Donor Data Ownership: How to Make Sure Your Donors Move With You
Most nonprofit teams think they’re choosing fundraising software. Pages, forms, a donor database, maybe a built-in CRM.
What you’re actually choosing, whether anyone tells you or not, is financial infrastructure: the plumbing that decides whose bank account your donations land in, whose name shows on a donor’s credit card statement, and whether your monthly donors stay yours if you ever decide to leave.
I’ve spent more than 25 years working with small and midsize nonprofits, and there’s a pattern I’ve watched play out again and again. A team picks a platform for the features, runs happily for a few years, and then tries to switch, only to discover the donors they spent years building don’t easily come with them. The recurring gifts stop and each one has to be manually restarted.
The data they thought they owned turns out to be sitting somewhere they can’t reach.
I want to walk through what nonprofit donor data ownership really means, where most teams lose control without realizing it, and the questions that protect you (whatever platform you choose).
📬 Get fundraising strategies like this in your inbox. Join thousands of nonprofit pros getting practical, no-fluff fundraising guidance from our team. Subscribe to the newsletter.
A quick way to picture how online giving actually works for nonprofits
I’ve used the same analogy for years because it cuts through the jargon.
Online giving analogy
First, picture a physical store.
Your fundraising platform and donation forms are the store itself: the layout, the signage, what makes it easy to “shop” and give.
The payment gateway is the cash register: the terminal a donor swipes their card through.
The merchant account is the armored bank truck that rolls up, empties the register, and takes the money to your bank account, dropping it in.
When you “own your processing,” you own the register and you’re on a first-name basis with the truck driver.
When a platform owns those pieces for you, they decide when the truck comes, how much it leaves behind, and whether it shows up at all.
Most teams never think about the register or the truck… until the day they need to move stores.
You focus on your mission. We’ll handle the tech
Get an instant walk-through on how to run fundraising with ease.
What does it actually mean for your nonprofit to “own” your donor data?
“Donor data ownership” gets used a few different ways, so let’s separate the layers.
There’s a privacy and compliance layer. This is who’s legally allowed to touch donor records, how sensitive information is secured, and how you honor donor privacy. That’s real and important, and I’ll touch on it in the FAQ below.
Then there’s a CRM and database layer. That’s who controls the contact information, giving history, and donor profiles inside your donor management system. Most reputable platforms will let you export a spreadsheet of that if you need to move.
And then there’s the layer almost nobody talks about, the one that decides whether your fundraising survives a platform change behind the scenes: the payment layer.
This is where donor data ownership gets important… and a bit complicated. (Stick with me here!)
It breaks down into four parts:
The merchant account: The one that deposits the funds into your bank account. Is the account yours, or the platform’s?
The recurring donation card tokens: The secure stand-ins for your monthly donors’ card and bank details that let you keep charging them. Do those live in a payment gateway you control (i.e., the cash register in our above example), or are they trapped inside the platform?
Migration rights: If you leave, can you take your recurring donors with you without asking for anyone’s permission or help?
The processor relationship: Can you shop around for your own payment processor and rates, or are you stuck with whatever the platform bundles?
You can export a donor list from almost anywhere.
But exporting the ability to keep charging those donors next month is a completely different thing. That’s the part that gets lost if you switch platforms.
💡 Top takeaway: You probably own a copy of your donor data. The real question is whether you own the engine that keeps your recurring revenue running.
Why nonprofit donor data ownership isn’t just a tech question
When your fundraising platform is the merchant of record, instead of your nonprofit, donations don’t go straight to your organization’s bank account.
They flow into the platform’s account first, and the platform passes them along on its own schedule. In good times, you might never notice. The trouble is what happens when times aren’t good.
If the company holding your donations runs into financial trouble, your money can be delayed, held, or (in the worst case) lost. That’s very rare, but it’s not a hypothetical.
A fundraising platform called Flipcause collapsed owing more than $29 million in donations to over 3,200 organizations, most of them small nonprofits. In November 2025, the California Attorney General ordered the company to stop soliciting donations. In December, its payment processor, Stripe, blocked further payments and froze a $1.45 million reserve account. On December 19, 2025, Flipcause filed for Chapter 11 bankruptcy.
The nonprofits were listed as unsecured creditors… last in line to get paid.
The structural reason this happened is the part worth sitting with: Flipcause was the merchant of record. The donations sat in their account, not the nonprofits’. When the platform failed, the money was inside the failure. I dig into the full story and the wider lessons in a separate article — The Flipcause Story: What Every Nonprofit Can Learn From It — but for our purposes here, it’s the cleanest possible illustration of why the payment layer is financial infrastructure for your organization, not simply a fundraising software setting.
“
There is just better transparency for [our donors], so that they know and can trust that their gift is going where they want it to.
What happens when a nonprofit changes platforms (and why most don’t see it coming)?
Let’s make this concrete with a fictional example.
Say the Bruce Wayne Bat Sanctuary (or favorite fictional nonprofit organization around here) has spent four years building a monthly giving program: 325 recurring donors, steady, predictable revenue they can actually budget around.
