POLICIES & INFORMATION

Privacy Policy

Effective date: September 25, 2026

Detroit Decal & Apparel, LLC (“we,” “us,” or “our”) operates Fundraiser Command at fundraisercommand.com and its related storefronts and organization portals (the “Service”).

This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit the Service, request access, manage a fundraiser, purchase merchandise, or contact us.

Account and organization information: Your name, email address, organization, role, access requests, authentication information, notification preferences, and account activity.

Order information: Customer names, contact information, billing and shipping addresses, purchased products, sizes, quantities, order amounts, discounts, payment status, fulfillment details, and return or refund records.

Campaign and payout information: Campaign details, contribution records, payout requests, recipient information, and information needed to verify or complete payments.

Submitted content and communications: Artwork, logos, uploaded files, support requests, messages, and other information you choose to provide.

Technical and usage information: IP address, browser and device information, pages visited, interaction and login timestamps, diagnostic logs, and identifiers used to maintain sessions or protect the Service.

Payment processors handle payment credentials under their own privacy policies. We receive transaction information needed to manage orders and accounting.

• Directly from you when you submit forms, place orders, upload content, or contact us.
• From authorized organization administrators who create or manage access.
• From connected ecommerce, payment, and fulfillment services.
• Automatically when you interact with the Service.

For example, orders placed through a connected Shopify storefront may be imported into Fundraiser Command for reporting, fulfillment support, contribution calculations, and reconciliation.

• Operate the Service and manage accounts and permissions.
• Review access requests and communicate approval decisions.
• Set up and administer campaigns and storefronts.
• Process, fulfill, support, and reconcile merchandise orders.
• Calculate contributions and manage payouts.
• Display information to authorized users.
• Send service notices and manage communication preferences.
• Respond to questions and resolve disputes.
• Detect fraud, investigate errors, and protect the Service.
• Maintain business records and meet legal obligations.
• Understand usage and improve functionality.
• Send marketing where permitted by law and consistent with your choices.

This may include member information, access requests, campaign performance, order details, contribution totals, and payout records. Order information may contain purchaser names, contact information, and purchased items where the user’s role permits access.

Organization administrators may also view account activity, including login counts or last-login information where those features are enabled.

Organizations are responsible for their own use of information they access or export. Contact the relevant organization with questions about its independent practices.

Service providers: Companies supporting hosting, databases, ecommerce, payment processing, email delivery, shipping, security, and business operations. The Service uses Vercel for hosting, Supabase for account and database services, and Shopify for connected ecommerce and checkout.

Participating organizations: Authorized representatives who need information to administer their campaigns, accounts, or payouts.

Professional advisers and authorities: When reasonably necessary for legal advice, accounting, compliance, valid legal requests, fraud prevention, or protection of rights and safety.

Business transaction participants: In connection with a proposed or completed merger, acquisition, financing, reorganization, or sale of business assets, subject to appropriate safeguards.

Other recipients at your direction: When you authorize a disclosure or use a feature that requires it.

We do not make private account records or purchaser information publicly visible merely because someone participates in a fundraiser. Content intentionally approved for a public campaign, such as organization branding and campaign descriptions, may be publicly displayed.

The application does not currently embed third-party advertising pixels or cross-site advertising trackers. Its necessary sign-in and cart functions continue to operate regardless of a browser’s Do Not Track or Global Privacy Control setting; these signals do not disable necessary storage. The application does not currently change its behavior in response to Do Not Track.

Browser settings let you delete or block cookies and clear stored site data. Blocking necessary cookies may prevent login or other features from working. Clearing local storage may remove saved carts and preferences.

Shopify checkout and other external sites have their own cookies, privacy controls, and disclosures. Review their notices when you leave this application.

This statement describes the Fundraiser Command application; separate checkout services and linked websites have their own practices and privacy controls. Contact us to ask about a disclosure or exercise any applicable opt-out right. We will honor legally applicable opt-out rights and recognized preference signals where required.

We may continue sending necessary transactional or administrative messages, such as order confirmations, security notices, access decisions, and payout updates.

Browser or device settings control permission for push notifications, where offered. Any text-message program will provide applicable consent and opt-out information when you enroll.

Retention depends on the type of information, the relationship with you or your organization, outstanding transactions, and applicable requirements.

Account closure does not necessarily remove transaction, accounting, or dispute records that must be retained. Backup copies may remain until they are removed through the applicable backup retention cycle.

Keep your credentials and PIN private, sign out of shared devices, and contact us promptly if you suspect unauthorized access.

Depending on your location and applicable law, you may also have rights to obtain a portable copy, opt out of certain processing, limit certain uses, or appeal a denied request.

Submit requests to info@detroitdecalandapparel.com with the subject line “Fundraiser Command Privacy Request.” To appeal a denied request where applicable, reply to our decision using the subject line “Privacy Request Appeal.”

We may need to verify your identity and authority before acting. Authorized agents may submit requests where permitted by law, subject to appropriate verification. We will respond within applicable legal deadlines.

Some requests may be limited by legal obligations, recordkeeping requirements, security needs, or the rights of others. If we deny a request, we will explain the reason and any applicable appeal process. We will not unlawfully discriminate against you for exercising privacy rights.

Where we process information on behalf of a participating organization, we may direct your request to that organization or assist it in responding.

We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

Organizations should avoid uploading children’s personal information when it is unnecessary for their campaign.

Where applicable law requires safeguards for international transfers, those requirements apply to our handling of the information.

For material changes, we will provide additional notice and obtain consent where required by applicable law.