Legal

Privacy Policy

What we collect, why we collect it, who we share it with, and how to get it back or removed.

Last updated:

Who we are

This policy applies to shoutamate.org and describes how Shout A Mate handles personal information. Shout A Mate is operated by Valliers Group from Australia and is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Operator details to be confirmed: the full registered entity name, ABN/ACN, and registered postal address for Valliers Group must be inserted here before this policy is relied upon.

Information we collect

When you create an account, we collect your name, email address, and password.

When you start a campaign, we collect your campaign story, funding goal, category, suburb and state, end date, and any photos you upload. Campaign content is published publicly, including your first and last name as the organiser.

When you donate, we collect the donation amount and your email address for the receipt. Card details are entered directly into Stripe and are never transmitted to or stored on our servers.

If you set up payouts, Stripe collects identity and bank account details directly to meet its verification obligations. We receive only the verification status and payout records, not your full bank or identity documents.

We also collect a campaign view count and standard server request logs (IP address, user agent, timestamps) generated by our host.

How we use it

To operate your account and campaigns; to process donations and issue receipts; to pay funds out to verified organisers; to review campaigns before they go live and investigate concerns reported under the Guarantee; to send transactional email; and to meet legal, tax, and anti-fraud obligations.

We do not sell personal information, and we do not use it for third-party advertising.

What is public

Campaign pages — including the title, story, photos, location, funding progress, and organiser name — are public and may be indexed by search engines.

Donor names appear on the public leaderboard only if you opt in. You can turn that off at any time from your dashboard, and donations can be made anonymously.

Who we share it with

We use the following service providers to run the platform:

ProviderPurposeData location
SupabaseDatabase, authentication, and campaign photo storageUnited States / EU regions
StripePayment processing, identity verification, and payoutsUnited States, Australia
ResendTransactional email delivery (receipts, updates, alerts)United States
VercelWebsite hosting, edge delivery, and request logsGlobal edge network

Some of these providers store or process data outside Australia. We may also disclose information where required by law or to investigate suspected fraud.

Retention

Donation and payout records are retained for at least seven years to meet Australian tax and financial record-keeping requirements. Account and campaign data is retained while your account is open and for a reasonable period afterwards.

Your rights

You can request access to the personal information we hold about you, ask us to correct it, or ask us to delete it where we’re not required to keep it. Email support@shoutamate.org.

You can unsubscribe from non-essential email using the link in any message we send. Transactional messages such as donation receipts will still be sent.

If you’re not satisfied with how we handle a privacy complaint, you can escalate it to the Office of the Australian Information Commissioner at oaic.gov.au.

Security and data breaches

Access to personal information is restricted to what’s needed to operate the platform. Card details never reach our servers, and payout bank details are held by Stripe rather than by us.

If a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Children

The platform is not intended for people under 18, and you must be 18 or over to create an account, start a campaign, or receive a payout. If you believe a minor has given us personal information, contact us and we’ll remove it.

Cookies

We use cookies that are strictly necessary to keep you signed in and to maintain your session. We do not currently use advertising or third-party analytics cookies. If that changes, this policy will be updated first.