Privacy

What we collect

• Waitlist signups: charity name, your name, your role, your email, and one sentence on where you currently look for funders.
• Tool queries: charity name, email, charity description, region, ask amount, and any optional context you provide.
• Email replies: anything you write back to us. We keep the thread.
• Server logs: standard request metadata (IP, user agent, timestamp) retained for 30 days for security and abuse prevention.

Why we collect it (APP 5)

• To run your query against the public ACNC dataset and return matched funders.
• To email you when Pro is ready to test, and to send launch news only.
• To shape what gets built. Your description of where you currently look for funders is direct product input.
• We do not retarget you with ads. We do not place advertising pixels. We do not sell your record. We do not share it for marketing. The AI step is described below, including the limits of what we can guarantee about it.

Who sees it

Joshua, the founder. Sub-processors that strictly handle the data on our behalf:

• OpenRouter (United States), with the DeepSeek and Qwen models. When you use the matching tool, the charity description and details you enter are transmitted to OpenRouter Inc in the United States and processed by the DeepSeek model to generate your funder matches, with a lower-cost Qwen model used as a fallback when DeepSeek is unavailable. This is an overseas disclosure under APP 8. By submitting the tool you consent to this overseas disclosure (APP 8.2(b)). We use a free model tier with a low-cost paid fallback, and we cannot guarantee the overseas recipients are bound by the Australian Privacy Principles or that your input will not be used to improve their models. Do not paste confidential, sensitive, or unpublished information into the tool. Use only information your charity is comfortable sharing publicly.
• Resend. Transactional email delivery, US-based. Processes your email address and the contents of any email we send you. Overseas disclosure under APP 8.
• Supabase. Database hosting, AU region. Processes the full waitlist and tool-query record.
• Cloudflare. Hosting, CDN and DNS. Sees IP address and request metadata for serving the site and security.

We do not share your record with any third party for marketing, sale, or partnership purposes. The overseas disclosures above are operational only, to run the tool and send the emails you ask for.

How long we keep it

Waitlist records: until you ask us to delete or for 24 months from your last contact, whichever is shorter. Tool queries: 12 months, then anonymised (description retained, identifying fields stripped) for product analytics. Server logs: 30 days. Email threads: while operationally relevant, then archived.

Your APP 12 / APP 13 rights

You can ask to access your record, correct it, or delete it. Email info@patronatlas.com.au with the request. We respond within 14 days.

Cookies

The site uses functional cookies only (theme preference). No analytics cookie, no advertising cookie, no third-party tracking cookie.

Spam Act 2003 compliance

Emails sent from PatronAtlas to you are sent on the basis of your express consent when you join the waitlist. Every email includes a one-click unsubscribe link. We do not send unsolicited marketing.

Complaints

If you are concerned about how PatronAtlas handles your information, email info@patronatlas.com.au first so we can fix it. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.