Donor portal

A single account can be linked to multiple organizations (one donor record per tenant). The portal aggregates across all of them, with a per-organization filter and a tax-year dropdown. Lifetime totals reflect only succeeded contributions.

Donors filter their history by tax year. The picker auto- populates from their actual giving history — no empty years to scroll through.

Per-donation actions to re-send the original receipt to the donor's email or download the HTML directly. Rate-limited per donor.

Donors see "completed" / "refunded" / "processing", not raw status codes. Abandoned-checkout rows are hidden so donors don't panic about money they didn't owe.

Active recurring donations listed with next-charge date, default card, and a one-click cancel. Donors don't have to email your campaign to stop a monthly gift.

Donors can increase or decrease their monthly amount within the page's configured min/max. Stripe updates the subscription price; the next charge uses the new amount.

Stripe's smart retries plus webhook-driven status updates mean a temporary decline (insufficient funds, expired card) doesn't silently kill a recurring donor — they get a chance to update their card.

Per-tenant Stripe customer with attached cards. Donors can see brand + last4 + expiry, and remove a card they no longer want stored. New cards saved automatically when the donor opts in on the donate page.

From the admin donor list, generate signed, single-use URLs — for a specific donor or in bulk as a CSV for mass-email mail merge. The donor clicks from an outreach email and sees a confirmation with their saved card — one tap to give, no form. Links are single-use, expire automatically, and every charge requires that explicit tap, so email security scanners can never trigger a donation.

Admins who are also donors get a one-click "Switch to admin" / "Switch to donor view" pill. Same auth session, no re-login. Useful for testing flows or for admins who genuinely also donate.