keysAlso about people who are not members | Checking the API key a sponsor's own server sends. Only a keyed hash of the key is kept, and its last four characters so the sponsor can tell keys apart. | Staff | Kept until the sponsor revokes the key or the account is deleted. | Row L6 |
| Gifts through sponsors and the payments APIAlso about people who are not members | Recording a gift started through a sponsor's page or the payments API, and matching Stripe's notice that it was paid. Card details go to Stripe on Stripe's own page and never reach Tillyard. | Staff | Kept with the nonprofit's financial records, for at least seven years after the gift. | Row L7 |