Privacy notice

Who we are

Nonprofit Tools (nonprofittools.com, our AI assistant connection and our ChatGPT plugin) is run by Kyle Behrend Pty Ltd (ACN 699 700 000, ABN 88 699 700 000), an Australian company. We decide how the personal information described here is used, which makes us the "controller" under the UK and EU GDPR. We handle personal information in line with the Australian Privacy Principles. Contact us at hello@kylebehrend.com.

What we collect and why

What you type into the search box. We use your words to find matching tools. We keep a record of searches, along with the country our host works out from your connection and which tools we showed, to improve results and understand what nonprofits need. We remove email addresses and phone numbers before a search is saved to our records. A search is also held briefly in our servers' memory so a repeat search answers quickly, then discarded. We don't link searches to your name or email, except as described under email signups below. Please don't type personal details about yourself or anyone else into the search box. Our reason for using this information (the "lawful basis") is our legitimate interest in running and improving the service.

Questions from AI assistants. When you ask ChatGPT, Claude or another assistant to use Nonprofit Tools, the assistant sends us the question it wants answered, such as the problem you describe or the tools you mention. We don't receive your assistant account details or the rest of your conversation, which the assistant's provider handles under its own privacy policy. We treat these questions like website searches.

Email signups. If you sign up, we keep your email address, plus a record of which form you used, when, and the exact words you agreed to. Some forms also ask for your country and organisation size, which are optional. If you sign up from a page of search results, we note the problem you searched for, so updates fit it. We use this to send what you asked for: launch news, tool updates and our newsletter. Our lawful basis is your consent. You can withdraw it at any time with the unsubscribe link in every email, or by emailing us.

Tool submissions. If you suggest a tool or ask for your product to be listed, we keep your name, email, your relationship to the tool and the details you give, so we can review it and follow up. Our lawful basis is our legitimate interest in keeping the directory complete and accurate.

Emails you send us. We keep correspondence so we can reply and keep track of corrections and requests. Our lawful basis is our legitimate interest in answering you and keeping the directory accurate.

Technical information. Like every website, our host receives your IP address, browser type and the pages you request. We use this to deliver the site, keep it secure and stop abuse, for example by limiting how many searches one connection can run. Our lawful basis is our legitimate interest in running a secure service.

"My stack". The tools you pick are saved in your own browser, not on our servers. They are sent along with your searches so results fit around them, and are not kept in our search records.

What we don't do

• We don't sell or rent personal information, or share it for advertising.
• We don't share your details with the software vendors listed on this site.
• We don't make automated decisions about you that have legal or similarly significant effects. Our AI ranks software, not people.

Cookies and storage in your browser

We don't use advertising, analytics or other tracking cookies. "My stack" uses your browser's local storage, which only exists because you asked for it and which you can clear at any time. Our team uses one cookie to preview unreleased pages; it is never set for visitors. If we add analytics in future, we'll update this notice first and ask for your permission where the law requires it.

Who we share it with

We use a small number of service providers, who may only use the information to provide their service to us:

• Vercel, which hosts the site and keeps server logs.
• Cloudflare, which runs our domain name service.
• SureContact, which holds our email list and sends our emails.
• OpenRouter and TypeSafe, which run Jev, the AI that ranks tools. They receive the text of searches and assistant questions, and the names of any tools in your "My stack". They never receive your IP address or email.
• The workflow tools we use to receive search records and tool submissions.

We may also share information with professional advisers, or where the law requires it. If the business is ever sold, the information would pass to the new owner under this notice, and we'd tell subscribers first.

International transfers

We are based in Australia. Our providers process information mainly in the United States, and some use data centres in other countries. When we transfer personal information from the UK or EU, we rely on adequacy decisions or the standard contractual clauses (with the UK addendum) that our providers offer. For information collected in Australia, we take reasonable steps to make sure overseas providers protect it to the standard of the Australian Privacy Principles. Email us for a copy of the safeguards we rely on, or for the current list of countries.

How long we keep it

• Searches and AI assistant questions: 12 months, then deleted or kept only as anonymous totals.
• Email signups: until you unsubscribe or ask us to delete them. After that we keep only your address on a do-not-email list, so we never email you by mistake. Our lawful basis for that list is our legitimate interest in respecting your choice, and our duty under anti-spam laws not to email you again.
• Tool submissions: 24 months after we last dealt with the submission.
• Server logs: up to 30 days.
• Emails you send us: as long as needed to deal with them, and no more than 24 months after the last reply.

Your rights

Wherever you live, you can ask us what we hold about you, ask us to correct it, ask us to delete it, and stop our emails at any time. Email hello@kylebehrend.com. We'll reply within one month, and we may ask you to confirm your identity first.

In the UK and EU, you also have the right to restrict or object to how we use your information (including an absolute right to object to direct marketing), to receive it in a portable format, and to withdraw consent at any time.

Complaints. If you're unhappy with how we've handled your information, email us first. We'll acknowledge your complaint within 7 days, look into it, and give you a written answer within 30 days. If you're still unhappy, you can go to the regulator: the Office of the Australian Information Commissioner (oaic.gov.au) in Australia, the Information Commissioner's Office in the UK, or your local data protection authority in the EU.

In the United States, including California, you can ask to know, correct or delete the personal information we hold. We don't sell personal information or share it for cross-context behavioural advertising.

Children

Nonprofit Tools is for people working or volunteering for organisations. It isn't aimed at children under 16, and we don't knowingly collect their information. If you think a child has given us their details, tell us and we'll delete them.

Keeping it safe

The site only runs over encrypted connections, access to personal information is limited to the people who need it, and we choose providers with strong security. No system is perfectly secure. If there's a data breach, we'll report it to the relevant regulator where the law requires (for UK and EU information, within 72 hours of becoming aware of it), and tell you directly if it's likely to put you at high risk or cause you serious harm.

Changes

When this notice changes, we update the date at the top. If a change affects how we use information you've already given us, we'll tell subscribers by email before it takes effect.

Contact

Kyle Behrend Pty Ltd (ABN 88 699 700 000). Email hello@kylebehrend.com. It reaches a person.