Legal
Privacy Policy
What we collect, why we collect it, who we share it with, and how to get it back or removed.
Last updated:
Who we are
This policy applies to shoutamate.org and describes how Shout A Mate handles personal information. Shout A Mate is operated by Valliers Group from Australia and is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Operator details to be confirmed: the full registered entity name, ABN/ACN, and registered postal address for Valliers Group must be inserted here before this policy is relied upon.
Information we collect
When you create an account, we collect your name, email address, and password.
When you start a campaign, we collect your campaign story, funding goal, category, suburb and state, end date, and any photos you upload. Campaign content is published publicly, including your first and last name as the organiser.
When you donate, we collect the donation amount and your email address for the receipt. Card details are entered directly into Stripe and are never transmitted to or stored on our servers.
If you set up payouts, Stripe collects identity and bank account details directly to meet its verification obligations. We receive only the verification status and payout records, not your full bank or identity documents.
We also collect a campaign view count and standard server request logs (IP address, user agent, timestamps) generated by our host.
How we use it
To operate your account and campaigns; to process donations and issue receipts; to pay funds out to verified organisers; to review campaigns before they go live and investigate concerns reported under the Guarantee; to send transactional email; and to meet legal, tax, and anti-fraud obligations.
We do not sell personal information, and we do not use it for third-party advertising.
What is public
Campaign pages — including the title, story, photos, location, funding progress, and organiser name — are public and may be indexed by search engines.
Donor names appear on the public leaderboard only if you opt in. You can turn that off at any time from your dashboard, and donations can be made anonymously.
Who we share it with
We use the following service providers to run the platform:
| Provider | Purpose | Data location |
|---|---|---|
| Supabase | Database, authentication, and campaign photo storage | United States / EU regions |
| Stripe | Payment processing, identity verification, and payouts | United States, Australia |
| Resend | Transactional email delivery (receipts, updates, alerts) | United States |
| Vercel | Website hosting, edge delivery, and request logs | Global edge network |
Some of these providers store or process data outside Australia. We may also disclose information where required by law or to investigate suspected fraud.
Retention
Donation and payout records are retained for at least seven years to meet Australian tax and financial record-keeping requirements. Account and campaign data is retained while your account is open and for a reasonable period afterwards.
Your rights
You can request access to the personal information we hold about you, ask us to correct it, or ask us to delete it where we’re not required to keep it. Email support@shoutamate.org.
You can unsubscribe from non-essential email using the link in any message we send. Transactional messages such as donation receipts will still be sent.
If you’re not satisfied with how we handle a privacy complaint, you can escalate it to the Office of the Australian Information Commissioner at oaic.gov.au.
Security and data breaches
Access to personal information is restricted to what’s needed to operate the platform. Card details never reach our servers, and payout bank details are held by Stripe rather than by us.
If a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Children
The platform is not intended for people under 18, and you must be 18 or over to create an account, start a campaign, or receive a payout. If you believe a minor has given us personal information, contact us and we’ll remove it.
Cookies
We use cookies that are strictly necessary to keep you signed in and to maintain your session. We do not currently use advertising or third-party analytics cookies. If that changes, this policy will be updated first.