Privacy Policy
Last updated:1st August 2026
1. About this policy
This policy explains how Vercia (ABN 60 878 196 452) (“Vercia,” “we,” “us,” “our”) collects, holds, uses, and discloses personal information in connection with the Vercia service, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. What we collect
We collect the following kinds of information:
**Account and contact information:** name, email address, organisation name, organisation type (NFP or consultant), and role, when you sign up, join the waitlist, or contact us.
**Billing information:** processed by our payment provider, Stripe. Full payment card details are held by Stripe and never touch our servers. We store limited billing-related metadata in our own database, such as subscription status and plan type, to manage your account.
**Usage data:** information about how you use the Service, such as reports generated, peer groups created, and login activity, collected to operate and improve the Service.
**Organisational data you provide:** any information you input when using the Service, such as custom peer group selections.
We do not collect “sensitive information” as that term is specifically defined under the Privacy Act (which covers categories such as health information, racial or ethnic origin, and biometric data). Financial data about your organisation, including any figures you input or that we derive from ACNC filings, is organisational data rather than sensitive information about an individual, but we treat it as confidential and protect it accordingly.
3. How we collect it
We collect personal information directly from you, through forms on our website, account creation, and your use of the Service. We also use a number of third-party tools to operate the Service and communicate with customers, including payment processing, hosting, database, authentication, and email/marketing platforms, which may collect or process information as part of providing those functions to us. We use Google Analytics to understand how visitors use our website (such as pages visited and general usage patterns), which uses cookies to collect this information. You can control or disable cookies through your browser settings.
4. Third-party data (ACNC filings)
Separately from personal information collected from our customers, Vercia processes publicly available financial data filed by charities with the ACNC. This is public regulatory data about organisations, not personal information about individuals, and is used to generate the peer benchmarking and comparison features of the Service.
5. Scope of this policy: your information vs. your organisation’s content
This policy covers personal information, information that identifies you as an individual. It does not cover the business content you create using the Service, such as generated reports, custom peer group selections, or comparison outputs (“Your Content,” as defined in our Terms of Service).
Your Content is organisational, not personal, information. It is kept confidential to your organisation under the terms of our Terms of Service (see Section 7), separately from how we handle personal information under this Privacy Policy. In practice, this means: your name and email address are personal information governed by this policy, while a benchmark report your organisation generates is confidential business content governed by our Terms of Service, even though both may relate to the same account.
6. How we use your information
We use personal information to:
• Provide, operate, and maintain the Service;
• Process payments and manage your subscription;
• Communicate with you about your account, updates, or support requests;
• Improve and develop the Service;
• Comply with legal obligations.
We also use your email address to send marketing and product update communications, including news about Vercia, new features, and relevant sector content. You can opt out of marketing communications at any time using the unsubscribe link in any email, or by contacting us directly. Opting out of marketing does not affect service-related communications necessary for your account (e.g. billing notices, security alerts).
7. Who we share it with
We share personal information with:
• **Service providers** who help us operate the Service, currently including Stripe (payments), Supabase (database and authentication), Railway (hosting), Loops (email communications), and Google Analytics (website analytics).
• **Legal and regulatory bodies**, where required by law.
We do not sell personal information to third parties.
8. Overseas disclosure
Some of our service providers may store or process data outside Australia, typically in the United States. This includes Stripe (payment processing) and Google Analytics (website analytics). Our hosting (Railway) and database (Supabase) are configured to store data in the Australia/Asia-Pacific region.
9. Data security
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access, including encrypted connections (HTTPS) across the Service, secure authentication (including modern token-based verification for account access), and access controls that restrict data to authorised users within your organisation.
10. Data retention
We retain personal information for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. We do not currently have a fixed automatic deletion schedule after account cancellation; we will delete or de-identify your personal information upon request.
11. Access and correction
You may request access to, or correction of, the personal information we hold about you by contacting us at info@vercia.com.au. We will respond in accordance with the Privacy Act.
12. Complaints
If you have a concern about how we’ve handled your personal information, please contact us at info@vercia.com.au. If you’re not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
13. Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email.
14. Contact
For privacy questions or requests, contact info@vercia.com.au.