Privacy Policy

The platform is used by staff of nonprofit retail organisations. We hold:

• Staff accounts — name, work email, role, and the sites you can access. Sign-in is handled by your employer's Microsoft Entra directory; we never see your password.
• Donated goods records — photographs, category, condition, price, and where an item went. About things, not people.
• Sale events — what sold, for how much, and when.
• Audit records — who changed what, and when.

Donor identities. People who drop off goods are anonymous, and we keep it that way. A donor record exists only if someone requests a tax receipt, and then only their name and email.

Programme participant data. Employment history, disability status, and similar records live in your organisation's case-management system. This platform does not hold them.

• Supabase — database hosting (US).
• Vercel — application hosting (US).
• Microsoft Entra ID — sign-in, run by your employer.
• Stripe — card payments where a pilot register is in use. Card data goes from the reader to Stripe and never touches our systems.

One honest limit: audit records required for financial or grant compliance are retained for their statutory period and survive a deletion request. We will tell you if that applies to you.