Privacy Policy

Last updated: placeholder — reviewed prior to pilot launch.

Alumni Connect is operated by HAAE Consulting Pty Ltd (“we”, “us”, “our”). This policy describes how we collect, use, store, and disclose personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Roles

Each school that engages Alumni Connect is the data controller of its alumni records. Alumni Connect acts as the data processor, providing the platform under a data processing agreement.

Data residency

All personal information is stored in the Sydney region (australia-southeast1). A full list of subprocessors (including any party that may process email content outside Australia) is available on request under our data processing agreement.

What we collect

• Names, email addresses, phone numbers, school cohort, and other alumni profile fields the school imports or users provide.
• Authentication metadata for the sign-in providers each school enables (Google, Microsoft, Apple, or email/password).
• Messages and content users post within their school's portal.
• Payment metadata for donations and event tickets — card numbers are handled by an accredited PCI-compliant payment processor and are never stored by Alumni Connect.
• Usage analytics (page views, feature usage) to improve the product.

Your rights

You may access, correct, or request deletion of your personal information. Contact your school's alumni administrator in the first instance; escalations can be sent to privacy@haae.au.

This page is a draft. A full legally-reviewed policy is required before the first pilot goes live. See Plan.md month-6 scope.