Privacy policy

1. Introduction

Arizona Christian Tuition ("ACT," "we," "us," or "our") is a 501(c)(3) nonprofit School Tuition Organization (STO) certified under Arizona law. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our websites (actsto.org, arizonachristiantuition.com) and web application (my.actsto.org) (collectively, the "Platform"). This Policy applies to all users including Parents, Students, Individual Donors, and Business/Corporate Donors.

2. Information We Collect

2.1 Information You Provide

• Account registration: name, email address, phone number, mailing address, and password.
• Parent accounts: student name, grade level, school name, and enrollment status.
• Business donor accounts: organization name, EIN/Tax ID, and authorized representative contact details.
• Donation information: donation amount, campaign designation, and billing address.
• Scholarship applications: student demographic information and enrollment documentation.
• Campaign content: narrative text, images, videos, and funding goal.
• Communications: support inquiries and correspondence sent to ACT.

2.2 Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, and device type.
• Usage data: pages visited, time on page, links clicked, and referring URL.
• Cookie data: session identifiers and analytics identifiers (see Section 6).

2.3 Information from Third Parties

• PayPal: transaction confirmation, donation amount, donor identity, and transaction ID.
• Twilio: SMS/voice message delivery status and opt-out records.
• Analytics providers: aggregated website traffic and engagement data.

3. How We Use Your Information

• Process donations and issue tax credit acknowledgment letters as required by Arizona law.
• Create, manage, and display scholarship funding campaigns.
• Evaluate scholarship applications and award scholarship funds.
• Send transactional communications: donation receipts, campaign updates, OTP codes, and account alerts.
• Send marketing communications to users who have opted in.
• Comply with Arizona STO certification requirements under A.R.S. § 43-1089 et seq.
• Detect and prevent fraud, unauthorized access, and Policy violations.
• Improve Platform functionality through aggregated analytics.

4. How We Share Your Information

ACT does not sell, rent, or trade your personal information to third parties for their own marketing purposes.

• Service providers: PayPal (payment processing), Twilio (SMS/voice), email delivery providers, and cloud hosting — all bound by data processing agreements.
• Partner schools: student first name, grade, and enrollment status for scholarship verification only.
• Arizona Department of Revenue: donor records as required by Arizona STO statute.
• Legal process: court orders, subpoenas, or lawful government requests.
• Donors may request anonymous donation status by contacting us prior to donating.

Campaign pages are publicly visible by default. Parents should not include sensitive personal data such as full home addresses or government ID numbers in campaign content.

SMS Consent and Mobile Information

ACT does not sell, rent, share, or disclose mobile phone numbers, SMS opt-in data, or SMS consent records with third parties or affiliates for their own marketing or promotional purposes. Mobile information and messaging consent are used only to deliver ACT-related communications, support services, account notifications, donation confirmations, campaign updates, event reminders, and other messages requested or authorized by the user.

ACT may share mobile phone numbers and messaging data with service providers such as Twilio solely as necessary to deliver, manage, secure, and document ACT communications. These providers are not permitted to use mobile information or SMS consent data for their own marketing or promotional purposes.

5. Children's Privacy (COPPA)

ACT does not knowingly collect personal information directly from children under age 13. Campaign and scholarship information for minor students is submitted by a parent or legal guardian. If you believe we have inadvertently collected information from a child under 13, contact us immediately at hello@actsto.org and we will delete it promptly.

6. Cookies and Tracking

• Essential cookies: required for login and core Platform function. Cannot be disabled.
• Analytics cookies: used to understand Platform usage (e.g., Google Analytics). You may opt out at tools.google.com/dlpage/gaoptout.
• Functional cookies: remember user preferences such as notification settings.

You may manage most cookies through your browser settings. Disabling essential cookies will impair Platform functionality.

7. Payment Information

All donations are processed by PayPal, Inc. ACT does not receive, store, or process your full credit card or bank account number. PayPal handles payment data under PCI DSS Level 1 standards. ACT receives only transaction confirmation, donation amount, and transaction ID. See PayPal's Privacy Policy at paypal.com/us/legalhub/privacy-full.

8. SMS and Voice Data

ACT uses Twilio, Inc. to deliver SMS and voice communications. Twilio processes mobile phone numbers, message content, delivery status, and opt-out records on ACT's behalf under a Data Processing Addendum. SMS message logs are retained for 24 months. ACT's SMS program is registered under Twilio's A2P 10DLC framework. See Twilio's Privacy Policy at twilio.com/legal/privacy.

When you choose to opt in to SMS, ACT records that consent separately from Terms of Service or Privacy Policy acceptance. Consent records may include your phone number, normalized phone number, email address, source form, timestamp, IP address, user agent, disclosure version, and the consent language shown at the time of opt-in. SMS consent is optional and can be withdrawn at any time by replying STOP or contacting ACT.

SMS Program Disclosures

By opting in to ACT SMS communications, users may receive text messages related to account alerts, donation confirmations, scholarship campaigns, fundraising updates, event reminders, program announcements, support responses, and other ACT-related notifications. Message frequency varies based on user activity and campaign participation. Message and data rates may apply. Users may reply STOP to opt out at any time or HELP for assistance.

9. Data Retention

• Donor and financial records: 7 years minimum (IRS/nonprofit compliance).
• Account information: duration of account plus 3 years after closure.
• Scholarship application records: 7 years (Arizona STO compliance).
• SMS message logs and opt-in records: 24–48 months (TCPA/CTIA compliance).
• Email communication logs: 36 months.
• Campaign content: duration of campaign plus 3 years.

10. Data Security

• All Platform communications are encrypted via TLS 1.2 or higher (HTTPS).
• Passwords are stored using industry-standard one-way hashing (bcrypt). ACT never stores plaintext passwords.
• Access to personal information is restricted to ACT staff with a legitimate need.
• Payment card data is handled exclusively by PayPal under PCI DSS standards.
• In the event of a data breach, ACT will notify affected users as required by Arizona data breach notification law, A.R.S. § 18-551 et seq.

11. Your Privacy Rights

• Right to Access: request a copy of personal information ACT holds about you.
• Right to Correction: request correction of inaccurate or incomplete information.
• Right to Deletion: request deletion of your personal information, subject to legal retention requirements.
• Right to Opt Out: opt out of marketing communications at any time.

To exercise these rights, email hello@arizonachristiantuition.com with subject line "Privacy Rights Request." ACT will respond within 30 days. California residents may submit CCPA requests using subject line "CCPA Request." ACT does not sell personal information.

12. Changes to This Policy

ACT may update this Privacy Policy at any time. Material changes will be communicated via email at least 14 days before taking effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

13. Contact

Arizona Christian Tuition — Privacy Team
Phone: (602) 421-8301
Email: hello@actsto.org
Web: https://www.actsto.org  |  App: https://my.actsto.org

This Privacy Policy is effective as of April 1, 2026. © 2026 Arizona Christian Tuition. All rights reserved.

Related: Communication Policy · Terms of Service