We hate legalese, so we've tried to make ours readable. If you've got any questions, feel free to ask us, and we'll do our best to answer.
We use information you share with us for our internal business purposes. We do not sell your information. This notice tells you what information we collect, how we use it, and steps we take to protect and secure it.
Your privacy is critically important to us. We have a few fundamental principles:
- We don't ask you for personal information unless we truly need it.
- We don't share your personal information with anyone except to comply with the law, develop our products, or protect our rights. Registered users do have a publicly visible profile which contains information provided by you.
- We don't store personal information on our servers unless required for the on-going operation of one of our services.
- We aim to make it as simple as possible for you to control what's visible to the public, kept private, and permanently deleted.
If you have questions about deleting or correcting your personal data please contact us.
Information we automatically collect
Like most website operators, we collect non-personally-identifying information such as browser type, language preference, referring site, account statistics, and the date and time of each visitor request.
We collect this to understand how our visitors use our service, and use it to make decisions about how to change and adapt the service.
From time to time, we may release non-personally-identifying information in aggregate form (for instance, by publishing trends in site usage) to explain our reasoning in making decisions. We will not release individual information, only aggregate information.
We automatically collect personally-identifying information, such as IP address, provided by your browser and your computer.
We collect this information for several purposes:
- To diagnose and repair network issues with your use of the site;
- To estimate the number of users accessing the service from specific geographic regions;
- To help prevent fraud and abuse.
Information you are required to provide to us on registration
We ask visitors who sign up for an account to provide a username, personal name and email address. Those who also sign up for an organisation account will in addition be asked to provide us with the organisation's name and VAT number, if applicable.
We will use your email address to send confirmation of certain actions, such as when you change your password. We will contact you when it's necessary to complete a transaction that you've initiated, or if there's a critical or administrative issue affecting your use of the service.
We may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what's going on with us and our products. We primarily use our website to communicate this type of information, so we expect to keep this type of email to a minimum.
Your name and username are used to build your public profile as to show the origin of your contributions to organisations' Changeroo accounts. They are also used to identify users for moderator purposes.
We will never sell or provide your email address or any other personal information to any third party, with exceptions as set forth below.
Optional information you provide to us
As you use our service, you have the option to provide more personal information, through your profile (user profile, organisation profile and/or Theory of Change profile), your entries, or comments you make. Providing this information is strictly optional.
We will show this information to others viewing the site, as part of your user profile. We may also use this information, in aggregate, to make decisions about how to change and adapt the service.
From time to time, we may release information in aggregate form (for instance, by publishing trends in site usage) to explain our reasoning in making decisions. We will not release individual information, only aggregate information.
We will not sell or provide this information to any third party, with exceptions as set forth below.
By choosing to make any personally-identifying information public, you recognize and accept that other people, not affiliated with us, may use this data to contact you. We can't be responsible for the use of any information you post publicly.
Additional information about your account, not included in your public profile, includes the status of your account (when and if account was activated) and user rights such as whether someone has administrator rights.
Financial information and transactions
Transaction data, including personal data, can be transferred to Mollie B.V. located in Amsterdam at Keizersgracht 126, zip code: 1015CW, in order to process payments.
You can engage in financial transactions with us to subscribe to an organisation account. These transactions are optional. If you choose to subscribe to an organisation account, you will be referred to Mollie, an online payments provider. Mollie will ask you to provide financial information to complete the transaction. There are several payment methods available – including credit cards, debit cards and for various countries local payment methods – each of which requires disclosure of certain personal and financial information. Mollie will only use this information to process your payment. After processing your payment you will be redirected back to our site. We do not store any of your financial information.
Disclosure of personally-identifying information
We disclose potentially personally-identifying and personally-identifying information only to those of our employees, contractors and affiliated organisations that (i) need to know that information in order to process it on our behalf or to provide services available at our website, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organisations may be located outside of your home country. By using this website, you consent to the transfer of your information to them.
If all of our assets were transferred or acquired, your information would be one of the assets that is transferred or acquired by a third party.
We will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to our employees, contractors and affiliated organisations, as described above, we disclose potentially personally-identifying and personally-identifying information only when that release is required by law or by court order, or when we believe in good faith that disclosure is reasonably necessary to protect the safety or rights of us, third parties, or the public at large.
Cookies that govern logging into your account are required. The site does not work without them. This includes cookies used by our own Authentication system as well as a cookie to connect with Google's Firebase services. The latter cookie only send a unique identifier; no personal information is shared.
Confidentiality and security
No data transmission over the Internet can ever be guaranteed to be 100% secure. You use this service at your own risk. However, we do take steps to ensure security on our systems.
Your account information is password-protected. We recommend that you choose a strong and secure password. We use industry-standard encryption to safeguard any transmission between your computer and ours.
If we learn of a system security breach, we will notify you electronically so you can take appropriate steps to protect yourself.
Deleting your information
You can change or delete any optional information that you've provided us at any time. If you change or delete any optional information you've provided, the change will take place immediately. You can also choose to delete your account entirely. If you choose to delete your account entirely, we will retain any personally-identifying information for a limited amount of time before removing it entirely. This is to allow you to undelete your account and continue using the service if you so choose. After this time, all your personally-identifying information will be removed entirely from our service, with the exception of any records we must retain to document compliance with regulatory requirements and content you've added to the Changeroo accounts of other organisations.
As part of our day to day operation, we will make regular copies of the data contained in the databases for backup purposes. These backups can potentially contain deleted data for several weeks or months. These backups will also be governed by the rules for disclosure of personally-identifying information.
Mollie: Payments are serviced by Mollie. These transactions are optional and only apply when you decide to subscribe to an organisation account. For information on how Mollie may use your information, see Mollie's legal documents.
Digital Ocean: We make use of Digital Ocean's hosting services and account data is housed on their servers. For information on how Digital Ocean may use your information, see Digital Ocean's documents.
All data is hosted inside the European Union.
In case of a privacy complaint, please contact us and we will try to resolve matters swiftly. It is also possible to fill a complaint with the supervisory authority of your country.
Last Updated: September 2, 2023
Copyright © 2020-2023 Changeroo, Business for Development