Privacy Policy

What we collect, and why

Digest subscription. When you sign up for the free nonprofit digest, the form asks for exactly two things: your email address and the editions you want (up to three state or sector picks). We also record when you signed up, whether you’ve confirmed, and a pair of random, non-guessable tokens that power your personal confirmation and unsubscribe links. That’s the entire record.

Workbench account. The research workbench (the app at app.gleantree.com) is in an invite-only beta. Sign-in is handled by Clerk, our authentication provider, which stores your email address and password. On our side we keep a link between your Clerk account and your subscriber record, along with your access tier. If you request Workbench access, we keep your email address (and any note you include) so we can respond.

Operational data. To stop signup abuse, we keep short-lived rate-limit counters keyed by email address and IP address; they expire within minutes. Our hosting provider also keeps standard server logs (IP address, request details) for a limited time, as essentially every website’s host does.

We do not collect names, postal addresses, payment details, or anything else at signup. There is nothing to charge you for — the digest is free and the workbench beta is free.

Double opt-in, and one-click unsubscribe

Signing up does not subscribe you. We first email you a confirmation link, and until you click it, you receive nothing — an unconfirmed signup never gets a digest. If you unsubscribe and later sign up again, we make you confirm again rather than quietly reactivating you.

Every digest we send includes a one-click unsubscribe link in the footer and the standard one-click unsubscribe header that mail apps like Gmail surface as their own button, plus our postal address. Unsubscribing takes effect immediately. We keep your email in a suppressed, do-not-send state afterward so we don’t accidentally email you again; if you’d rather we delete the record entirely, just ask (see “Your rights” below).

You can also change which editions you receive yourself, any time, via the private manage link in every digest footer (or request that link at app.gleantree.com/manage) — no email to us required.

No advertising, no invasive analytics

There is no advertising anywhere in gleantree, and no ad trackers — no Google Analytics, no Facebook pixel, nothing of that kind. The one measurement tool we use is Plausible, a privacy-focused, cookieless analytics service on the marketing site (gleantree.com). It counts things in aggregate — how many people visited a page, which site referred them, which of our email campaigns a visit came from, and when someone reaches the subscribe or request-access page — with no cookies, no personal identifiers, and no tracking of you across other websites. It never receives your email address or anything else that identifies you personally; a “subscribed” count, for instance, records only that a signup happened, never who. The workbench (app.gleantree.com) runs no analytics at all.

The digest itself contains no tracking pixels. We record that an issue was sent to your address (so we can troubleshoot delivery), but we do not track whether you opened it or what you clicked, and links from the digest to our website carry only a campaign-level tag (which issue) — never anything that identifies you. If we ever add per-recipient engagement measurement, we will update this policy first.

Cookies

The workbench uses only the essential session cookies that Clerk sets to keep you signed in. There are no advertising, analytics, or cross-site tracking cookies anywhere — the marketing site’s Plausible analytics is deliberately cookieless — which is why you don’t see a cookie-consent banner. This marketing site at gleantree.com sets no cookies at all.

AI, and what it never sees

We use a large-language-model provider (Anthropic) to write the narrative summaries in the digest. The model is given public IRS Form 990 data about organizations — never your email address, your picks, or anything else about you. Subscriber data and the AI pipeline are entirely separate.

Who we share data with (and who we don’t)

We do not sell your personal data, and we do not share it with anyone for advertising or marketing. The only parties that touch it are the service providers we need to run the product, each receiving only what its job requires:

• Resend — delivers our email (your address and the digest content pass through it).
• Clerk — workbench sign-in (your account email and password).
• Vercel — hosts this site and the workbench (standard server logs).
• Neon — hosts our database (where your subscription record lives).
• Upstash — holds the short-lived signup rate-limit counters (email and IP, expiring within minutes).
• Plausible — cookieless, aggregate visit analytics on the marketing site; it receives page views and referrers but no personal identifiers, so it holds nothing that identifies you.

Beyond that, we would disclose data only if legally required to, or as part of a sale or reorganization of the business — in which case this policy would continue to apply to it.

Information from public records

gleantree’s product is built on public IRS Form 990 filings. Those filings sometimes name real people — officers, directors, and key employees of nonprofits, including their titles and compensation — and that information may appear in our digests and workbench because it appears in the public record. We do not collect it from those individuals and we are not its source; the filings are. If you believe we are presenting public-record information about you inaccurately, contact us at hello@gleantree.com and we will review it.

Retention

We keep your subscription data for as long as you’re subscribed. After you unsubscribe, we keep a minimal suppression record so we honor your opt-out. Rate-limit counters expire within minutes; server logs are retained briefly by our hosting provider. On request, we will delete everything we hold about you.

Your rights

Email hello@gleantree.com and we will honor any of the following, for anyone, regardless of where you live:

• Access — a copy of the data we hold about you.
• Correction — fix anything inaccurate.
• Deletion — remove your data entirely.
• Export — your data in a portable format (there isn’t much; see above).
• Opt-out — the unsubscribe link in every email, or just ask.

If you are a California or EU/EEA/UK resident, laws like the CCPA and GDPR may give you formal versions of these rights. We honor the substance of them for everyone as described above; if you wish to invoke a specific statutory right, contact us and we will work through it with you.

Security

Connections to our sites and database are encrypted in transit. The confirmation and unsubscribe tokens in our emails are random and non-guessable, so a link addressed to you can never affect anyone else’s subscription. Access to production systems is limited to the operator.

Children

gleantree is a professional research tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

When we change this policy, we will update the date at the top of this page, and for material changes we will tell digest subscribers by email before the change takes effect.

Questions? Bokinion Holdings LLC (operating as gleantree) · hello@gleantree.com · 3801 6th Ave South, Birmingham, AL 35222.