Back to sign in

Privacy and Data Use Policy

Effective September 1, 2026.

White River Strategy LLC ("WRS," "we," "us") runs this portal for participants in our AI training and advisory programs. This page explains what the Portal collects, how we handle it, how we use survey responses in research and public reporting, and the choices you have. Our approach is simple: we collect only what the program needs, we do not sell your data, we do not track you around the web, and anything we publish about the sector is aggregated and de-identified, unless you've given us specific permission to identify you or your organization by name.

What we collect, and why

We do not collect payment information in the Portal, and we do not ask for sensitive personal information.

How we use it

First, we use the content you enter and the answers you submit to create the reports, opportunity maps, and other deliverables we build for you, and to support you during your program. We could not produce those for you without this content. We also use this information to operate and improve the Portal and our engagements. And we use it to understand how organizations in the social sector are adopting and governing AI, which includes producing research and a publicly published report and readiness benchmark. Published research uses your data only in de-identified and aggregated form, except where you have given the specific additional permissions described under Research and publication below.

Who can see what you write

Most of the content you type, such as your notes and individual survey responses, is tied to your own account and other participants cannot see it. A few program exercises, such as the Opportunity Map, are collaborative and shared with your organization's team as part of the work, though never with people outside your organization. WRS staff can access your content when needed to run the program, provide support, or prepare your reports, and for no other purpose. We do not sell it, rent it, or share it for advertising.

Providers who help us run the Portal

We use a small number of trusted providers, each limited to its job:

None of these providers may use your data for their own purposes.

AI features

Some reports, such as the Snapshot Report and the Opportunity Map, send the open-ended answers you submit to an AI model through Vercel AI Gateway to produce a written summary. The gateway does not retain your data after the request, and your responses are not used to train the AI provider's models. These summaries are drafts meant to support your work, so review them before relying on them.

Research and publication, and your consent choices

WRS publishes research to help the social sector, including a report and a readiness benchmark. Anything we publish is aggregated across many organizations and de-identified, so that no individual or organization can be recognized. We ask for your consent for this use when you sign in, covering your past and future survey responses, and offer three choices: quote you or your organization by name, use your responses only in anonymized, aggregate form with no name or organization attached, or not use your responses in social sector reporting at all. You may choose whichever option is right for you and still participate fully in the program, and you may change your choice later by contacting us, though we cannot recall material already published.

How we de-identify data

Before responses are used in reporting, we remove or generalize personal and organizational identifiers, including names, organization names, email addresses, and web addresses, across both structured answers and open text. This is done through a combination of automated redaction and human review to reduce the risk that anyone could be recognized from context.

How we share it

We do not sell your information and we do not share it for advertising. Published outputs are aggregated and de-identified. We will only publish a direct quotation if you have opted in to anonymous quotation, and we will only name you or your organization if you or your organization has separately given permission. We may share information with the service providers above under contracts that limit them to their task, and we may disclose information where required by law.

How long we keep it

We keep your account and the content you enter for as long as you have access to the Portal, and we do not delete it on a fixed schedule. Access usually continues after your program ends so you can revisit your work. If your access does end, we hold this data for at least six months afterward so you can retrieve it. You or your organization may ask us to delete or de-identify your information, and we will honor that request. De-identified and aggregated data, which cannot reasonably be linked back to you, may be kept indefinitely so that year-over-year benchmarks remain possible.

Security, cookies, and where data lives

We protect data with encryption in transit, access controls, and login limited to an approved list of participants. We use cookies to keep you signed in, and no advertising cookies or third-party trackers. The Portal and its data are hosted in the United States. No system is perfectly secure, but we work to keep the Portal safe and to fix issues quickly.

Your rights

You may ask us to show you the data we hold about you, correct it, delete it, send you a copy, or withdraw a consent you previously gave. Residents of Colorado and certain other jurisdictions may have additional rights under applicable privacy law. To exercise any of these, contact hello@whiteriverstrategy.com, and we will respond as required by law.

Children, changes, and contact

The Portal is intended for adults acting in a professional capacity and is not directed to anyone under 18. We may update this policy and will post material changes with an updated effective date. For any question about your data or this policy, contact hello@whiteriverstrategy.com.

See also our Terms of Service.