Privacy Policy

1. Scope and contact

This policy describes how My Mission Staff handles information when you use our nonprofit staff workspace, public website, and connected services. For privacy questions or requests, contact jmorrison@raisersharpconsulting.com.

2. Information you provide and service records

We handle account information such as your name, email address, and organization membership; organization profiles and approved facts; uploaded documents and images; conversations, assignments, and project materials; and drafts, final deliverables, review decisions, and approval history. Service records may include sign-in/session information, connection settings, authorized account identifiers, access credentials, activity logs, errors, and technical request information needed to operate and troubleshoot the service.

3. User-authorized connected services

Connections are authorized by you or an authorized organization representative and are used to perform requested organizational work. Actual access depends on the permissions granted, the services enabled, and any organization access restrictions. A connection does not redefine the organization for which the work is being performed.

• Google Workspace: Connected account details; Drive file and folder names, identifiers, metadata, and permitted document or image content; Docs text; Sheets/workbook contents; and, when separately connected and authorized, Gmail messages and related sender/recipient information, Calendar events and attendees, or contact information available through enabled services. These support document preparation, analysis, finding organization materials, and authorized communications or calendar work.
• QuickBooks Online: Company identifiers and information, financial reports, chart of accounts, balances, budgets, transactions, and related customer/vendor records made available by the authorized connection. These support bookkeeping review, financial analysis, and requested organizational reporting. Current financial access is read-only; connecting QuickBooks does not authorize money movement.
• Mailchimp: Account information, audience identifiers and details, subscriber/contact information where permitted and needed for the assignment, recipient counts, campaign content and settings, sender/reply-to details, campaign status, and reporting information. These support communication preparation, approved draft creation, and separately authorized sends.
• Facebook and Instagram (Meta): If Meta connections are enabled and you authorize them, data may include your authorizing account identifier, Pages you manage and Page details, linked Instagram professional account identifiers and profile details, and permitted posts, media, captions, and engagement/insights information needed for requested work. Only enabled functionality and granted permissions determine actual access. Facebook and Instagram connection and direct publishing are not currently enabled; this policy is not a claim that they are available.

We do not access a service merely because it is listed here. Important external actions require Executive approval. Approval of content or a draft is not approval to send or publish it.

4. How information is used and shared

We use information to provide the workspace, maintain organization context, carry out assignments, prepare and review deliverables, execute authorized supported actions, keep activity records, secure accounts, and resolve support issues.

Relevant assignment content and source material may be sent to service providers supporting hosting, storage, authentication, automated drafting and analysis, or document handling. Public-web research providers may receive search terms or URLs; private organization documents are not intended for public-web research. Authorized organization members can access shared work according to their permissions. Connected platforms receive information necessary for an authorized action. We may also disclose information when legally required or necessary to protect rights and service security. We do not sell connected-service data or use it for targeted advertising.

5. Storage, retention, and security

My Mission Staff stores workspace records and materials needed for ongoing work, review history, and service operation. Authorized connections use access credentials; private credentials are handled server-side. We use access controls and organization-scoped permissions, but no service can guarantee absolute security.

Disconnecting a service stops its use through that connection; it does not automatically erase previously saved documents, copied source data, deliverables, or activity records. Data is retained while needed to provide the service, subject to deletion requests and any necessary legal, security, or recordkeeping requirements. Any retained exceptions and applicable backup limitations should be addressed during the deletion request; we do not promise an unverified automatic deletion schedule.

6. Your choices and deletion requests

You can manage connections in Organization HQ → Connections, revoke permissions at the connected provider, and request access, correction, or deletion of your My Mission Staff data by emailing support. We may need to verify your identity and authority over organization-shared data. See Data Deletion for instructions and the distinction between workspace deletion and third-party records.

Essential session storage supports sign-in and account access. The workspace also stores certain display preferences in your browser. Clearing browser storage does not delete server-stored account or organization records.

7. Policy updates

We may update this policy as the service or its connections change. The date above identifies the latest version. Contact support if you have questions about a change.