Privacy, terms
and security

For foundation staff: name, work email, role and sign-in activity. For organizations: the answers they give, their contact details and what they choose to do next.

To run the assessment, show results, route requests to the right person and send the emails you’ve set up. We also use activity data to keep accounts secure.

Organizations’ answers go only to the foundation they chose. Plero staff can see a workspace only when an admin grants support access, and that access is logged.

We use a small number of providers for hosting, email and payments. They can only use data to provide their service to us.

Foundations choose how long to keep responses, from 12 to 36 months. Sign-in records are kept for 12 months.

Organizations can ask the foundation to see, correct or delete their answers. Marketing emails are always optional and you can unsubscribe in one click.

Data is encrypted in transit and at rest. Everyone who can see organizations’ answers signs in with two-step verification.

Privacy questions: privacy@plero.com

EndowPath lets foundations run a readiness assessment, review the results and follow up with organizations. You can use it for your foundation’s work and nothing else.

Keep your password and two-step codes private. You’re responsible for what happens under your account. Tell us right away if you think someone else has used it.

Your foundation owns the answers, notes and files in its workspace. We only use them to run the service for you. You can export everything at any time.

Organizations agree to share their answers with your foundation before they see results. Only use those answers to help that organization. Don’t sell them or use them for unrelated marketing.

Scores, bands and projections are for planning conversations. They are not investment, legal or tax advice, and they don’t approve or turn down any organization.

Plans are billed monthly. If a payment fails, we’ll tell you and keep things running for 30 days. After that the workspace becomes read-only until it’s paid.

You can cancel any time from Billing. Your workspace stays read-only for 30 days so you can export, then data is deleted under your retention setting.

If we change these terms in a way that matters, we’ll email admins at least 30 days before the change takes effect.

Questions about these terms: legal@plero.com

Everyone who can see an organization’s answers signs in with two-step verification. Sessions time out after inactivity.

Data is encrypted in transit and at rest. Each foundation’s data is kept separate, and people only see what their role allows.

Plero staff can only open a foundation’s workspace when its admin approves, for a set time and read-only. Every session is logged for both sides.

EndowPath reads when advisors are free or busy and creates the meetings it books. It doesn’t read the details of other events.

If you think you’ve found a security issue, email security@plero.com. We reply within one business day.