Privacy

You can use the map without giving us anything. Here's what we keep when you do.

The weekly jobs note

If you sign up, we keep your email and the choices you made: focus, places, level, and the lowest pay you'll take, if you give one. We use them to send the note and nothing else. We don't sell or share them. Every email has a link to unsubscribe.

If you also have a profile with the same email, it fills in choices you left empty: the kinds of work and the level from your profile. Your note's own choices always win. Places and pay only come from the note.

If you tell us you got a job, jobs in your note pause for 90 days. Board seats still come if you asked for them. You can turn jobs back on early from your account.

If an email to you bounces, or you mark one as spam, our email provider tells us. We stop sending you the note and keep a record of when.

Your profile

Your profile is private until you choose otherwise. You can share it by private link, or make it public. Even a public profile stays out of search engines unless you turn that on. A shared profile shows only what you wrote for it and the stories and verified work you chose to show. It can only be opened one profile at a time, by its address. Nobody can pull a list of profiles from us. Whether you got a job stays private.

If you change your name, your profile gets a new address. Old addresses keep working and send people to the new one, with the same rules. A profile shared by link still needs the link. You can stop an old address on your profile page, and then it opens nothing.

If your last job ended after a layoff or a funding cut, you can turn on one line that says so. It's off unless you turn it on, and you can turn it off any time.

If you use the profile conversation, your answers are sent to an AI model through OpenRouter to write a draft. We keep the conversation so you can come back to it. We don't use it for anything else.

You can delete your profile any time. That deletes your witness stories and asks, your verified work, your profile conversations, and your tailored drafts with it.

Witness stories

When you ask someone for a story, we email them once on your behalf. They can say no, and we won't ask again. You see every story first. Nothing shows on your profile unless you choose to show it. If you show it, the witness's name and how they know you appear with it. We tell them that before they write. When a story comes in, we email you that it arrived, without the story. We email the witness a copy of what they wrote, for their records, with a link to remove their story any time. Removing it deletes it, takes it off your profile, and we won't ask them again. A quick automated check looks for private details, like health or family, and gives you a heads-up. It never hides or blocks a story. If you tell us you got a job, we thank the witnesses whose stories you show.

Answers from staff about their org

An org can ask its staff to describe what it's like to work there. We email each person once. They can say no. The org sees their name and answer. The public page shows their name only if they choose. The org picks which answers to show, can hide or delete them, and can't edit them. After answering, staff get a private link that removes their answer any time. Removing it deletes it.

Executive director searches

A board running a search can ask staff and others what they think, and ask references about candidates. Only the search committee reads the answers. We delete the answers 180 days after the search ends, along with each reference's email and how they know the candidate. Names become initials. We keep how many people answered and when.

Verified work from VSM and NBM

Volunteer Shift Manager and Nonprofit Board Manager are made by the same team. If you use them, you can add your confirmed volunteer hours or board service to your profile here. You start it there and confirm it here. We get only the record you add: the organization, your role or hours, and the dates. It stays hidden until you show it. You can delete it anytime. Those products also tell us which organizations pay for them, so their hiring teams get the right plan here.

Open to board service and work

On your profile you can say you're open to board service, to work, or both. Both are off until you turn them on. Only nonprofits whose EIN we checked against IRS records can see them. Search engines never do.

Before you answer an org, it sees a card: your headline, where you're based, the details you chose, and how many witness stories and verified records you show. It sees your name and a profile link only if you turn that on. It never sees your email or photo at this stage.

When an org reaches out, we email you and you answer in your account. If you press Interested, that org sees your name, your email, and your profile, including stories and verified work you show, even if your profile is private. If you press No thanks, we tell them kindly and they learn nothing more. If you don't answer in 30 days, we close it and tell them kindly. We remind you once, a week in. Orgs filter only on what you told us. No AI picks, ranks, or screens anyone.

You can take back your interest any time before the org closes the loop. Blocking an org takes it back too. They keep the email you already shared. They can't see your profile or contact you here. A listing only shows once your profile has a name you chose.

