Jabal Foundation: investing in our Ummah's future

Summary: Jabal Foundation collects only the personal information needed to process donations, communicate impact, and fulfill our legal obligations. We do not sell your data. We do not share it for marketing purposes. We use a small set of trusted service providers, all named below.

1. Who We Are

Jabal Foundation is a 501(c)(3) nonprofit organization (EIN #92-3844405) incorporated in Arizona, United States. Our principal contact email is jabalfoundation@gmail.com. This privacy policy applies to our website jabalfoundation.org and all associated services.

2. Information We Collect

Information you provide directly

Donation information: Name, email address, billing address, and payment card data (processed by Stripe, so we never see raw card numbers).
Contact form submissions: Name, email, and message content.
Newsletter subscriptions: Name and email address.
Volunteer applications: Name, email, and relevant background information you provide.

Information collected automatically

Analytics: We do not run third-party analytics on this site, set no advertising cookies, and do not track you across other websites.
Server logs: Our hosting provider may log IP addresses and request metadata as standard practice. These logs are retained for 30 days.

3. How We Use Your Information

To process your donation and generate a tax receipt
To send donation confirmations and impact updates
To respond to contact form inquiries
To send newsletters you have subscribed to
To comply with IRS reporting requirements for 501(c)(3) organizations
To detect and prevent fraudulent transactions

We do not use your information for targeted advertising. We do not sell your data to any third party. We do not share your information with other nonprofits or charities without your explicit consent.

4. Service Providers

We use the following trusted third-party service providers:

Stripe

Payment processing

Handles all payment card data. We never store card numbers.

Resend

Transactional email (receipts, confirmations)

Receives name and email for sending receipts and newsletters.

5. Data Retention

Donation records: Retained for 7 years per IRS requirements for 501(c)(3) organizations.
Contact form submissions: Retained for 2 years unless related to an ongoing matter.
Newsletter subscriptions: Retained until you unsubscribe. Deleted within 30 days of unsubscription request.
Server logs: 30 days.

6. Your Rights

You have the right to:

Request a copy of the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Unsubscribe from newsletters at any time (one-click link in every email)
Opt out of non-essential communications

To exercise any of these rights, email jabalfoundation@gmail.com with the subject line “Privacy Request.” We will respond within 15 business days.

7. Security

All data in transit is encrypted using TLS (HTTPS). Payment data is handled exclusively by Stripe and is PCI DSS compliant. We never store, transmit, or have access to raw payment card numbers. Our database uses row-level security and is accessible only via authenticated API keys. We conduct quarterly reviews of our data security practices.

8. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us immediately.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated to newsletter subscribers via email. The “Last Updated” date at the top of this page reflects the most recent revision.

10. Contact

For privacy-related inquiries, email jabalfoundation@gmail.com with subject line “Privacy.” Jabal Foundation, Arizona, USA.

Privacy Policy