Privacy policy

What we collect

• Account basics: your email address, display name and the password credentials handled by our authentication provider.
• Profile details you choose to add: photo, biography, location and social links.
• Campaign content you publish: title, story, goal, photos, updates and beneficiary information you provide.
• Donation records: the confirmed amount, our platform fee, the provider's processing fee, the message you write, and whether your name is shown.
• Recipient verification details you submit so a human can review eligibility to receive payouts.

What we never store

• Card numbers, security codes or bank passwords. Card details go directly to the payment provider and never touch Rally's servers.
• Private contact details on public profiles — no phone numbers, home addresses, financial account numbers or identity documents.
• Anonymous donors' identities in public donor lists. The organizer sees the honest record; the public list shows "Anonymous supporter".

Who can see what

• Public: published campaign pages and public profile fields you chose to share.
• Only you: your drafts, your donation history, your notification settings and your recipient verification status.
• Only administrators: support messages, reports, moderation notes, recipient verification details and the audit log of administrative actions.

Your choices

• Set your profile to private at any time — it stops appearing publicly.
• Turn notification categories on or off individually, and marketing email stays off unless you opt in.
• Request account deletion from Account settings. Draft campaigns are removed immediately, personal profile fields are cleared, and financial records are retained where tax and dispute rules require it.

Security

Access is enforced on the server for every record, not just in the interface. Administrative actions that touch money or verification are written to an audit log that cannot be edited from the app.