Security and privacy
Your data stays in Australia. Donor details stay out.
Built privacy-first for charities that answer to donors, funders and a board.
Australian data residency
All data is stored and processed in Sydney, Australia. We state it on this page because it matters to your board and your funders.
Aggregate-first storage
We store totals, counts and trends wherever possible. Where a distinct donor count needs a record, we keep only the external platform ID and the amounts.
No donor names or emails in v1
NonprofitDash does not store donor names, email addresses, postal addresses or card details. Your CRM and fundraising platform remain the source of record.
Read-only wherever possible
Every connection uses the narrowest read-only scope the provider allows. Tokens are encrypted at rest and never sent to the browser.
Source-labelled metrics
Every number shows where it came from and when it last synced. We do not reconcile across sources or match donor identities, and we say so in the product.
Cookieless website snippet
Our optional first-party snippet sets no cookies, does no cross-site tracking and stores no raw IP addresses.
Privacy Act ready
Designed as if fully covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. A standard data processing agreement is available on request.
Export and delete at any time
Export everything or delete your organisation and its data from settings, without a support ticket.
Questions about how we handle data?
Talk to us before you connect a single tool. We would rather answer now than later.
No credit card. Data hosted in Sydney.