Data Privacy Policy

Privacy Policy

Effective date: April 25, 2026

JoinTheChange.ai (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This policy explains what information we collect, how we use it, and how we protect it.

1. Information We Collect

We collect information necessary to operate and improve the platform, including:

  • Name (first and last name)

  • Email address

  • Role and business unit (where provided)

  • Information entered into the platform by users, including stakeholder data, program inputs, and notes

  • Usage data, such as interactions with the platform and features used

We do not intentionally collect sensitive personal information (such as health, financial, or government identification data).

Users are responsible for ensuring that any data entered into the platform is collected and used in accordance with applicable privacy laws and organisational policies.

2. How We Use Your Information

We use your information to:

  • Provide and operate the platform

  • Enable collaboration within programs

  • Generate insights, summaries, and reports based on user inputs

  • Improve platform functionality and user experience

  • Maintain security and prevent misuse

We do not sell personal information or use it for advertising purposes.

3. Data Storage and Security

Your data is hosted on secure cloud infrastructure provided by Supabase, which operates on Amazon Web Services (AWS). All customer data is stored in the Sydney, Australia region.

We implement appropriate technical and organisational security measures to protect information from unauthorised access, loss, or misuse, including:

  • Encryption in transit using HTTPS/TLS

  • Secure data storage with encryption at rest

  • Access controls and authentication mechanisms

  • Role-based permissions within the platform

We implement appropriate security measures to protect your data. However, as with any online service, absolute security cannot be guaranteed.

4. Use of AI and Data Processing

The platform uses AI technologies to generate insights, summaries, and reports based on information provided by users.

Data is used solely for the purpose of delivering these features within the platform. Customer data is not used to train external AI models. AI-related processing is performed in a controlled and secure manner.

5. Third-Party Services

We use trusted third-party service providers to operate the platform. These may include providers for:

  • Cloud hosting and database services (e.g. Supabase on AWS)

  • Authentication and user management

  • Email delivery (SMTP services)

  • AI processing services

  • Payment processing (where applicable)

These providers process data only as necessary to deliver their services and are expected to maintain appropriate security standards.

6. Data Sharing

We do not share customer data with third parties, except:

  • With service providers required to operate the platform

  • Where required by law or regulatory obligation

  • To protect the rights, safety, or integrity of users or the platform

7. User Responsibility for Entered Data

The platform allows users to input information about other individuals (e.g. stakeholders).

Users are responsible for ensuring that:

  • They have the right to collect and use that information

  • They comply with applicable privacy laws and organisational policies

8. Data Retention

We retain information for as long as necessary to provide the platform and fulfil the purposes outlined in this policy.

When an account is deleted, we take reasonable steps to delete or de-identify associated data within a reasonable timeframe, except where retention is required for legal, regulatory, or legitimate business purposes.

9. Data Ownership

Users retain ownership of all data entered into the platform. JoinTheChange.ai does not claim ownership of customer data and processes it only for the purpose of providing the platform and its features.

10. Your Rights

Depending on location, users may have the right to:

  • Access personal information

  • Correct inaccurate information

  • Request deletion of data

Users may also request export of their data where reasonably practicable.

To make a request, please contact us using the details below.

11. International Users

Customer data is stored in Australia. Some supporting services used to deliver the platform may operate internationally and may involve limited data processing outside Australia where necessary. Appropriate security measures, including encryption in transit, are maintained in line with the platform's overall security approach.

12. Changes to This Policy

We may update this policy from time to time. Continued use of the platform indicates acceptance of the updated policy.

13. Contact

For privacy-related enquiries or requests, please contact us via the contact form on our website.