They decide to switch to another platform as it’s better set up for their monthly giving program. Here’s what typically breaks in a migration when the payment layer isn’t theirs:
The charging of the card. The mechanism that quietly bills each donor every month stops working the moment the old platform is disconnected.
The recurring donor tokens. Those secure tokens (not the raw credit card information, but the keys to charging it) may be stuck with the old provider, who isn’t obligated to hand them over.
The statement descriptor. If the platform’s name was on the donor’s statement, the new setup looks unfamiliar, which drives confusion and chargebacks.
The gift schedule. The “charge $25 on the 15th of every month” instructions don’t automatically follow the donor to the new system.
When the tokens can’t move, the only fallback is asking 325 people to re-enter their card details. In practice, a big chunk of them never do. So without the right help, or doing a big communication campaign, the Bat Sanctuary doesn’t just change software, it also takes a hit to its recurring revenue… and has to run reactivation campaigns to win back donors it already had.
With 4aGoodCause, you own your donor data. Plus, our donation pages convert at 27% on average—more than double the industry benchmark—with nearly 100 best practices built in from day one. Book a demo to learn more.
How recurring donor migration actually works
Here’s the mechanical reality, because understanding it tells you which questions to ask when you’re deciding on a fundraising platform.
When recurring donor tokens can be moved, it’s a secure, business-to-business data transfer between the entity that holds the tokens and the new one. It’s often handled as an encrypted file (a token export, not a plain CSV file of card numbers) sent over a secure channel like SFTP, sometimes protected with a PGP key.
The card networks and processors have to cooperate. The nonprofit has very little direct control over that handoff.
The practical takeaway here: If your recurring donations live in a payment gateway you control, this transfer is feasible and your monthly donors keep giving without interruption. If they’re locked inside the platform’s system, you’re at the mercy of a vendor who may have no incentive to help you leave.
The Stripe question every nonprofit should understand
A lot of platforms run donations through something called Stripe Connect, and the type of Stripe account you end up with matters enormously for ownership of your nonprofit’s donor payment data.
Most teams have no idea which one they have. In plain English, there are three tiers:
Standard accounts (most portable). You own the Stripe account directly. You have full dashboard access, you manage your own payouts and disputes, and you can revoke a platform’s access yourself. If you leave, the account, and your recurring donors, stay with you.
Express accounts (limited portability). The fundraising platform controls more of the account. You get a lighter dashboard, the platform usually handles disputes and payout settings, and portability is restricted.
Custom accounts (least portable). The platform has near-total control. The account is nearly invisible to you… you may not even have a Stripe dashboard. These often can’t be moved at all.
Want a quick way to check?
If you log in directly at dashboard.stripe.com and see your own account, you’re likely on Standard.
If the only way you can reach Stripe is through your fundraising platform, you may be on Express or Custom (and you should ask).
This is exactly why the Flipcause situation turned out the way it did. When a platform owns the Stripe account, a decision by Stripe (like freezing funds) lands on the platform, and the nonprofits’ money is caught inside it. For what it’s worth, I think Stripe was probably right to freeze those funds in that specific case. The deeper issue is that nonprofits had no account of their own to fall back on.
For transparency: 4aGoodCause customers are on the Standard tier. You own the account. And I’ll come back to why we built 4aGC that way.
10 questions every nonprofit should ask before choosing a fundraising platform
To choose the right fundraising platform and nonprofit payment processor, you don’t need to become a payments expert.
But you need to ask direct questions and listen for whether the answers come back clear and confident. A platform that supports transparency and real ownership won’t hesitate.
Who owns the payment processing account? Is the account in your nonprofit’s name, or the platform’s? And do you have full gateway dashboard access?
Can we easily move our recurring donors if we leave? Can the recurring donor tokens be exported or transferred, and what happens to monthly gifts if you cancel?
Where are recurring donation tokens stored? In the payment gateway, or only inside the platform? Can the gateway keep processing without the platform?
Whose name appears on the donor’s credit card statement? The nonprofit organization’s name, or the platform’s? Can it be changed?
Can we choose our own payment processor? Can you use Stripe, Authorize.net, or another provider and bring an existing merchant account or shop for better rates?
Who controls payout timing? Who decides when funds are deposited, and can you see payout details directly?
What happens if the platform goes out of business? What’s the migration process, and will recurring donations keep running?
Can we get support from a real human? Phone, email, or chat… and is there someone to call when a payment issue hits?
Can we disconnect the platform ourselves? Can you revoke access on your own, or do you need the platform’s permission to leave?
Are there hidden platform fees inside processing? What part of the fee is the processor’s cost, what part is the platform’s margin? Can you see a full breakdown, including how donor tips are handled?
A good answer sounds like: you own the account, the recurring tokens live in the gateway, you can move to another platform on your own, the donor statement shows your name, support is easy to reach, and the fees are itemized.
If a platform dodges these or buries them in a contract, that’s your answer too.
🤝 See it in action. Want someone to walk through these 10 questions against your current setup? We do that free, no commitment. Visit book a demo and ask about a payment processing audit.
