Privacy
What we collect, and what we don't.
Ecodia builds software for organisations doing public-good work, so being straight about data isn't a compliance chore. This page describes what ecodia.au does, checked against the code that runs the site rather than copied from a template. Where we don't do something, it says so.
Last reviewed against the running code: 1 October 2026
Who this is about
This site is operated by Ecodia Pty Ltd (ACN 693 123 278), an Australian company based on the Sunshine Coast, Queensland. Intellectual property sits with Ecodia Labs Pty Ltd (ACN 693 653 664), which licenses it to Ecodia Pty Ltd and to Ecodia DAO LLC, a Wyoming company. For anything on this page, write to code@ecodia.au and a person will answer.
This policy covers ecodia.au only. Software we build with a client runs under that organisation's own policy, on infrastructure they own, and isn't governed by this page.
What the site collects
If you use the contact form
The form at /contact asks for your email address and a message, and optionally your name. Submitting it sends those fields to us as an email and nothing else: they're not written to a database, added to a mailing list, or passed to a CRM. The email lands in our inbox, and your address is set as the reply-to so we can write back.
If you apply for the Next World Grant
A Next World Grant application is a different matter, because it has to be assessed and compared. What you submit about your organisation, along with the contact details you give, is stored in our database and emailed to us and to you. EcodiaOS, Ecodia's AI operating system, reads and assesses every application. We keep applications so we can judge the round and answer questions about it afterwards. Ask us and we'll delete yours.
Analytics
Some older static pages on this domain, including the retained /experience journey and the legacy /me page, run a small first-party analytics script. It sets a cookie named eos_anon holding a random identifier for one year, and records page views and clicks on calls to action along with the path you visited, the page that referred you, your browser's user-agent string and any campaign parameters in the URL. It's first-party, it's ours, and it's not shared with an advertising network.
The main site pages, the ones you're most likely reading now, don't run that script and set no cookies of their own.
Server logs
The site is hosted on Vercel, which keeps standard request logs including IP addresses for a limited period as part of running and protecting the service. That's ordinary web hosting, not a profile we build or query.
What we don't do
- We don't sell or rent personal information. There's no arrangement under which we could.
- We run no advertising trackers, no ad-network pixels and no cross-site profiling.
- We don't use what you send us to train a public AI model.
- We don't ask you to create an account to read anything on this site.
Who else touches the data
Only the suppliers needed to run the site and assess grant applications: Vercel hosts it, Supabase stores grant applications and analytics events, Resend delivers the email a form generates, and Anthropic provides the AI models EcodiaOS uses to read and assess grant applications. Each processes that data to provide its service to us. Some of them operate servers outside Australia, so information you send may be handled overseas. Grant applications are also read by the members of that round's judging panel, each of whom signs a confidentiality agreement first.
How long it's kept
Contact emails stay in our mailbox as ordinary correspondence, and we delete them on request. Grant applications are kept for the round they belong to and the record of how it was judged. We may also use eligible grant applications, abstracted and anonymised so no organisation or person can be identified, in reports to funders about the program. Analytics events are kept in aggregate to understand which pages are useful.
Your say over it
You can ask what we hold about you, ask us to correct it, or ask us to delete it, and you can clear the eos_anon cookie in your browser at any time without losing access to anything. Write to code@ecodia.au. We aim to answer within a few working days, and we'll tell you plainly what we found rather than sending a form letter.
We handle personal information in keeping with the Australian Privacy Principles. If you think we have got something wrong, tell us first so we can fix it. If that doesn't resolve it, you can raise the matter with the Office of the Australian Information Commissioner.
Changes
When the site's behaviour changes, this page changes with it, and the review date near the top moves. It's checked against the code, so if you spot a gap between what this says and what the site does, that's a bug worth reporting to code@ecodia.au.