Privacy policy

Together Giving Pty Ltd (ABN 69 696 704 604) operates the Together fundraising platform at alltogether.giving. This policy explains what we collect, why, and how we handle it. It is written to align with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

We collect two categories of personal information:

• Customer account data: name, email, role, and authentication details for staff at the organisations that use Together.
• Donor data: names, contact details, donation amounts, dates, and (where required by law) employer and address. This is uploaded or synced by our customers, or entered by donors on hosted donation forms.

We also collect technical data (IP address, browser, device, page views) to operate and secure the service.

How we use it

• To deliver the platform: authenticating users, processing donations, generating receipts, calculating compliance, and producing reports for the organisation that uploaded or collected the data.
• To improve and secure the service: monitoring, debugging, fraud and abuse prevention.
• To communicate with you about your account, the service, or material changes to this policy.

We do not sell personal information.

Sharing and disclosure

We share personal information only with:

• Sub-processors that help us run the service: payment processors (Stripe, Pin Payments), hosting (Vercel, Neon), email delivery (Resend), and error monitoring (Sentry). Each is bound by contract to handle data only on our instructions.
• The customer organisation whose account the data belongs to. Donor data is owned by the organisation that collected it; we act as a data processor on their behalf.
• Law enforcement or regulators where we are required by Australian law to disclose.

Some sub-processors are located outside Australia. We take reasonable steps to ensure they handle data consistently with the APPs.

Storage and security

Data is stored in managed databases inside Australia or in jurisdictions with comparable protections. We use encryption in transit (TLS) and at rest, role-based access controls inside the application, and audit logging for sensitive operations.

Your rights

You can ask us to:

• Confirm what personal information we hold about you.
• Correct information that is inaccurate.
• Delete information, where we are not required to retain it for legal or compliance reasons.

If you are a donor, the organisation that collected your donation is the first point of contact. We will route requests to them where appropriate.

Cookies

We use a small number of cookies for authentication and to remember your preferences. We do not run third-party advertising or tracking cookies on the platform.

Changes to this policy

We will update this page when our practices change. Material changes will be notified by email to account holders.

Contact

Privacy questions, requests, or complaints can be sent to privacy@alltogether.giving.