What we do differently at 4aGoodCause (and why)
I’ll keep this part honest and brief, because the questions above matter more than any one platform, including mine.
We built 4aGoodCause around the ownership principles I’ve described because I watched too many nonprofits get stuck.
Here’s how it works in practice:
We support both Authorize.net and Stripe, but you can also bring your own… so you have a real choice in processor, rates, and support.
Your recurring donor tokens live in the payment gateway (through Authorize.net’s Automated Recurring Billing or Stripe Billing), not inside 4aGC. If you ever leave us, your monthly donors keep processing without interruption.
You can bring your own processor, or use 4aGC Payments (our option, powered by Authorize.net and SwipeSum) at 2.65% + $0.30 per card transaction, plus monthly fees if you don’t already have a provider you prefer.
Either way, your nonprofit owns the account. Your name on the statement when your donors are billed.
One proof point I’m genuinely proud of: Because we let nonprofits bring their own processing, we’ve built relationships with a long list of payment providers who send organizations our way, including major banks and processors like:
Established financial institutions trust how we handle this. That tells you something about the model: It’s built so your organization stays in control, not so our software locks you in.
“
"4aGoodCause has been a game-changer for our organization. What really sets them apart is how flexible and customizable the platform is to your organization's specific fundraising, donor management, and campaign needs.
Cristina T.
Executive Director
A better experience for you and your donors
Strip away the mechanics and the point is simple: Whatever platform you choose, you should be the merchant of record, and you should own your donor data, including the recurring tokens that keep your monthly giving program alive.
Pick the platform that lets you do that.
Owning your processing isn’t only about protecting yourself from a worst-case Flipcause-like scenario. It’s about the day-to-day, too: Your name on your donors’ payment statement builds donor trust and cuts confusion, owning the relationship lets you shop for fair rates, and keeping your tokens portable means a platform change never costs you the donors you worked years to earn.
Your recurring givers are some of the most valuable relationships your organization has. And they deserve infrastructure that treats them that way.
If you take one thing from this today: Your fundraising software is a five-year decision, not a five-week one. Ask the important questions early, and make sure that whatever you choose, you own your processing.
Frequently asked questions about donor data ownership
These are some of the most common questions nonprofits ask about donor data ownership when it’s related to nonprofit payment processing. Let’s walk through them one by one.
Don’t see your question here? I’ve got 25+ years of experience in supporting nonprofits. Feel free to contact me!
Donor data ownership means something broader than information security. It means your nonprofit controls its donor information and the financial relationship behind it: the donor database and giving history, and just as importantly, the merchant account and the recurring donation tokens that let you keep charging monthly donors.
A fundraising software platform can let you export a donor list while still controlling the payment layer, so true ownership is about both the records and the engine that runs your recurring revenue.
Do nonprofits have to follow GDPR or CCPA?
It depends on whom you collect data from.
Nonprofits that handle personal data of residents in the EU may fall under the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) can apply to certain organizations handling California residents’ information.
Good data hygiene (like limiting access controls, using encryption, honoring communication preferences, and protecting against data breaches and phishing) is sound practice regardless of which rules apply to you. This article focuses on the portability side of ownership; for data compliance specifics depending on your state or location, consult counsel familiar with your situation.
If I switch fundraising platforms, can I take my recurring donors with me?
Sometimes. It depends entirely on where your recurring donation tokens are stored. If they live in a payment gateway your nonprofit owns, the recurring donations can usually keep processing through a secure transfer to a new provider.
If they’re locked inside the platform, you may have to ask donors to re-enroll, which causes churn. Ask question 2 and question 3 above before you sign anything. If you work with 4aGC as your fundraising platform, we’ll help you navigate this process from start to finish.
Who owns the Stripe account when I use a fundraising platform?
That depends on your Stripe Connect tier. With a Standard account, you own it and have full dashboard access.
With Express or Custom accounts, the platform controls more of it and portability is limited. If you can only reach Stripe through your fundraising platform, ask which tier you’re on.
What’s the difference between exporting my donor data and owning it?
Exporting gives you a snapshot: contact information, giving history, donor records you can download as a file.
Owning means you also control the live payment relationship: the merchant account funds flow into and the recurring tokens that keep monthly gifts running.
You can have the first without the second, which is exactly the gap that surprises teams during a migration.
Want a no-pressure payment processing audit?
If you’d like a second set of eyes on how your current platform handles all of this, we offer free payment processing audits. They require no commitment, and there’s no hard sell.
We’ll look at your setup, walk through the 10 questions with you, and give you an honest opinion, even if that means pointing you somewhere other than 4aGoodCause. Book a demo and let us know you’re interested in the audit.
Ronald Pruitt
Ronald is the President and Founder of 4aGoodCause, the fundraising CRM that makes recurring, monthly giving a breeze for small nonprofits.
For over 25 years, Ronald has had the joy of doing what he loves, building online solutions that make a difference in the world. He’s helped raise millions of dollars online for small nonprofits across the country. Connect with Ronald on LinkedIn.
Grow your monthly giving program with our resources