Your listing lasts 90 days. We email you a week before it ends, and you can press Keep me listed. You can pick orgs already here that never see you, like your current employer. You can also save an org's name or your work email's domain. If an org with that name or website joins, changes its details, or gets verified, it never sees you either. Only you see what you saved. You can block any org that reaches out. A blocked org can't find you or reach you, and isn't told. Orgs keep a log of their own searches: who searched, the filters, and how many people came back, never who.

Applying for a job here

When you apply for a job posted with Nonprofit Roles, the hiring team sees what you sent. Nobody else does. If you upload a resume, it's stored privately. The hiring team opens it through our site, after we check they're on the team. We email you a copy, and you'll hear back from them either way. If you didn't apply, the copy has an “I didn't apply” link. If you sign in with the same email, your account page lists your applications and the replies you got. It shows the kind of reply, the date, and what they wrote, and the date the team said you'd hear back. You can withdraw an application there until the team decides. The team sees that you withdrew. We don't email anyone about it. You can also ask the team to delete an application. We email the team's contact for you, with the job and your email.

When someone presses “I didn't apply,” we mark the application disputed. We don't delete it. The team sees that the email's owner says they didn't apply. It leaves the team's active list, counts, and reminders, and the team can't send interview times to it. Our admins see the name and email on it, the job, the org, and the dates, to spot someone misusing other people's emails. The application is then deleted on the same schedule as any other. If you want it gone sooner, sign in with the same email and ask the team on your account page, or email us.

If the team offers interview times, the email has a private link where you pick one or say none work. When you pick, you and the person who sent the times get a calendar file. If none work, you can add a short note. The team gets it by email and sees it on your application. The page with the times and its calendar file open for anyone with the link, without signing in. They show the job, the org, your first name, and the times. Don't forward the link.

Each org keeps applications for 12, 24, or 36 months after a job closes. The default is 24. After that we delete your resume file and clear your answers, pasted resume, the team's notes and scores, AI summaries, and what replies said. We keep your name, email, status, dates, and which kinds of replies you got, so the org's reply record stays honest.

A hiring team can ask for an AI summary of your application. It only checks your answers against what they posted. We remove your contact details, dates, and pronouns first, and the model is told never to consider your name, age, background, or any other protected trait. It never scores, ranks, or rejects anyone. A person decides.

Optional fairness questions

After you apply for a job here, we may ask about your gender, race or ethnicity, disability, veteran status, and whether you're 40 or older. It's optional, and skipping changes nothing. The hiring team never sees your answers, and they never go to any AI. We keep them apart from your application and only look at totals across many applicants, hiding any group under 10 people, to check that people move forward at similar rates. Each org can see the same totals for its own closed jobs once 30 applicants answered, with the same small groups hidden. They're deleted when your application is deleted.

When you get a final reply, it may end with two optional questions about how the hiring team did. Your answers are combined with others. The org sees totals in groups of five, never yours alone, and comments with no names or dates. Comments show in batches of five, so a new one can't be matched to the reply that was just sent. Once you answer, your answers aren't linked to your application anymore.

How we use AI

Every AI call goes through OpenRouter. We don't let it judge people. It suggests, and a person decides. Here is each use:

