Privacy Policy

We collect information in three ways:

• Information you give us — name, email, phone number, profile picture, campaign details, identity documents submitted for verification, payout bank account details, and any messages you send through the platform.
• Information we collect automatically — device identifiers, IP address, browser type, pages you visit, time spent on pages, crash reports, and approximate location (derived from IP).
• Information from third parties — Google (when you sign in with Google), payment providers (PayFast), identity-verification partners, and fraud-prevention services.

We use your information to:

• Create and secure your account.
• Process donations and disburse funds to campaigns.
• Verify the identity of creators and organisations to prevent fraud.
• Send transactional email (receipts, payout notifications, security alerts).
• Send product updates, fundraising tips, and marketing (you can opt out).
• Comply with legal obligations including tax and anti-money-laundering rules.
• Improve the platform using aggregated, de-identified analytics.

We share information only where necessary:

• Service providers — hosting (Google Cloud, Firebase), payments (PayFast), email delivery, customer support, and analytics. They process data on our behalf under contract.
• Other Milli users — your display name, profile picture, campaign story, and donation amount (unless you donate anonymously) are visible on the campaign page you interact with.
• Regulators and law enforcement — when required by law, court order, or to investigate fraud.

We do not sell your personal information.

We use cookies and local storage to keep you signed in, remember your theme preference, track campaign-sharing links, and measure platform performance. You can disable cookies in your browser — the platform will still work but some features (such as staying signed in) will not.

We keep account information for as long as your account is active. When you delete your account we retain financial records for at least five years as required by South African tax and anti-money-laundering laws, then we delete or anonymise the data.

You have the right to:

• Ask what personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Ask us to delete information we no longer need to keep.
• Object to direct marketing at any time.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email privacy@millicrowd.com.

We protect your information with TLS in transit, encryption at rest, role-based access controls, and regular security reviews. No system is perfectly secure; if we become aware of a breach that affects you we will notify you and the Information Regulator as required by POPIA.

Some of our service providers host data outside South Africa (principally in the European Union and United States). Where this happens we rely on standard contractual clauses and the provider’s binding corporate rules to give your information equivalent protection to POPIA.

Milli is not intended for children under 18. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account please contact us so we can remove it.

We may update this policy from time to time. Material changes will be announced by email or in-product notice at least 14 days before they take effect. The “Last updated” date at the top of the page always reflects the most recent revision.

If you have questions about this policy or our data practices, email privacy@millicrowd.com.