Aggregate website data only, zero personal information on the public views. The whole dashboard sits behind a password, and donor contact details are loaded only after you sign in.