TzedakaBox – Policies and Compliance Statement

Operated by A and R Techs USA Inc. Last Updated: 7/25/2025

1. Terms of Service
TzedakaBox is a crowdfunding platform exclusively for verified U.S. 501(c)(3) nonprofits.
Platform Use
By using this site, you agree to:
Use it for charitable, lawful purposes only.

  • Comply with U.S. and Torah law (Halacha).
  • Provide truthful information.
  • Not impersonate, mislead, or misuse the platform.

Campaign Eligibility
Only verified or pending U.S. 501(c)(3) nonprofits may raise funds.
Prohibited Campaign Types include, but are not limited to:

  • Gambling or raffles
  • Pornography or adult content
  • Violence or weapons
  • Drugs (e.g., THC, CBD)
  • Payday loans, MLM schemes
  • Political propaganda
  • Securities sales or unlicensed finance
  • Any activity violating U.S. law, Halacha, or our partners' terms (e.g., Stripe Restricted Businesses, Sola policies)

TzedakaBox may remove or deny campaigns at its sole discretion.
 

Suspension Rights
We may suspend or terminate any campaign or account without prior notice for reasons
including but not limited to:

  • Violating Terms, 10DLC, or legal obligations
  • Suspected fraud or card testing
  • Excessive chargebacks or complaints

You may request reinstatement via a hearing with our compliance board.
If suspicious, we escalate to payment processors (e.g. Stripe, Sola) who may freeze funds.
We do not hold or access campaign funds.


10DLC SMS Compliance
SMS usage must comply with A2P 10DLC regulations
 

  • Registered brand and use-case
  • Clear opt-in/opt-out in messages
  • No spam, hate, or affiliate SMS
  • Sender identification is required

We reserve the right to disable SMS access for noncompliant accounts.

Donations and Processing

  • Donations are processed via PCI-compliant third parties (Stripe, Sola, PayPal).
  • We never store or access payment data.
  • Donations are non-refundable, except in cases of:
    • ○ Error, duplicate, or fraud
    • ○ Refund requests must go to the nonprofit directly.

2. Privacy Policy

What We Collect

  • Name, email, EIN, address, phone
  • IP address, browser/device info
  • Campaign data, donor logs, and platform behavior


How We Use It

  • Verify nonprofits and process donations
  • Send receipts, alerts, and updates
  • Detect abuse (Cloudflare, reCAPTCHA)
  • Legal and compliance recordkeeping


When We Share It
Only with:

  • Your nonprofit (if you're a donor)
  • Processors (Stripe, Sola)
  • Email/SMS vendors (Mailgun, Twilio)
  • Legal authorities if required


Your Rights
You may:

  • Request a copy or correction
  • Request account/data deletion
    Submit all requests via the Contact Us form at tzedakabox.org.

 

  • Keep you logged in
  • Secure donation forms
  • Monitor abuse
  • Track page performance


We don’t use cookies to:

  • Sell data
  • Track you across the web
  • Store sensitive info


Cookies can be disabled in your browser, but some features may stop working.

4. Anti-Money Laundering (AML) Policy

TzedakaBox applies AML best practices even though we are not a financial institution.


Prevention Measures

  • Only 501(c)(3) orgs may fundraise
  • EINs are verified manually
  • All funds flow directly to nonprofits via Stripe, Sola, or PayPal
  • Suspicious activity is escalated to processors

What We Monitor

  • Repeated or large donations
  • IP patterns (e.g., foreign testing)
  • Sudden banking/campaign changes
  • Abnormal traffic patterns

5. Know Your Customer (KYC) Policy

We vet each nonprofit with a detailed intake process.


Verification

  • EIN validation (IRS)
  • Legal contacts & mission statement
  • Campaign purpose check
  • Stripe/Sola connection required

Rejection Triggers

  • Invalid or unverifiable 501(c)(3) status
  • Use of personal Stripe/PayPal accounts
  • Content that misrepresents or violates guidelines
  • Fundraising not aligned with mission

 

6. Sanctions Compliance Policy

We comply voluntarily with U.S. sanctions frameworks and processor guidelines.


Prohibited Countries
No campaigns involving:

  • Cuba, Iran, Syria, North Korea
  • Crimea, Donetsk, Luhansk
  • OFAC-designated people/entities

We use:

  • Stripe/Sola restriction lists
  • IP monitoring and reCAPTCHA
  • Manual review and processor escalation

7. Enforcement, Security & Copyright

Suspension Rights
We reserve the right to immediately suspend or terminate campaigns or accounts including but not limited to:

  • Legal violations
  • Abuse of services
  • Suspicious or misleading content

Processors may freeze funds independently.
We cannot unfreeze or release funds.

Security Tech

  • Cloudflare + IP bans
  • Google reCAPTCHA
  • Internal 2FA and admin access control

Platform Ownership

All code, content, and infrastructure are © A and R Techs USA Inc.
You may not copy, scrape, clone, or rehost TzedakaBox without permission.


Limitation of Liability
We are not responsible for:

  • Promises made by campaign organizers
  • Outcomes of donations
  • Platform misuse


Users agree to indemnify and hold harmless A and R Techs USA Inc. for any losses or disputes.