Terms of Service Generator for Nonprofits
Enter your URL. We'll find the services collecting visitor data and generate the documents that disclose them.
Free scan and score. Privacy Policy, Terms and Cookie Policy for $19 one-time.
Nonprofit websites handle donor data, and donors are sensitive about it. Donation pages run through Stripe, PayPal or an embedded processor that collects names, card details, addresses and sometimes employer information for matching gifts. Mailchimp powers the newsletter and appeal emails and tracks who opens them. Volunteer and event signup forms collect contact details and availability, often protected by reCAPTCHA. Google Maps marks the office or event location.
Google Ad Grants brings Google Ads conversion tracking and Google Analytics to nearly every eligible nonprofit site, and fundraising campaigns add Meta Pixel to retarget visitors who did not complete a gift. YouTube embeds carry mission videos and set advertising cookies. Peer-to-peer fundraising and membership programs introduce account registration. Cloudflare frequently fronts the whole site.
Nonprofit status does not exempt an organization from privacy law. GDPR applies to EU donors regardless of the recipient's tax status, and while the CCPA generally exempts nonprofits, California's CalOPPA still requires a posted privacy policy on any site collecting personal information from state residents. VerifiedPrivacy scans your site, identifies the donation, email, analytics and embed services present, and generates a Privacy Policy, Terms of Service and Cookie Policy that disclose them, with a nonprofit option in the questionnaire. Enter your organization's URL below for a free scan.
Frequently asked questions
Do nonprofits need a privacy policy?
In practice, yes. Donation processors, Google Ad Grants and email platforms require one in their terms, CalOPPA applies to sites collecting personal information from California residents regardless of tax status, and GDPR applies to EU donors. Beyond legal requirements, donors and grantmakers increasingly look for one. VerifiedPrivacy generates a policy matched to the services on your site; have counsel or a pro bono attorney review it.
Do we need to disclose our donation processor?
Yes. Stripe, PayPal and embedded giving platforms receive donors' names, payment details and addresses through your site and often set cookies for fraud prevention. Donors deserve to know who handles their card. When the scan detects Stripe or PayPal, the generated Privacy Policy includes the provider's disclosure and links to its privacy notice. Add the name of any giving platform not detected when you edit the documents.
Does the CCPA apply to nonprofits?
The CCPA defines a covered business as a for-profit entity, so most nonprofits are outside its direct scope, though a nonprofit controlled by a covered business or sharing common branding can be pulled in. CalOPPA, which has no profit or size threshold, still requires a posted privacy policy. The questionnaire lets you decide whether to include California-specific sections; discuss the choice with counsel.
Can the policy mention Google Ad Grants tracking?
Ad Grants campaigns rely on Google Ads conversion tags and Google Analytics, both of which the scan detects. The generated Privacy Policy and Cookie Policy include disclosures for each, explaining that Google collects page views and conversion events and links to Google's privacy policy and opt-out tools. You can add a sentence about the grant program itself if you want donors to understand why the tags are present.
Is there a nonprofit discount?
The price is a flat $19 one-time for all organizations, which covers the Privacy Policy, Terms of Service and Cookie Policy in HTML, Markdown and Word with a permanent link to regenerate. Scanning and scoring are free, and there is no subscription, so the total cost stays at $19 no matter how often you update the documents or rescan.
Other guides
VerifiedPrivacy generates documents from a clause library. It is not a law firm and does not provide legal advice. Have a licensed attorney review documents before use.