• Speaking your answers. In the profile and job post conversations, you can press Speak instead of typing. Your browser turns your speech into text: Safari through Apple, Chrome and Edge through Google. We get only the text you send, never the sound.
• The profile conversation. Your answers go to a writing model, which drafts your profile. Only you see the conversation and the draft. If you saved a resume, part of it goes along, so the questions skip what it already says.
• Saved resumes. A PDF you upload, including LinkedIn's PDF of your profile, goes through OpenRouter to a small writing model, which turns it into text. Word and text files are read on our server. We keep the text and never the file. Only you can see it. When you ask for a draft, the text goes to a writing model, which drafts your profile. When you apply with one, the hiring team gets a PDF made from it and the text.
• Tailored drafts. The job post, the background you paste, your whole profile, and the witness stories you show go to a writing model, which drafts resume points and a cover note. Only you see them.
• The story check. A new witness story goes to a small decision model, which answers two yes or no questions: does it mention private matters, and does it look like hostile text or spam instead of a story about work. Only you see the answer.
• The weekly note. Your note's choices, like kinds of work, places, and level, go to a small decision model with the postings that fit, to put them in order. Never your email or your name.
• Application summaries, if a hiring team asks for one. See “Applying for a job here” above.
• Kind reply drafts. After an interview, a hiring team can ask for help writing a reply. Their interview notes go to a writing model, with your name and contact details taken out. A person on the team edits the draft and decides whether to send it.
• Executive director searches. Answers from staff and others to the board's listening questions go to a writing model, which drafts themes for the search committee. The committee reads every answer too. We tell people this on the form.
• Resource suggestions. What someone suggests, a name, a link, and a note, goes to a small decision model that hints to our reviewer what kind of resource it is. A person decides what gets listed.
• The job post chat, for hiring teams. What the person hiring types about the job goes to a writing model, which asks follow-up questions and drafts the post. Their team can see the conversation. It never includes applicants.

Reporting a job

If you report a job, we keep the reason and the details you write. Your email is optional. We only use it to ask a follow-up question.

Saved jobs and resources

If you save a job or a place to look, we keep the link with your account. Only you can see your list. Nobody else, including the org that posted the job, knows you saved it. When a job you saved closes, we send you one short email saying so. You can turn that off on your account page.

Featured listings

Search firms, coaches, and job fairies can pay for a featured listing. We keep what they write for it: a name, what they do, their focus, where they work, who they serve, a pricing note, and a link. Those show publicly once a person approves the listing. We keep the review note and whether it's paid. Stripe handles the payment. We keep the Stripe customer and subscription ids, never card details.

Suggestions

If you suggest a resource, we keep what you wrote. Your email is optional. We only use it to follow up or to credit you if you ask.

Analytics

We count page views to see what's useful. We use Vercel Web Analytics, which doesn't use cookies or track you across sites.

We also count a few actions, with no name, email, or text attached: copying a list's or a profile's link, clicking out to a resource, and sending an application. Links in the weekly note go through our site first, so we can count clicks. We don't track whether you open the email.

When something breaks, on our side or in your browser, we log the error and the page it happened on, with your browser type and whether you were signed in. The log leaves out your name, email, IP address, what you typed, your cookies, anything after a "?" in the address, and the codes in private links. We keep it for up to 90 days after the problem is fixed.

Email settings

Your account page has one place for email settings. You can turn off emails when an org reaches out, the reminder before your Open to listing ends, the email when a saved job closes, and the hiring emails if you're on a hiring team. Reminder emails also have a link to stop them. It links to your weekly jobs note choices. Emails you need to act on, like sign-in links and replies to your applications, always come. To change your sign-in email, email us and we'll change it.

Download or delete your data

If you have an account, your account page has a button to download your data as one file. It has your account, your profile and its old addresses, the stories people wrote you and the story checks, your verified work, your applications with what you sent and the replies you got, your weekly note choices, your email settings, your saved items, your drafts, your Open to choices, the orgs you hide from and the names and domains you saved, the reach-outs orgs sent you, the orgs you blocked, any curator lists you keep, and your featured listing if you have one.

You can also delete your account there. You type a short phrase to confirm. We delete your account, your profile and its stories and verified work, your profile conversations and drafts, your saved items, your weekly note, your email settings, your Open to listing, reach-outs orgs sent you, and your blocks. Before that, an org still waiting on your answer gets a kind no thanks, and an org you said Interested to hears you took it back. You can also delete your profile conversations on their own. Applications you sent stay with the orgs you sent them to, including any resume you uploaded, since they are the hiring team's records. Withdraw from a search first if you want out of it, and write to the org if you want them to delete your application.

For anything else, email hello@nonprofitroles.org and we'll delete what we have.