Privacy Policy
Last updated October 22, 2026
This policy explains how Devote Technology Corporation (“Devote,” “we,” “us”) collects, uses and shares information in Devote Savings, the savings app for nonprofit organizations at app.devotesavings.com. Our other products are covered by the Devote privacy policy.
Information we collect
- Your sign-in. Your name and email address, and, if you sign in with Google, the name, email address and profile picture Google shares with us. We also keep the authenticators, passkeys and backup codes you set up to protect your account.
- Your organization’s application. The organization’s legal name, employer identification number, address, phone number and formation details, and, for its controlling party and anyone who owns 25% or more of it: name, title, ownership, date of birth, home address, and Social Security or other government identification number.
- Account and money information. Your savings account’s balances, transactions, interest and statements; the bank accounts you link to move money; and the transfers, approvals and schedules people in your organization make.
- Records you keep in the app. Funds, donor restrictions and the donor names, terms and gift agreements recorded with them, uploaded documents, reports, notes, and requests you send to our support team.
- Technical information. Your IP address, browser and device, and a record of sign-ins and security-sensitive actions, which we use to keep accounts safe.
We use only the cookies needed to keep you signed in and secure. We don’t use advertising or cross-site tracking cookies, and we don’t respond to browser Do Not Track signals because we don’t track you across sites.
How we use it
- To open and run your organization’s savings account and carry out the transfers and other instructions your organization gives.
- To verify the identity of your organization and its people, as anti-money-laundering and know-your-customer laws require.
- To protect accounts: confirming sign-ins and approvals, detecting fraud and unauthorized activity, and investigating security events.
- To send the emails the service depends on, such as sign-in codes, approval requests, invitations and account notices.
- To answer support requests, fix problems, keep records the law requires, and enforce our terms.
We don’t sell personal information, and we don’t use it for advertising.
Who we share it with
- Our deposit program partner and its banks, which open and hold your savings account and process its deposits and withdrawals.
- Identity verification providers, which check the organization and people named in an application.
- Plaid, which connects the bank accounts you link. Its handling of your information is described in the Plaid End User Privacy Policy.
- QuickBooks, when your organization connects it: we send the activity you choose to its books.
- Service providers that host the app and its database, store uploaded files, deliver email and report errors to us. They may use the information only to provide their service to us.
- People in your organization, according to the role and access each one is given, and people your organization chooses to share a report with.
- Authorities and others where the law requires it, such as in response to a subpoena or court order, or to protect against fraud or harm; and a buyer or successor if Devote’s business is sold or merged.
Google sign-in
If you sign in with Google, we receive only your name, email address and profile picture, and use them only to sign you in and show who you are to your organization. We don’t request access to your Gmail, files or contacts. Our use of information from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
How long we keep it
We keep information while your organization’s account is open and afterwards for as long as financial recordkeeping, tax and anti-money-laundering laws require, or as needed to resolve disputes and enforce our agreements. Then we delete it or make it anonymous.
How we protect it
Information is encrypted in transit, and the identification numbers in applications are encrypted again before they’re stored. Large withdrawals and other sensitive actions ask for an authenticator, and access inside Devote is limited to staff who need it. No system is perfectly secure, so keep your sign-in codes and authenticators to yourself and tell us right away if you suspect misuse.
Your choices and rights
You can see and update much of your information in the app. You may ask us for a copy of your personal information, to correct it, or to delete it, and, depending on where you live (for example, California), you may have further rights under state law. We’ll verify your request and respond as the law requires; some records must be kept even after an account closes. We won’t treat you differently for using these rights.
Children
Devote Savings is for organizations and the adults who act for them. We don’t knowingly collect information from anyone under 18.
Changes
If we change this policy, we’ll update the date above, and we’ll tell account holders by email or in the app before a significant change takes effect.
Contact us
Email support@usedevote.com, or write to:
Devote Technology Corporation
580 South 100 West Street
Provo, UT 84601