Privacy overview / WordPress plugins
DigixData In-Kind Ledger privacy and data
Publisher: DigixData. Applies to Free version 0.1.1. Effective date: 2026-10-27.
Data held by the organization
This plugin runs on the WordPress site where it is installed. Administrators enter organization name/address, donor name, optional donor email/address, date received, donated-item descriptions and acknowledgment wording. One plugin-owned table in the organization’s WordPress database stores these immutable entry details, submission keys, entry IDs, creation times and any void reason/time/administrator user ID. A retained schema version and uninstall setting are stored in WordPress options. The plugin does not assign a value to gifts or collect payments.
Access, documents and transfers
Plugin pages, letters and CSV downloads require the site's administrator capability and protected requests. Letters are prepared as authenticated HTML for the browser's Print / Save as PDF function. CSV is prepared in a private temporary stream before download, not placed in the Media Library or a public directory. The plugin creates no public document files and sends no email, external HTTP requests, analytics or telemetry. It has no payment provider or external account. The organization's WordPress host can separately process requests, logs, backups and updates. Downloading, printing, saving or sharing documents creates copies under the organization's control.
Retention, corrections and privacy requests
Entries are retained until erased through the donor-email privacy workflow or removed by an administrator's opted-in uninstall. Saved details cannot be edited: an administrator can void a mistake with a reason and create a replacement. Voiding retains the original details; it is not erasure. WordPress's personal-data export and erasure tools match the donor email supplied with an entry. Entries without an email cannot be matched by that email-based tool; contact the site operator for appropriate handling of those records. DigixData cannot access, retrieve or erase the organization's local database. This is not a tamper-proof or cryptographic audit system.
Deactivation and uninstall
Deactivation retains records. Uninstall retains the plugin table and settings by default. An administrator can explicitly enable deletion of all ledger data on uninstall; export and secure records first. Native WordPress content, users and unrelated jobs are not removed. Previously exported/printed documents and host backups may remain under the organization's practices. This release has no scheduled jobs. The ledger supports single-site WordPress; on multisite activation completes quietly in a paused state without a ledger table or workflow routes.
Use and licensing
The organization reviews its own acknowledgment wording and requirements. The plugin does not provide tax advice, verify deductibility or promise legally sufficient receipts. Printing a letter does not prove it was sent or delivered. Free version 0.1.1 is licensed under GPLv2 or later as included in its package. It has no premium edition, checkout or license service. Website copyright restrictions do not limit the rights granted by that software license.
Support
For requests about a site's donor data, contact its operator. For product/privacy questions or private security reports, contact support@digixdata.com. Share versions and synthetic reproduction steps; do not send donor details, letters, database dumps, credentials or unredacted CSV. Public support messages are visible to others. The privacy overview describes legal-site visits and support contact separately.