Data Processing Addendum
This addendum forms part of the service agreement between Generosity Experience Corporation ("Processor") and the client organization ("Controller") in connection with reporting, analytics, and related services, including access to GX Reporting.
You are the data controller. You retain full ownership of your data at all times.
We act as a data processor. We process your data solely to deliver the reporting, analytics, and advisory services described in our agreement. We do not process data for any other purpose.
We may process the following categories of data in the course of delivering services:
Processing is limited to what is necessary to provide our services.
Data is processed to:
Note: GX Reporting is not a system of record. Dashboard outputs are intended to support analysis and should not be relied upon as the sole source for financial, compliance, or audit reporting.
Data is stored and processed using Google Cloud Platform infrastructure located in Canada:
All stored data remains within Canadian borders. Where AI-assisted features are used (see Section 6), limited anonymized or aggregated data may be transmitted to external processors for the sole purpose of providing those features. No personally identifiable information or raw donor records leave Canadian infrastructure.
We use the following third-party providers to support our services:
| Provider | Service | Data Exposure |
|---|---|---|
| Google Cloud Platform (BigQuery) | Data storage and processing | Full dataset (Canadian regions only) |
| Anthropic (Claude) | AI-assisted column mapping and reporting assistant | Anonymized/aggregated only — no PII or raw records |
We will notify you before introducing any new subprocessor that would have access to client data in a form beyond anonymized or aggregated metrics.
Data Mapping. When integrating data from multiple source systems, AI assists in identifying field types and suggesting column mappings. To protect privacy, we do not send actual donor data to AI services. Instead, we randomize and anonymize a small sample of column values so the AI can identify field structures without ever seeing real records, names, amounts, or personally identifiable information.
Reporting Assistant (AI Buddy). The dashboard includes an optional AI-powered assistant that helps interpret reporting data and identify trends. This feature uses only anonymized, aggregated metrics from your dashboard — such as totals, averages, and percentages — and does not access or transmit any underlying donor-level data, PII, or raw records. This feature can be enabled or disabled at any time.
AI processing is provided by Anthropic (Claude) under terms that prohibit the use of inputs for model training. All AI interactions are stateless — no conversation history is retained between sessions. Prompts and responses are not logged by Generosity X beyond the duration of the active session.
We implement reasonable administrative and technical safeguards, including:
Access to client data is restricted to Generosity X personnel directly involved in delivering your services.
Data is retained for the duration of the active service engagement.
Upon termination of services:
Mid-engagement data exports are available upon reasonable request.
In the event of a confirmed data breach affecting your data, we will notify you without undue delay and no later than 72 hours after becoming aware of the incident.
Notification will include, to the extent available: the nature and scope of the breach, the categories of data affected, and the steps being taken to contain and remediate the incident.
We may use anonymized, aggregated data to produce industry benchmarks for the nonprofit fundraising sector. No individual client will be identifiable. Benchmarks will only be published for segments containing five or more organizations.
You may opt out of benchmarking inclusion at any time by contacting us.
Our data handling practices are designed to comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.