Rally

Rally legal

Privacy Policy Last Updated: April 27, 2026 This Privacy Policy describes how Emiva Ventures LLC ("Rally," "we," "us," or "our") collects, uses, shares, and protects information about you when you use our website, mobile application, and related services (collectively, the "Platform"). We are committed to protecting the privacy of all users, with special care given to information involving children. 1. Who We Are Rally is a platform operated by Emiva Ventures LLC, a Texas limited liability company. Our platform allows parents and guardians to create digital gift pages for their children's activities (such as soccer, swim lessons, music, dance, and gymnastics), enabling friends and family to send monetary gifts in lieu of physical presents. Contact information: • Company: Emiva Ventures LLC • Platform: Rally ("givewithrally.com" or applicable domain) • Address: San Antonio, Texas, United States • Email: support@givewithrally.com (or current support email) 2. Information We Collect 2.1 Information You Provide Directly Account Registration (Parents / Hosts) • Full name and email address • Phone number (optional) • Password (stored in encrypted form — we never see your plain-text password) • Bank account or payment disbursement information (collected and processed by Stripe — see Section 5) Gift Page Creation • Child's first name and age • Event type and date (e.g., birthday, holiday) • Activities selected (e.g., soccer, swim) • Optional photo of the child uploaded by the parent • Parent's message to gift-givers Gift Sending (Guests / Gift-Givers) • Name and email address • Optional personal message to the child • Payment information (processed directly by Stripe — Rally does not store card numbers) 2.2 Information Collected Automatically When you use the Platform, we automatically collect: • IP address and approximate geographic location (city/state level) • Browser type, operating system, and device type • Pages visited, links clicked, and time spent on pages • Referring website or source (e.g., how you found the link) • Share channel data (e.g., whether a gift page link was opened from WhatsApp, email, or text) 2.3 Information From Third Parties • If you register or log in using Google, we receive your name and email address from Google • Stripe provides us with transaction confirmations, payout statuses, and risk/fraud signals — not your full card number or bank account details 3. Special Protections for Children's Information Rally is a platform for parents and adults. We do not knowingly collect personal information directly from children under the age of 13. Parents create gift pages that include a child's first name, age, and photo — this information is provided by and controlled by the parent or guardian. Specifically: • Only parents or legal guardians may create accounts and gift pages • Children's first names and photos appear on gift pages only because parents choose to include them • We do not create profiles for children or use children's information for marketing • Children cannot create accounts or directly interact with the platform • If you believe we have inadvertently collected information from or about a child in a way that violates this policy, please contact us immediately at support@givewithrally.com and we will delete it promptly Rally is designed to comply with the Children's Online Privacy Protection Act (COPPA). Parents who have concerns about their child's information should contact us directly. 4. How We Use Your Information We use the information we collect to: • Core use: Provide the service: • Create and manage gift pages • Process gifts sent by gift-givers • Disburse collected funds to parents via ACH transfer • Send email confirmations and notifications • Safety: Prevent fraud and ensure security: • Detect and investigate suspicious or fraudulent activity • Comply with legal obligations and respond to law enforcement requests • Analytics: Improve the platform: • Analyze usage patterns to improve user experience • Measure which features and channels perform best • Communications: Communicate with you: • Send transactional emails (gift confirmations, payout notifications, page expiry reminders) • Send optional product updates and feature announcements (you may opt out at any time) We do not use your information to serve third-party advertisements on the Platform. We do not sell your personal information to any third party. 5. Payment Processing and Financial Data All payment processing on the Rally platform is handled by Stripe, Inc. ("Stripe"), a third-party payment processor. When you enter payment information (credit card details, bank account information), that information is transmitted directly to Stripe and is subject to Stripe's Privacy Policy available at stripe.com/privacy. Specifically: • Rally does not store, process, or transmit full credit card numbers or bank account numbers • Rally receives from Stripe only: transaction confirmation, gift amount, anonymized card type, payout status, and fraud risk signals • Stripe's services are PCI-DSS compliant • Parents who wish to receive payouts must connect a bank account through Stripe's secure onboarding flow (Stripe Connect) By using the payment features of the Platform, you agree to be bound by Stripe's Terms of Service in addition to this Privacy Policy. 