Privacy Policy

This policy is issued by Ralli (NZ Company #9450980) and explains how we handle personal information under the Privacy Act 2020 and its 13 Information Privacy Principles. Because Ralli does not itself hold donor funds, the most sensitive data (full card numbers, bank details, identity documents) is collected and stored by our regulated payment partner, not by Ralli.

From everyone: technical and device data (IP address, approximate location from IP and browser locale — used to show the right local payment method — device/browser type, and cookies), plus general usage data.

From donors: your email (for a receipt and to enable self-service cancellation; quick $1 donations can be made without one), the donation details, a payment token from the partner (we don’t receive your full card number), and fraud-prevention signals such as device fingerprint and transaction velocity.

From creators: account details (name, email, hashed password, any connected social accounts), public campaign content, and — at withdrawal — identity-verification (KYC) data collected and verified by our payment partner to meet anti-money-laundering law, plus payout details held by the partner.

We collect only for lawful purposes connected to running Ralli: processing donations and receipts, showing the right local payment method, enabling refunds, running and securing accounts, verifying identity before payout (a legal requirement), paying creators, preventing fraud and money laundering, screening campaigns for safety, communicating with you, and meeting our legal, tax and regulatory obligations. We collect from you directly wherever we reasonably can, and tell you why at the point of collection.

To keep the platform safe we use automated systems, which may include AI content screening and fraud signals (device fingerprinting, velocity limits, card-testing detection). These can flag or pause activity, or automatically reverse a suspected unauthorised charge. Significant decisions affecting a creator — such as removing a campaign or withholding a payout — involve human review, and you can ask us about a decision.

We do not sell personal information. We share it only as needed to run the service: with our licensed payment partner and the settlement network beneath it (to process payments, hold funds, verify identity and pay creators); with identity-verification and infrastructure providers (hosting, database, email, error monitoring, analytics) bound to protect your data; with the public (campaign content and any public donor name or message you choose to show); and with regulators, law enforcement or the courts where required or authorised by law.

Ralli operates globally, so some data goes offshore — our payment partner, settlement network and some infrastructure providers are located outside New Zealand (including the US and EU). Before disclosing personal information overseas we take reasonable steps, as the Privacy Act requires, to ensure the recipient is subject to comparable privacy protections. By donating or withdrawing funds, you understand that information necessary to process the payment will be handled by these overseas providers.

We take reasonable security safeguards — encryption in transit, hashed passwords, access controls, upload validation, rate limiting, and regular security review. Full payment credentials and identity documents are held by our licensed partner, not by Ralli. No system is perfectly secure, but we work to protect your information and respond quickly if something goes wrong.

We keep information only as long as we need it, or as the law requires. Anti-money-laundering records are retained for at least 5 years (held largely by the partner); tax and financial records for the period NZ tax law requires (generally 7 years); account and campaign data while your account is active and for a reasonable period after. Anonymous $1 donations leave us no identifying information beyond the payment token.

You can ask what we hold about you and get a copy, and ask us to correct anything that’s wrong (or attach a statement of correction if we don’t agree). Email us and we’ll respond within the timeframe the Privacy Act sets (generally 20 working days). We may need to verify your identity first, and some records we must keep for legal reasons may be subject to limits on access.

You can also ask us to delete your personal information, and we will do so — except where we are required to keep it to meet a legal obligation. In particular, anti-money-laundering records (at least 5 years) and tax and financial records (generally 7 years) must be retained for those periods and cannot be deleted earlier; much of that data is held by our payment partner rather than by Ralli. Once a retention period ends, we delete or anonymise the information. Send access, correction or deletion requests to privacy@ralli.fund.

We use cookies to keep you signed in, remember preferences, detect your country for payment routing, prevent fraud, and understand usage; our Cookie Policy explains each type and how to control them, and you can also manage cookies in your browser. Ralli is not directed at children. If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner as the Privacy Act requires.

Our Privacy Officer is your point of contact for any privacy question, access, correction or deletion request, or complaint, and can be reached at privacy@ralli.fund. We acknowledge within 2 working days and aim to resolve within 20. If you’re not satisfied, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).