MissionAssistby Tomorrow Labs

Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains how Tomorrow Labs LLC (“Tomorrow Labs,” “MissionAssist,” “we,” “us,” or “our”) collects, uses, and protects information when you visit missionassist.digital or use our free tools, newsletter, and services (together, the “Services”). MissionAssist is a brand operated by Tomorrow Labs LLC, based in Portland, Oregon, USA.

We keep this simple on purpose: we collect as little as we can, we don’t sell your data, and we don’t run advertising trackers.

The short version

  • We collect your email (and optionally your name and organization) only when you choose to give it to us — for example, to unlock a full report, get your scorecard results, subscribe to our newsletter, or contact us.
  • When you use the Website Grader, the web address you enter is sent to Google’s PageSpeed Insights service to measure it.
  • We use a small number of trusted service providers to run the site, store submissions, and send email.
  • We don’t sell or rent your personal information, and we don’t use third-party advertising or cross-site tracking.
  • You can unsubscribe or ask us to delete your data at any time by emailing hello@missionassist.digital.

Information we collect

Information you give us

  • Contact and lead details. When you unlock a Website Grader report, request your Nonprofit Digital Readiness Scorecard results, subscribe to MissionAssist Monthly, book a call, or email us, we collect the information you provide — typically your email address and, if you share them, your name and organization.
  • Website addresses you submit. When you use the Website Grader, you provide the URL of the site you want graded.
  • Scorecard responses. If you complete the Scorecard, we collect your answers.
  • Messages. Any content you send us directly.

Information collected automatically

  • Basic technical data. Like most websites, our systems automatically receive your IP address, browser type, and request details. We use this to operate the site, prevent abuse, and enforce rate limits on our tools.
  • Privacy-friendly usage analytics. Our website platform (Ghost) provides aggregate, cookieless analytics about page views. It does not build advertising profiles or track you across other sites.

How we use your information

  • To run the tools you asked for — grade a site, produce your scorecard, and email you your report.
  • To send MissionAssist Monthly and other messages you signed up for. Every marketing email includes an unsubscribe link.
  • To respond to your questions and, if you ask, to talk about our paid services.
  • To keep the Services secure and reliable — including bot protection, rate limiting, and preventing misuse.
  • To comply with our legal obligations.

We do not use your information for automated decisions that produce legal or similarly significant effects, and we do not sell or share it for cross-context behavioral advertising.

Service providers we rely on

We use a small set of reputable providers (“subprocessors”) to deliver the Services. They process information only to perform services for us:

  • Ghost — website hosting, content, membership, and newsletter delivery.
  • Supabase — secure database and serverless functions that store form submissions and power our tools.
  • Resend — delivery of your report and transactional emails.
  • Google (PageSpeed Insights / Lighthouse) — when you grade a site, the web address you enter is sent to Google to measure performance, accessibility, and related signals. Google’s handling of that request is governed by the Google Privacy Policy.
  • Cloudflare (Turnstile) — protects our forms from bots and abuse. Turnstile runs invisibly and may collect limited technical data to tell humans from bots. See the Cloudflare Turnstile Privacy Addendum for details.

Cookies and similar technologies

We keep cookies to a minimum. We use only what’s necessary to make the site work — for example, a session cookie if you sign in as a member, and a short-lived token from Cloudflare Turnstile when you submit a protected form. We do not use advertising cookies or third-party cross-site trackers, and our analytics are cookieless. Because we don’t use non-essential tracking cookies, you won’t find a cookie-consent wall here.

How we share information

We share personal information only:

  • with the service providers listed above, to run the Services;
  • if required by law, or to protect the rights, safety, or property of Tomorrow Labs, our users, or the public; and
  • in connection with a business transfer (such as a merger or sale of assets), in which case we’ll require the recipient to honor this Policy.

We never sell your personal information.

How long we keep it

We keep contact and lead information for as long as needed to provide the Services and our newsletter, and to meet legal and record-keeping obligations. Website Grader results are cached only briefly (about 30 minutes) to save resources, and short-lived operational data (like rate-limit counters) is deleted automatically. You can ask us to delete your information at any time.

Your choices and rights

  • Unsubscribe. Use the link in any newsletter, or email us, and we’ll remove you.
  • Access, correction, deletion. Email hello@missionassist.digital and we’ll help you access, correct, or delete your information.

If you are in the EEA or UK (GDPR): our legal bases are your consent (for the newsletter), performing the service you requested (to deliver a report or scorecard), and our legitimate interests (to secure and improve the Services). You have rights to access, correct, delete, restrict, object, and port your data, and to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA): you have the right to know, delete, correct, and limit the use of your personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.

To exercise any right, email us — we may need to verify your identity before acting on a request.

Data security

We protect the Services with encryption in transit (HTTPS), access controls on our databases, bot protection, and rate limiting. No method of transmission or storage is perfectly secure, but we work to safeguard your information and to limit what we collect in the first place.

International visitors

We operate from the United States, and your information is processed here and by the providers listed above. By using the Services, you understand your information may be transferred to and processed in the United States and other countries where our providers operate.

Children’s privacy

The Services are intended for organizations and adults. They are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we’ll delete it.

Changes to this Policy

We may update this Policy from time to time. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll take reasonable steps to let you know.

Contact us

Questions about privacy or your data? Email hello@missionassist.digital.

Tomorrow Labs LLC · Portland, Oregon, USA · operating MissionAssist.