Legal
Privacy Policy
What we collect, why we collect it, who we share it with, and how to get it back or removed.
Last updated:
Who we are
This policy applies to shoutamate.org and describes how Shout A Mate handles personal information. Shout A Mate is operated by Valliers Group from Australia and is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Valliers Group is an Australian company (ABN 71 697 537 741). For privacy questions, access or correction requests, or a privacy complaint, contact support@shoutamate.org.
Information we collect
When you create an account, we collect your name, email address, and password.
When you start a campaign, we collect your campaign story, funding goal, category, suburb and state, end date, and any photos you upload. Campaign content is published publicly, including your first and last name as the organiser.
When you donate, we collect the donation amount and your email address for the receipt. Card details are entered directly into Stripe and are never transmitted to or stored on our servers.
If you set up payouts, Stripe collects identity and bank account details directly to meet its verification obligations. We receive only the verification status and payout records, not your full bank or identity documents.
We also collect a campaign view count and standard server request logs (IP address, user agent, timestamps) generated by our host.
How we use it
To operate your account and campaigns; to process donations and issue receipts; to pay funds out to verified organisers; to review campaigns before they go live and investigate concerns reported under the Guarantee; to send transactional email; and to meet legal, tax, and anti-fraud obligations.
We do not sell personal information, and we do not use it for third-party advertising.
What is public
Campaign pages — including the title, story, photos, location, funding progress, and organiser name — are public and may be indexed by search engines.
Donor names appear on the public leaderboard only if you opt in. You can turn that off at any time from your dashboard, and donations can be made anonymously.
Who we share it with
We use the following service providers to run the platform:
| Provider | Purpose | Data location |
|---|---|---|
| Supabase | Database, authentication, and campaign photo storage | Japan (ap-northeast-1); provider based in the United States |
| Stripe | Payment processing, identity verification, and payouts | United States and India; provider based in the United States |
| Resend | Transactional email delivery (receipts, updates, alerts) | Japan (ap-northeast-1); provider based in the United States |
| Vercel | Website hosting, page rendering, and request logs | United States (us-east-1); provider based in the United States |
None of these providers is located in Australia, so all of them involve disclosing information overseas. Your account, campaign, and photo data is stored in Japan, and transactional email is sent through infrastructure in Japan. Our website itself runs in the United States: pages are rendered there, which means the information in a page you load or a form you submit is processed there, and server request logs are generated there. Payment and identity information is handled by Stripe, which transfers data to the United States and India. Stripe’s Australian services are provided by Stripe Payments Australia Pty Ltd, but that is the entity we contract with rather than where the data is held. Every one of these providers is a United States–based company, so their personnel may be able to access data regardless of the region it is stored in. We may also disclose information where required by law or to investigate suspected fraud.
Retention
Donation and payout records are retained for at least seven years to meet Australian tax and financial record-keeping requirements. Account and campaign data is retained while your account is open and for a reasonable period afterwards.
Your rights
You can request access to the personal information we hold about you, ask us to correct it, or ask us to delete it where we’re not required to keep it. Email support@shoutamate.org.
You can unsubscribe from non-essential email using the link in any message we send. Transactional messages such as donation receipts will still be sent.
If you’re not satisfied with how we handle a privacy complaint, you can escalate it to the Office of the Australian Information Commissioner at oaic.gov.au.
Security and data breaches
Access to personal information is restricted to what’s needed to operate the platform. Card details never reach our servers, and payout bank details are held by Stripe rather than by us.
If a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Children
The platform is not intended for people under 18, and you must be 18 or over to create an account, start a campaign, or receive a payout. If you believe a minor has given us personal information, contact us and we’ll remove it.
Cookies
We use cookies that are strictly necessary to keep you signed in and to maintain your session. We do not currently use advertising or third-party analytics cookies. If that changes, this policy will be updated first.