Last updated: October 13, 2026
DonorScale ("DonorScale", "we", "us") operates a donor prospect research service for nonprofit organizations, including this website and the DonorScale application. We are based in Ontario, Canada. To reach us about privacy, write to [email protected].
From visitors and applicants:
From users of the application:
Our clients use DonorScale to research individuals who may be prospective donors. For each prospect a client enters a name and may enter an email address, an employer and a location. We then retrieve and store information about that person from public records, such as political contribution filings, nonprofit filings, corporate officer registries, securities insider-trading filings and public web pages, and from licensed commercial data providers. We store the results, including an AI-generated profile, in the client's workspace.
We do not contact the individuals being researched. Our clients decide whom to research and why, and are responsible for having a lawful basis to do so.
If you are a person who has been researched and you want access to the information held about you, a correction, or removal, write to [email protected]. We will respond within the time required by applicable law.
To generate profiles and plan searches, we send prospect details and the records retrieved for that prospect, such as name, employer, location and matched public-record data, to AI models through OpenRouter, a service that routes requests to the underlying model provider. We also use Perplexity to help identify a prospect's public professional profile, which involves sending the prospect's name and any employer and location entered. These providers process the data under their own terms and privacy policies. AI output can be wrong, and clients should check it before relying on it.
When a prospect is researched, we send identifying details (at minimum the prospect's name, and in some cases employer, location or email) to the following kinds of providers to retrieve records:
We also rely on Google for sign-in when that method is enabled, and on Cloudflare, which carries web traffic to our servers. Our application database runs on infrastructure we operate.
We do not sell personal information. We may disclose information if required by law.
Prospect records, research results and account data are kept while the client's account is active and until deletion is requested. Users can delete a prospect record in the application, and you can ask us to delete other data at [email protected]. Failed sign-in records are deleted automatically after 48 hours. We may keep information longer where the law requires it.
We use administrative and technical measures intended to protect personal information, including access controls and limits on repeated sign-in attempts. No system is completely secure, and we cannot guarantee absolute security.
This website uses the session and security cookies that our web framework sets so that forms work and are protected against forgery. The application sets a sign-in session cookie to keep you signed in. We do not use advertising cookies, and neither the website nor the application loads third-party analytics or error-tracking scripts. Cloudflare may set its own cookies as it delivers our traffic.
Your browser settings let you block or delete cookies, but the application will not work without its sign-in cookie.
Our application database and servers are located in Canada. However, several of the providers listed above are located in, or process data in, the United States and possibly other countries. When we send them prospect details to retrieve records or generate profiles, that information is processed outside Canada and may be accessible to courts and authorities there under local law. Cloudflare may also handle web traffic outside Canada.
Under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act, you may have the right to ask whether we hold personal information about you, to access it, to challenge its accuracy and have it corrected, to withdraw consent in some circumstances, and to complain to the Office of the Privacy Commissioner of Canada. To make a request, write to [email protected]. We may need to verify your identity first.
DonorScale is a service for organizations and is not directed at children. We do not knowingly collect personal information from children.
We may update this policy. When we do, we will change the "Last updated" date above. Material changes will be communicated to account holders by email or in the application.
Questions or requests about this policy: [email protected]. This policy is governed by the laws of Ontario and the federal laws of Canada that apply there.