Privacy Policy

1. Who we are

The Kes Foundation, Inc. ("The Kes Foundation," "we," "us," or "our") is a United States nonprofit organization supporting autistic children, children with disabilities, and their families. This policy applies to thekesfoundation.org, our forms and email communications, and our internal LinkedIn publishing integration (collectively, the "Services").

Questions or privacy requests may be sent to kesfoundation@agentmail.to or made by calling (254) 374-5614.

2. Information we collect

Information you provide

• Contact information, such as your name, email address, telephone number, organization, and communication preferences.
• Information submitted through contact, volunteer, newsletter, program-interest, employment, grant, or family-support forms.
• Messages, documents, and other information you choose to share with us.
• Donation information processed by our fundraising provider. We do not receive or store complete payment-card numbers.

Information from LinkedIn

Our LinkedIn integration is used by authorized administrators to publish approved content to The Kes Foundation's LinkedIn organization page and review the performance of that content. Depending on the permissions approved through LinkedIn, the integration may receive:

• Basic account information used during authorization, such as a LinkedIn member identifier, name, and profile information.
• The identifiers and names of LinkedIn organization pages for which the connected member is an authorized administrator.
• OAuth access and refresh tokens that allow the integration to act within the permissions the administrator approved.
• Content and media selected for publication, post identifiers, publication status, and scheduling information.
• Organization-page post analytics, which may include impressions, clicks, reactions, comments, and shares.

We do not request LinkedIn passwords. LinkedIn handles sign-in and presents the permissions requested before authorization.

Information collected automatically

Our website and systems may collect limited technical information such as IP address, browser type, device information, referring page, pages visited, timestamps, error records, and security logs. Optional website analytics are activated only in accordance with the choices presented through our consent tools.

3. How we use information

We use information to:

• Provide, maintain, secure, and improve the Services.
• Respond to inquiries and administer newsletter, volunteer, employment, program, and family-support communications.
• Authenticate an authorized LinkedIn administrator and identify the organization page the administrator is permitted to manage.
• Prepare, schedule, publish, and maintain approved posts on The Kes Foundation's LinkedIn page.
• Retrieve post-level analytics and evaluate how our public-interest content performs.
• Prevent fraud, investigate errors, maintain audit records, and comply with legal obligations.
• Protect the rights, safety, and integrity of families, visitors, our organization, LinkedIn members, and others.

We do not use LinkedIn data for targeted advertising, sell it, rent it, or use it to train a general-purpose artificial-intelligence model.

4. When we disclose information

We may disclose information only as reasonably necessary:

• To LinkedIn when an authorized administrator directs the integration to authenticate, upload media, publish a post, or retrieve analytics.
• To service providers that host our website and application, store data and media, deliver email, provide security, process donations, or support approved content operations. These providers may use information only to perform services for us and are subject to appropriate confidentiality and data-protection obligations.
• To professional advisers, auditors, insurers, or regulators when necessary.
• When required by law, legal process, or a valid government request.
• To protect legal rights, investigate misuse, or address an emergency involving safety.
• As part of a lawful organizational restructuring, provided the recipient continues to protect the information under this policy.

We do not sell personal information or share it for cross-context behavioral advertising.

5. LinkedIn authorization, control, and deletion

The LinkedIn integration acts only after an authorized administrator grants permission through LinkedIn's OAuth process. The administrator can decline authorization or revoke access later through LinkedIn's settings. Revocation prevents future API access but may not delete information already retained in our systems.

To disconnect the integration and request deletion of LinkedIn-derived personal information, email kesfoundation@agentmail.to with the subject "LinkedIn data deletion request." Please identify the connected organization page and the email address used to contact us. We may take reasonable steps to verify the request.

Once a verified deletion request is completed, we delete or de-identify the applicable OAuth tokens, connected-account identifiers, and other LinkedIn-derived personal information unless retention is required for security, legal compliance, fraud prevention, or the establishment or defense of legal claims. We will respond to verified requests within the period required by applicable law and generally aim to complete operational deletion within 30 days.

6. Data retention

We keep information only for as long as needed for the purposes described in this policy. LinkedIn access and refresh tokens are retained while the integration remains connected and are deleted or rendered unusable after disconnection or a verified deletion request, subject to limited backup and legal-retention periods. Published-content records and analytics may be retained to maintain the organization's records and evaluate program communications. Security and diagnostic logs are generally retained for a limited period appropriate to their purpose.

Information submitted for nonprofit programs, donations, tax reporting, employment, grants, or legal compliance may be retained for longer periods required by law or legitimate organizational recordkeeping needs.

7. Security

We use administrative, technical, and physical safeguards designed to protect information. LinkedIn OAuth tokens are stored in encrypted form, access is limited to authorized systems and personnel, and credentials are transmitted using encrypted connections. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

If we learn of a breach affecting LinkedIn members or other individuals, we will investigate, take reasonable corrective action, and provide notices required by law and applicable platform obligations.

8. Children and family information

Our mission concerns children, but our website and LinkedIn integration are intended for adults and are not directed to children under 13. We do not knowingly collect personal information online directly from a child under 13 without legally valid parental consent. Parents and caregivers should avoid submitting unnecessary identifying, medical, educational, or other sensitive information about a child through general contact or newsletter forms.

9. Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an explanation of how we process your personal information. You may also withdraw consent where processing is based on consent and opt out of nonessential email by using the unsubscribe link in a message.

Submit a request to kesfoundation@agentmail.to. We may verify your identity and may deny or limit a request when permitted by law. You may use an authorized agent where applicable, subject to verification of the agent's authority.

10. International processing

We are based in the United States, and information may be processed in the United States or other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers of personal information.

11. Third-party services

Our website may link to LinkedIn, donation processors, or other third-party services. Their privacy practices are governed by their own policies. LinkedIn data is also subject to LinkedIn's agreements and privacy policy. This policy does not control independent third-party websites or services.

12. Terms for the LinkedIn integration

The LinkedIn integration is provided for authorized use on an "as available" basis. Users must have authority to administer the connected organization page, may authorize only accounts they are permitted to manage, and remain responsible for reviewing content before it is published. Users may not use the integration to impersonate another person, violate intellectual-property or privacy rights, distribute unlawful content, evade LinkedIn limits, or otherwise violate LinkedIn's terms or applicable law.

We may suspend or terminate access to protect users, LinkedIn members, our systems, or the public; address misuse; or comply with law or platform requirements. To the extent permitted by law, The Kes Foundation is not liable for indirect or consequential losses arising from unavailable third-party services, rejected posts, platform changes, or unauthorized use outside our reasonable control.

13. Changes to this policy

We may update this policy when our practices, legal obligations, or platform requirements change. We will post the revised policy at this URL and update the effective date. If a change materially affects how previously collected information is used, we will provide additional notice or request consent when required.

14. Contact us

The Kes Foundation, Inc.
Maryland, United States
kesfoundation@agentmail.to
(254) 374-5614