Privacy Policy

Last updated: August 20, 2026

Harvest 21 (“we,” “our,” or “us”) respects your privacy and is committed to protecting it through this Privacy Policy. This Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website, create an account, use our platform, make a donation, or otherwise interact with our services (collectively, the “Services”).

This Privacy Policy is intended to provide you with information about our privacy practices and the choices and rights that may be available to you.

Information We Collect

We may collect information about you in the following ways:

Personal Information You Provide

When you use our Services, you may voluntarily provide personal information, including but not limited to:

• Name

• Email address

• Mailing address

• Phone number

• Country or location information

• Account login and authentication information

• Profile information

• Photos, updates, messages, prayer requests, ministry information, or other content you choose to provide

• Donation and payment-related information

• Information about missionaries, churches, ministries, or organizations with which you interact

• Communications you send through or to Harvest 21

• Any other information you choose to provide

Some information voluntarily provided through Harvest 21 may reveal religious beliefs, religious affiliations, ministry involvement, or other information that may be considered sensitive or specially protected under the laws of certain jurisdictions. We process such information only as permitted by applicable law and as necessary to provide the Services, facilitate the ministry-related purposes of the platform, or based on your consent where consent is required.

Automatically Collected Information

When you access or use our Services, we may automatically collect certain information, including:

• IP address

• Browser type and version

• Device type

• Operating system

• Pages visited and time spent on the Services

• Referring URLs

• General geographic information derived from your IP address

• Usage and interaction information

• Cookies and similar tracking technologies

Information From Third Parties

We may receive information about you from third parties when you choose to interact with their services through Harvest 21. For example, if you use a third-party authentication service to sign in, such as Google, we may receive information necessary to create or authenticate your account in accordance with your settings and the third party's policies.

We may also receive information from payment processors and other service providers necessary to process transactions, prevent fraud, maintain security, and operate the Services.

How We Use Your Information

We may use the information we collect for purposes including:

• Providing, operating, and maintaining our Services

• Creating, authenticating, and managing user accounts

• Creating and displaying profiles and content as directed by users

• Connecting users with missionaries, churches, ministries, mission agencies, and other users

• Enabling platform communications and interactions

• Processing donations and transactions

• Providing donation confirmations and receipts

• Communicating with you about your account, donations, updates, or activity

• Sending administrative, service-related, or informational communications

• Sending communications you have requested or consented to receive

• Personalizing and improving our platform, Services, and user experience

• Monitoring and analyzing usage and trends

• Preventing fraud, misuse, unauthorized access, and other security threats

• Enforcing our Terms of Service and other agreements

• Protecting the rights, property, and safety of Harvest 21, our users, and others

• Complying with legal, accounting, tax, and regulatory requirements

Legal Bases for Processing

Where applicable law requires us to identify a legal basis for processing personal information, including under the European Union General Data Protection Regulation (“GDPR”), we process personal information based on one or more of the following:

• Performance of a contract: when processing is necessary to provide the Services you request or to administer your account.

• Legitimate interests: when processing is reasonably necessary to operate, secure, improve, and protect Harvest 21 and its Services, provided those interests are not overridden by your rights and interests.

• Consent: when you have provided consent for a particular use of your information and consent is required by applicable law.

• Legal obligations: when processing is necessary for us to comply with applicable laws, regulations, court orders, tax requirements, or other legal obligations.

Where information is considered sensitive or a special category of personal data under applicable law, including information that may reveal religious beliefs, we will process such information only when an additional lawful condition for doing so applies, including where you have provided the information for the purposes of participating in the Services, made the information manifestly public, provided applicable consent, or another basis is available under applicable law.

Where we rely on consent, you may withdraw your consent at any time, subject to applicable law. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

How We Share Your Information

We do not sell your personal information.

We may disclose or share information in the following circumstances:

• With trusted third-party service providers that assist us in operating and securing our platform, including payment processors, hosting providers, cloud service providers, authentication providers, email and communication providers, analytics services, and other technology providers

• With missionaries, churches, mission agencies, ministries, organizations, or other users when you direct us to share information or when sharing is inherent in a feature of the Services you choose to use

• When required by law, legal process, court order, or lawful governmental request

• When reasonably necessary to prevent fraud, security threats, illegal activity, or misuse of our Services

• To protect the rights, property, or safety of Harvest 21, our users, or others

• In connection with a merger, restructuring, transfer of assets, or similar organizational transaction, subject to applicable law

• With your consent or at your direction

Information you choose to make publicly available through the Services, including certain profile information, photos, ministry information, updates, or other content, may be visible to other users or the public depending on the features and privacy settings of the Services.

