Privacy Policy

1. Introduction & Two-Part Structure

Bright Sight Ventures LLC ("Precheck," "we," "us," or "our") provides intelligent donation synchronization and check processing tools for nonprofits and growing organizations.

This Privacy Policy is divided into two distinct parts:

• Part I: Website Visitors covers individuals who browse getprecheck.io, submit demo requests, fill out integration voting forms, or interact with our marketing materials. For this data, Precheck acts as a Data Controller.
• Part II: Customers Using the Precheck Application covers nonprofit organizations, staff members, and administrators who subscribe to and use our software application, check scanning workflows, and CRM synchronization tools. For Customer Data processed in the application, Precheck acts as a Service Provider (Data Processor), processing data strictly on our customers' documented instructions.

2. Information We Collect from Website Visitors

When you visit our Site or communicate with us, we collect information you provide directly, as well as limited technical information gathered automatically:

• Form submissions: Name, work email address, phone number, organization name, current donor database (CRM), fundraising platforms used, and notes you submit when requesting a demo or voting on new integrations.
• Device & browsing information: IP address, browser type, device characteristics, referral URLs, and pages viewed, collected via standard cookies and analytics scripts.

3. How We Use Website Visitor Information

We use website visitor information to:

• Respond to inquiries, schedule product demonstrations, and evaluate feature interest.
• Notify you when new integrations or platform features you voted for become available.
• Analyze aggregate site traffic, diagnose website performance issues, and improve our content.

4. Cookies & Analytics

We use essential and analytics cookies to understand site traffic and measure form engagement (such as HubSpot tracking and Google Analytics). You can adjust your cookie settings through your web browser at any time.

5. US State Privacy Rights for Website Visitors

Several US states—including California, Virginia, Colorado, Connecticut, and Texas—have enacted comprehensive consumer data privacy laws. These statutes generally provide residents with rights to know, access, correct, delete, and opt out of the sale of personal information or targeted advertising.

Statutory Applicability: Precheck is a business-to-business software provider that does not meet the statutory revenue or consumer-volume thresholds of comprehensive state privacy acts (such as the California Consumer Privacy Act / CPRA or Virginia Consumer Data Protection Act) and qualifies under the small business exemption of the Texas Data Privacy and Security Act (TDPSA).

Our Commitments:

• We do not sell personal information to third parties.
• We do not share personal information for cross-context behavioral advertising.
• We do not process sensitive personal information of website visitors.
• If you are a website visitor and wish to confirm, correct, or delete any contact information you submitted through our website forms, you may email us at privacy@getprecheck.io, and we will promptly honor your request.

6. Customer Data We Process

When nonprofit customers use Precheck to scan checks, parse donor paperwork, and sync records into their CRM, we process Customer Data strictly on the customer's behalf. This data includes:

• Physical check images: Images of scanned checks, including payor names, check numbers, payment amounts, bank names, and the routing and account numbers printed on the check face. Routing and account numbers are used solely for constituent matching and gift logging.
• Donation documentation: Accompanying gift letters, disbursement statements, and Donor-Advised Fund (DAF) paperwork.
• Constituent & gift metadata: Donor names, postal addresses, phone numbers, email addresses, donation amounts, campaign codes, and fund allocations.
• Connected platform data: Data pulled via authorized API connections to your donor management software (such as DonorPerfect) and fundraising platforms (such as Givebutter) to match records and prevent duplicates.

7. How We Use Artificial Intelligence

Precheck uses artificial intelligence to convert unstructured check scans and gift paperwork into structured data ready for your database.

• AWS Bedrock: We access AI models through AWS Bedrock to perform optical character recognition, text extraction, and entity parsing.
• Zero Model Training: Your Customer Data, donor information, and check images are never used to train, retrain, or fine-tune public or third-party AI models. Data submitted to AWS Bedrock is processed securely and is not retained by third-party model providers.
• Human-in-the-Loop Verification: AI extractions can contain errors, particularly when source checks contain cursive handwriting, faint printing, or poor scan quality. Precheck's software evaluates extraction confidence and automatically flags low-confidence fields for human review prior to saving records to your database.
• Annual Accuracy Review: Precheck conducts internal evaluations of its data extraction pipelines to maintain high accuracy and reduce processing bias. Once per calendar year, customers may request in writing a summary of Precheck's periodic model accuracy checks.

8. Data Retention & Automatic Deletion

We maintain a strict data lifecycle designed to minimize data holding times:

• Uploaded files, extractions & staging logs: Raw check images, uploaded PDF letters, OCR extraction payloads, and temporary parsing logs are automatically deleted thirty (30) days after ingestion.
• Account & operational records: Customer account profiles, authorized user credentials, subscription billing history, and high-level sync audit logs (recording sync timestamps, record counts, and status codes) are retained for the duration of your active subscription and as required to satisfy accounting, tax, and legal compliance obligations.

9. Security Architecture

Precheck maintains administrative, physical, and technical safeguards designed to protect Customer Data against unauthorized access, loss, or alteration:

• Encryption in transit: All data transmitted between your browser, our servers, and third-party APIs is encrypted using TLS 1.2 or higher.
• Encryption at rest: All stored files, databases, and backup volumes are encrypted using AES-256.
• Access controls: Production systems require multi-factor authentication, role-based authorization, and follow the principle of least privilege.

10. Subprocessors & Service Providers

Precheck partners with vetted third-party service providers ("Subprocessors") to deliver core infrastructure and business functionality:

We maintain written agreements with each Subprocessor requiring them to maintain strict security safeguards. We will notify customers of any material changes or additions to our subprocessor list.

11. Security Incident Notification

In the event that Precheck confirms a security incident resulting in unauthorized access to, alteration of, or disclosure of Customer Data, Precheck will notify affected Customers in writing within seventy-two (72) hours of such confirmation. We will provide reasonable information regarding the nature of the incident, affected records, and remedial measures taken.

12. Donor Rights & Assistance

Because Customer Data belongs to you and your organization, you act as the data controller regarding your individual donors. You are responsible for receiving and responding to requests from donors who wish to access, review, modify, or delete their personal records. Precheck will provide reasonable technical assistance to help you locate, export, or delete donor data stored within the Precheck platform to fulfill verified donor requests.

13. Return & Deletion of Customer Data

Upon cancellation or termination of your Precheck subscription, all Customer Data remaining in active processing environments will be permanently deleted according to our standard 30-day automated deletion lifecycle. Customers may also request expedited deletion of their Customer Data in writing upon termination, and Precheck will fulfill the request within thirty (30) days of receipt, retaining only records required by applicable law or accounting standards.

14. Geographic Scope & Children's Privacy

Location & Processing: The Services are designed and intended exclusively for organizations based in the United States. All Customer Data is processed and hosted on secure cloud infrastructure located within the United States.

Children's Privacy: The Site and Services are strictly not intended for or directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

15. Privacy Questions & Dedicated Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our privacy team directly: