Privacy policy
Last updated: October 26, 2026
MissionC3 is a volunteer and community management service for nonprofit organizations, run by ForwardStack LLC ("ForwardStack", "we", "us"). This policy explains what personal information MissionC3 collects, how it's used and shared, and the choices you have. It covers missionc3.app, every organization's MissionC3 site (such as yourorganization.missionc3.app or an organization's own address), our apps, and the texts and emails MissionC3 sends.
Two kinds of information
- Information an organization keeps about its people. Nonprofits use MissionC3 to keep records about their volunteers, donors, staff and partners. The organization decides what it collects and why, and ForwardStack handles that information on the organization's behalf and under its instructions. If you're a volunteer or supporter, the organization's own privacy notice also applies, and it's the best place to start with questions or requests about your record.
- Information about our customers and users. For the organizations that subscribe to MissionC3, and for everyone's sign-in, ForwardStack decides how the information is used, and this policy applies directly.
What we collect
- Account and sign-in information: your name, email address, mobile number, password (stored only in a form we can't read back), and, if you sign in with Microsoft or Google, the basic profile they share with us.
- Information an organization or you enter: contact details, the groups and roles you belong to, answers to an organization's sign-up questions (for example qualifications, availability, emergency contacts or equipment), documents and photos you or the organization upload, and notes.
- Your communication choices: whether you've agreed to texts, emails or photos, with the wording you agreed to, when, and how.
- Messages: the texts and emails MissionC3 sends you, your replies, and whether each was delivered.
- Usage and device information: your IP address, browser and device type, the pages you visit and the actions you take in MissionC3, and the time of each, kept on our own servers to run, secure and improve the service.
- Billing information for subscribing organizations: processed by our payment processor. We don't store card numbers.
- Support: what you tell us when you contact us.
How we use it
- To provide MissionC3: sign-in, the organization's records, sign-up forms, its portal, and the texts and emails it sends.
- To send the messages an organization asks MissionC3 to send, only to people who have agreed to them where the law or the carriers require it.
- To send our own service messages: support replies, service outage notices and account updates.
- To keep MissionC3 secure, prevent fraud and abuse, and fix problems.
- To understand how MissionC3 is used so we can improve it.
- To meet legal obligations and enforce our terms of service.
We don't sell personal information, and we don't use it for advertising.
Text messages
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Neither do the organizations that text through MissionC3.
- Texts are sent only to people who have agreed to receive them, by ticking an unticked checkbox on a sign-up form or in their settings, after confirming their mobile number with a one-time code they asked us to text them. Agreeing is never required to take part.
- What we keep: your mobile number; your answer, with the wording you agreed to and when; the texts sent to you and your replies; and whether each was delivered. It's used only to send the texts you agreed to, keep a record of your answer, and stop texts when you ask.
- Your number and the texts are shared only with our text-messaging provider and the mobile carriers, and only to deliver the texts.
- Message frequency varies. Message and data rates may apply. Reply STOP to any text to stop them, START to get them again, and HELP for help. Each organization's texting terms are at its MissionC3 address/messaging-terms.
Who we share it with
- The organization you belong to sees the information in its own records. Organizations never see each other's records.
- Service providers who run parts of MissionC3 for us, only as needed to do so: hosting, network security and file storage, text messaging, email delivery, payment processing and performance monitoring, and Microsoft or Google if you choose to sign in with them. They may not use the information for their own purposes. We'll give organizations the current list of providers on request.
- When the law requires it, or to protect the rights, safety or property of people or of ForwardStack.
- If ForwardStack's business is sold or merged, with the new owner, who must keep honoring this policy.
Cookies
MissionC3 uses cookies to keep you signed in, protect your account and remember your settings. We don't use advertising or cross-site tracking cookies.
How long we keep it
We keep information while the organization's or your account is active, and afterwards for as long as we need it to run and secure MissionC3, keep backups, resolve disputes and meet legal obligations, such as keeping consent records and billing records. When an organization closes its account or asks us to delete its records, we delete or de-identify the information within a reasonable time; copies in backups are removed as those backups expire on their normal schedule.
Security
Information is encrypted in transit, sensitive fields are encrypted where they're stored, each organization's records are kept separate from every other's, and access within ForwardStack is limited to people who need it. No system is perfectly secure; if a breach affects your information, we'll tell the organization and you as the law requires.
Your choices and rights
- You can see and update much of your information in MissionC3, and change your communication choices in your settings at any time.
- You can ask for a copy of your information, or ask for it to be corrected or deleted. For an organization's records, ask the organization; we'll help it respond. For anything else, write to us.
- Depending on where you live, you may have further rights under your state's law. We won't treat you differently for using them.
Children
MissionC3 isn't meant for children under 13, and people under 13 may not create a sign-in. An organization that keeps records about children is responsible for getting a parent's or guardian's permission. If you believe a child under 13 has given us personal information, contact us and we'll take steps to delete it.
Where information is stored
MissionC3 is run from the United States, and information is stored and processed there.
Changes to this policy
We'll post any change here with a new "Last updated" date, and tell organizations and users before a significant change takes effect.
Contact us
ForwardStack LLC
537 Jenna Dr, Verona, WI 53593, USA
support@forwardstack.io