Privacy policy
Last updated: 13 June 2026 (version 2026-06.1)
This policy explains how personal information is handled on the effort.giving platform.
1. Who is responsible for your data
For donor data, your identity, donation history, receipts, and communications as a donor, the responsible entity (the “controller”, and the APP entity under Australian law) is EffortX Foundation Ltd (ACN 693 961 330, Australia), a not-for-profit company limited by guarantee whose ACNC charity registration application is under assessment. The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) govern this data.
EffortX Labs Pte. Ltd. (Singapore) operates the platform software and processes data on the Foundation’s behalf under a written data-processing agreement. Labs also handles limited operational data (analytics, security logs) for running the service, subject to Singapore’s PDPA.
If you are an Indonesian resident interacting with partner-charity payment instruments, see section 8.
2. What we collect
You provide
Name, email, country, optional profile details; donation amounts and transaction references; messages, comments, and support requests.
Collected automatically
IP address and approximate location, device and browser data, and usage interactions (see the Cookie Policy for tracking technologies).
We never store full card numbers. Payments are processed by Stripe.
Charity and partner personnel
Where a charity is onboarded, we also hold limited personal information about its named officers, project leads, and beneficial owners (for verification and sanctions screening), retained for 7 years after the partnership ends.
3. How we use it
To operate the platform and process donations; issue acknowledgements and (once DGR endorsement is granted) tax receipts; communicate with you about your donations and projects you support; prevent fraud and maintain security; meet legal obligations (including Australian charity and tax record-keeping); and improve the platform.
We do not sell personal data.
Marketing emails require your opt-in and every one has an unsubscribe link.
5. Overseas disclosure (APP 8)
Your information is likely to be disclosed to recipients in Singapore (Labs, platform operation) and the United States (Stripe and infrastructure providers). Aggregate project data (not your identity) flows to partners in Indonesia. The Foundation remains accountable under APP 8 for Labs’ handling of your data and has contractual safeguards in place requiring APP-consistent handling.
6. Retention and security
Donation and receipt records are kept 7 years after your last donation (Australian tax record-keeping); account data while your account is active; security logs around 18 months. Data is encrypted in transit and at rest, with role-based access controls and audit logging.
If a breach occurs in Labs’ systems, Labs must alert the Foundation within 24 hours and provide a written report within 72 hours under their data-processing agreement. The Foundation then assesses the breach and, where it is likely to cause you serious harm, notifies you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.
7. Your rights
You may request access to or correction of your personal information, deletion (where the law does not require us to keep it), or withdraw marketing consent. Email hello@effort.giving. We respond within 30 days.
Complaints:write to the Foundation’s privacy contact at hello@effort.giving (or 1 Lychee Drive, Rosebank NSW 2480). We acknowledge within 7 days and respond within 30. If you’re unsatisfied, you can complain to the OAIC (oaic.gov.au). EU/UK visitors may also have GDPR/UK GDPR rights. Indonesian residents have rights under UU 27/2022 (PDP).
8. Indonesian partner-direct payments
If you pay a partner charity directly via its displayed QRIS code or bank account, your payment data never reaches us: it goes to the partner on its own payment rails. The partner is responsible for that data under Indonesian law (UU 27/2022). We receive only aggregate totals from partners, never donor identities, for those payments.
9. Children
The platform is for users 18+. We do not knowingly collect children’s data. Images of children appearing in project reporting are published only with documented consent under the Foundation’s safeguarding policies.
10. Changes and contact
Material changes are announced on the platform. Privacy contact for both entities: hello@effort.giving.
EffortX Foundation Ltd
1 Lychee Drive, Rosebank NSW 2480, Australia
EffortX Labs Pte. Ltd.
160 Robinson Road #14-04, Singapore 068914
Email us: hello@effort.giving