Legal
Privacy policy
Two kinds of personal data pass through Donor Lens: yours, and that of the people your organisation researches. This is how each is handled.
Last updated 18 September 2026
Who handles your data
Marko Bajic, trading as Donor Lens, of Rockville, Maryland, is the controller of the account data described below, and a processor acting on your organisation's instructions for the research data it holds in your workspace. Privacy questions go to privacy@donor-lens.com.
Your account
To give you a workspace we hold your name, email address, the workspace you belong to and your role in it, when you were last seen, and what you asked to be told about. Signing in is handled by Google Identity Platform; we never see your password.
We keep a log of actions that change who can act or what is spent — invitations, role changes, runs started — so an administrator can see what happened in their workspace.
We email you what you asked for: alerts you switched on, a digest if you chose one, and notices about your balance. Every message carries a one-click unsubscribe, and the settings page is one link away in all of them.
The people you research
Donor Lens assembles what the public record already says about a prospect or a funder: filings, deeds, gifts recorded in annual reports and 990s, obituaries, and pages on the open web. It reads no data brokers, no campaign-finance records, no federal officials' financial disclosures, and nothing about children.
That research is held in your workspace, for your organisation, and is not shared between workspaces or sold. We do not use it to train models.
A person who asks your organisation not to be researched can be put on its suppression file: the file stops appearing in research, and the export tells your mail house to leave them out. A request to see, correct or delete what is held about a person goes to the organisation whose workspace holds it, and we will help that organisation answer it.
Who else sees it
The service runs on Google Cloud and stores its data with Turso. Research is carried out by Google Vertex AI models; a prospect's name and the public text found about them are sent to that model to be read. Web search uses Brave Search or Serper. Pages are fetched by our own service. Card payments go to Square, email to Resend, and sign-in to Google Identity Platform.
Each of these acts on our instructions and for no other purpose. We do not sell personal data, and we do not share it for advertising.
Where it is kept, and for how long
Data is stored in the United States.
Your workspace's data is kept while the workspace is open. When you delete your account or your workspace, it is destroyed immediately — not queued for a later sweep. What survives is a record that the destruction happened: the workspace's identifier, the date, and how many rows went. The billing ledger is kept for seven years, because tax law requires it. Deleting an account can be done right away or after a grace period you can change your mind in; the choice is in Settings.
Your rights
You can see and correct your own account details in Settings, take your research out as CSV at any time, and delete your account or workspace yourself.
Depending on where you live you may also have the right to a copy of your data, to object to how it is handled, or to complain to a supervisory authority. Write to privacy@donor-lens.com and we will answer within 30 days.
Cookies
Donor Lens sets what it needs to keep you signed in and to remember your theme. There is no advertising or third-party tracking on the app.