6. How We Share Your Information We do not sell your personal information. We share information only in the following circumstances: 6.1 With Service Providers We share information with third-party companies that help us operate the Platform, including: • Stripe — payment processing and payout disbursement • Supabase or equivalent — database hosting and storage • Vercel or equivalent — website and application hosting • SendGrid / Resend or equivalent — email delivery • Analytics providers — aggregated, anonymized usage data only All service providers are contractually required to use your information only to provide services to us and to protect it appropriately. 6.2 With Other Users (By Design) Gift pages are shareable by design. When a parent creates a gift page and shares the link: • The child's first name, age, occasion, activities selected, and parent's message are visible to anyone with the link • The list of gifts already sent (names and messages of gift-givers) is visible to anyone with the link — parents should be aware of this when choosing what message to request from guests • Total amount gifted is visible on the gift page Parents control what information appears on the gift page. We encourage parents not to include full names, school names, or other identifying information about their child beyond a first name. 6.3 Legal Requirements We may disclose your information if we believe in good faith that doing so is required to: • Comply with applicable law, regulation, or legal process • Protect the rights, property, or safety of Rally, our users, or the public • Respond to valid legal requests from law enforcement or government authorities 6.4 Business Transfers If Rally or Emiva Ventures LLC is acquired by, merged with, or sold to another company, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Platform prior to any such transfer. 7. Data Retention We retain your information for as long as necessary to provide the service and fulfill the purposes described in this Privacy Policy: • Account information is retained while your account is active and for up to 3 years after account deletion, to comply with financial record-keeping requirements • Gift page data (child name, activities, messages) is retained for 2 years after the page closes or expires • Payment records are retained for 7 years to comply with financial regulations • Analytics data is retained in aggregated, anonymized form indefinitely You may request deletion of your account and associated personal data at any time by emailing support@givewithrally.com. Note that we may retain certain information as required by law. 8. Your Rights and Choices Depending on your location, you may have the following rights regarding your personal information: • Access: Request a copy of the personal information we hold about you • Correction: Request that we correct inaccurate or incomplete information • Deletion: Request deletion of your personal information (subject to legal retention requirements) • Portability: Request a machine-readable copy of your data • Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send • Opt-out of analytics: Contact us to opt out of non-essential analytics tracking To exercise any of these rights, email support@givewithrally.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request. California Residents (CCPA) If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete, and the right to opt out of sale (we do not sell personal information). To exercise these rights, contact support@givewithrally.com. 9. Security We implement industry-standard security measures to protect your information, including: • Encryption of data in transit using TLS/HTTPS • Encrypted storage of passwords using industry-standard hashing • Payment card data handled exclusively by Stripe's PCI-DSS compliant infrastructure • Access controls limiting employee access to personal data • Regular security reviews No security system is impenetrable. If you believe your account has been compromised, contact us immediately at support@givewithrally.com. In the event of a data breach that affects your rights, we will notify you as required by applicable law. 10. Cookies and Tracking Technologies We use cookies and similar technologies to operate the Platform and improve your experience. Specifically: • Essential cookies — required to log in, maintain sessions, and use core features. Cannot be disabled. • Analytics cookies — help us understand how users interact with the Platform. You may opt out by contacting us or using your browser settings. • Preference cookies — remember your settings and choices We do not use advertising or retargeting cookies. We do not sell data to advertising networks. 11. Third-Party Links Gift pages may reference activity providers (such as soccer leagues or swim schools) by name. The Platform does not link directly to these providers and is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party service you visit. 12. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we make material changes, we will: • Post the updated policy on the Platform with a new "Last Updated" date • Send an email notification to registered account holders • Where required by law, obtain your consent before the changes take effect Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated policy. 13. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact: • Email: support@givewithrally.com We take privacy concerns seriously and will respond promptly.