Payment Information

Payment transactions are processed through secure third-party payment processors. Harvest 21 does not store your full payment card number or full payment card credentials.

We may receive and retain information related to a transaction, such as the donor's identity, donation amount, date, recipient or designation, transaction status, and other information necessary for accounting, tax reporting, donor records, fraud prevention, and administration of the Services.

The processing of payment information by a third-party payment processor is also subject to that provider's privacy practices and terms.

Cookies and Tracking Technologies

We may use cookies, web beacons, and similar technologies to operate the Services, remember preferences, maintain account sessions, improve security, understand how the Services are used, and improve the user experience.

Some cookies may be necessary for the Services to function properly. Other cookies or technologies may be used for analytics or similar purposes.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar tracking technologies.

You may be able to control certain cookies through your browser settings or through cookie preference tools that we make available. Disabling certain cookies may affect the functionality of the Services.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee the absolute security of your information.

You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been accessed without authorization.

Data Retention

We retain personal information only for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

The length of time we retain information may depend on the nature of the information, the purposes for which it was collected, whether you maintain an active account, and applicable legal, tax, accounting, fraud-prevention, dispute-resolution, and record keeping requirements.

When personal information is no longer reasonably necessary for these purposes, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.

Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, including the right to:

• Request access to personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information, subject to applicable exceptions and legal obligations

• Request restriction of certain processing

• Object to certain processing

• Request a portable copy of certain personal information

• Withdraw consent where processing is based on consent

• Opt out of certain non-essential communications

• Lodge a complaint with an applicable data protection or supervisory authority

These rights are not absolute and may be subject to exceptions under applicable law.

We may need to verify your identity before processing certain requests. We will respond to valid requests within the time required by applicable law.

To exercise applicable privacy rights, please contact us using the contact information provided below.

European Economic Area, United Kingdom, and Other International Users

If you are located in the European Economic Area (“EEA”), United Kingdom, or another jurisdiction that provides similar data protection rights, you may have additional rights regarding your personal information.

These may include rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent as described above.

You may also have the right to lodge a complaint with the data protection authority or supervisory authority in the country where you live, work, or believe a violation of applicable data protection law occurred.

Harvest 21 is based in the United States. By using our Services, your information may be processed in the United States and other countries in which Harvest 21 or its service providers operate.

International Data Transfers

Because Harvest 21 is based in the United States and uses service providers that may operate in multiple countries, personal information may be transferred to, stored in, or processed in countries other than the country in which it was originally collected.

Where applicable law requires safeguards for international transfers of personal information, we will use legally recognized safeguards or other lawful transfer mechanisms as appropriate.

Privacy and data protection laws in the United States and other countries may differ from those in your country of residence.

U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law. Depending on the law and whether it applies to Harvest 21, these rights may include rights to access, correct, delete, or obtain a copy of certain personal information, as well as other rights provided by applicable law.

Harvest 21 is a nonprofit organization. Certain state consumer privacy laws, including the California Consumer Privacy Act (“CCPA”), generally do not apply to nonprofit organizations. Nevertheless, we respect the privacy of all users and will respond to privacy requests as required by applicable law.

We do not sell personal information.

To submit a privacy request, please contact us using the information provided below.

Communications and Marketing Choices

You may opt out of promotional or marketing emails by using the unsubscribe instructions included in those communications.

Even if you opt out of promotional communications, we may continue to send communications that are necessary to administer your account, process transactions, provide requested Services, address security issues, or communicate other important service-related information.

If you receive text messages from Harvest 21, you may opt out as described in the applicable message or as otherwise provided by us.

Children’s Privacy

Our Services are not intended for children under the age of 18, and we do not knowingly collect personal information from children under 18.

If we become aware that personal information has been collected from a child under 18 in violation of applicable law, we will take appropriate steps to delete it.

Certain features or accounts may have additional age requirements under our Terms of Service or applicable law.

Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices, security, or content of those third parties.

When you leave Harvest 21 or interact with a third-party service, that third party's privacy policy and terms may apply. We encourage you to review their privacy practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, practices, technology, or legal requirements.

When we make changes, we will update the “Last updated” date at the top of this Policy. If changes are material, we may provide additional notice as required by applicable law.

Your continued use of the Services following the effective date of an updated Privacy Policy will be subject to the updated Policy, except where applicable law requires additional notice or consent.

Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise applicable privacy rights, please contact us at shared@harvest21.com.

Version 2026-08-20