Security, funds & data

Where does the money go?

Donations go directly into your organization's own Stripe account. DonatoTomato uses Stripe Connect with direct charges, which means your nonprofit is the merchant of record. Your Stripe account charges the donor, and the gift lands in your Stripe balance, then pays out to your bank on your normal Stripe schedule after funds become available. Bank gifts can take several business days to complete before payout.

DonatoTomato never holds your donations. We collect a flat 1% platform fee through Stripe at the time of each gift. Stripe charges its own standard processing fee on top of that, and on a monthly gift its own fee for running the repeating charge. Stripe prices card and US bank account (ACH) payments differently; the treasurer brief lists Stripe's prices for both and where each figure comes from, and your connected Stripe account determines the fees actually charged. DonatoTomato charges no monthly fee or setup fee, and there is no long-term commitment. Your donors are never asked to tip DonatoTomato, and there is no tip line in the checkout.

What data is stored, and where?

• Card numbers and bank account numbers are never stored by DonatoTomato. Stripe collects them, and Stripe is PCI DSS Level 1 certified. We store a Stripe reference token, not card or bank account numbers.
• Donor and donation records (name, email, optional phone, a mailing address on gifts of $250 or more, gift history, campaign, any message) are stored in US-based infrastructure (Supabase), encrypted at rest, with all traffic over TLS.
• The WordPress plugin adds no donor or payment records to your WordPress database. The donation form loads as an iframe from DonatoTomato.
• We do not use advertising cookies, we do not sell personal information, and we bundle no third-party tracking libraries in the WordPress plugin.

Full detail is in our Privacy Policy.

Can we export our data?

Yes, at any time. Your donors and donations export to CSV from the dashboard, with each gift's gross, refunds, chargebacks, recorded fees and net after recorded fees, so your records are portable for bookkeeping, donor outreach, or moving to another tool. Your records and your Stripe account go with you.

Reports and CSVs show donations, refunds, recorded fees and net after recorded fees. Separately assessed processing and Billing fees are not currently reconciled here; unavailable fee amounts are not deducted. Compare recorded amounts with your Stripe payment details and available itemized Fees reports; Stripe may assess fees separately or make their details available later. See the fees and reporting brief for details.

The Reports page itemizes monthly gross, platform fees, recorded processing fees, recorded dispute fees and net after recorded fees. The Fees on Full Refunds line breaks out recorded processing costs on fully refunded gifts, without deducting them twice. Disputes that close against you stay visible, with the amount withdrawn and any recorded dispute fees. Failed and unfinished payment attempts have their own Not completed tab, showing each donor's email and, for a refused payment, the reason it failed, so you can follow up. The cost of each failed bank payment is listed on a separate Failed bank payment expenses card, apart from your gift totals.

What happens if we close our account?

You can disconnect Stripe at any time, which stops new donations immediately. Money already in your Stripe account is unaffected, because it was always yours. Export your data first, then email us to close the account. We delete account data that is not subject to legal retention requirements; donation records are retained for a minimum of 7 years to meet standard tax and accounting obligations.

How are refunds handled?

Admins issue refunds directly from the accounting dashboard. The refund is processed through Stripe back to the donor's original payment method. Refund alerts surface in the dashboard for your team to review. Bank gifts can only be refunded in full, and a bank refund can fail if your available Stripe balance does not cover it, so check it first.

Is the WordPress plugin open and safe to run?

The DonatoTomato WordPress plugin is open source under the GPL, and its full, unminified source is published on GitHub so anyone can read exactly what it does. It bundles no third-party tracking libraries. DonatoTomato hosts the donation platform. Your team continues to maintain your website and install or update the plugin.

Who provides support?

DonatoTomato is operated by Dev1 Consulting LLC, a Texas limited liability company doing business as DonatoTomato, a US company. A real person answers setup and account questions. Email support@donatotomato.com and we will help.