Privacy Policy

Effective Date: July 22, 2025 Last Updated: July 22, 2025

1. Introduction

Welcome to QuantifiedChange.com (“QuantifiedChange”, “we”, “our”, “I”). My name is Austin King, and I own and operate this service as a sole proprietorship based in Seattle, WA, USA.

I created QuantifiedChange to help non-profit journalism organizations measure and report their impact. I understand the sensitive nature of your work and the importance of data privacy and security. This Privacy Policy explains what information I collect, how I use and protect it, and the rights you have concerning your data.

My guiding principle is to collect only the data necessary to provide and improve the service, and to be a trusted steward of your information. We will never sell your data.

2. Information We Collect

We collect a few types of information to provide our service:

a. Information You Directly Provide to Us:

  • Account Information: When you register for an account, we collect your email address and a hashed password.
  • Contact Information: If you contact us via our contact form or by email, we collect your name, email address, and any other information you choose to provide in your message.

b. Customer Data You Upload to the Service:

  • You and your users can upload data related to your organization’s impact (“Customer Data”). This includes information about funders, grant details (name, start/end dates), projects, articles, KPIs, and evidence of impact such as screenshots.
  • You own your Customer Data. We only process it on your behalf to provide the service.
  • The service is designed to track metadata and impact related to public-facing work. It is not intended for storing highly sensitive, non-public journalistic materials like confidential source identities or raw investigation notes.

c. Information Collected Automatically:

  • Usage Logs: To maintain the security and performance of the service, we collect standard server logs. These may include your IP address, browser type, operating system, and the dates and times of your access. These logs are used for troubleshooting and security analysis only.
  • No Third-Party Analytics: We do not use any third-party analytics or tracking cookies on our website or within our application (e.g., Google Analytics).

3. How We Use Your Information

We use the information we collect for two specific purposes:

  • To Provide and Maintain the Service: We use your Account Information and Customer Data to operate the QuantifiedChange platform, allow you to log in, store your impact data, generate reports, and perform other core functions of the service.
  • To Improve the Service: We may analyze aggregated and anonymized usage patterns to understand how our service is used, identify popular features, troubleshoot issues, and make improvements to the user experience. Your raw Customer Data is never used for this purpose without being anonymized.

We will not use your data for any other purpose, such as advertising or marketing, without your explicit consent.

4. How We Share and Disclose Information

Your privacy is paramount. We limit data sharing to the absolute minimum.

  • We Do Not Sell Data: We are not in the business of selling data. We will never sell your Personal Information or Customer Data to any third party.
  • Sub-processors: We use a single, carefully chosen third-party service provider (a “sub-processor”) to host our platform and your data:
    • Infomaniak: Our servers and your data are hosted in a secure data center in Switzerland operated by Infomaniak.
  • Legal Compliance: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation (such as a valid warrant or subpoena) or to protect and defend our rights or property. We will attempt to notify you of any such request unless prohibited by law.

5. Data Security and Sovereignty

We take the security of your data seriously and have implemented multiple layers of protection.

  • Data Sovereignty: Recognizing the risks faced by journalists, all Customer Data is hosted exclusively in Switzerland, a country with some of the world’s strongest data privacy and sovereignty laws.

  • Encryption in Transit: All data transferred between your browser and our servers is encrypted using industry-standard $TLS\ 1.3.

  • Encryption at Rest: All Customer Data in our live database is encrypted at rest using the industry-standard $AES-256$ algorithm, powered by the official SQLite Encryption Extension (SEE). This ensures your data is protected even on the server’s physical disk.

  • Encrypted Backups: All database backups are stored in a physically separate cloud storage environment. These backups are protected with server-side encryption, ensuring they remain secure at all times.

  • Access Control: Access to your Customer Data is strictly limited to the founder, Austin King, for the purposes of service maintenance and support. No third-party contractors have access to the application servers.

6. Data Retention

We believe you should have control over your data.

  • Customer Data: You can add, modify, and delete your Customer Data at any time through the application interface. When you delete a record, it is permanently removed from our active database.
  • Account Deletion: If you choose to delete your account, all of your associated Customer Data will be permanently deleted from our systems, including from all backups.
  • Server Logs: We automatically purge server logs every 30 days.

7. Your Data Rights

You have rights regarding your personal information. You can:

  • Access and Correct: Access and update your Account Information (like your email address) through your account settings.
  • Delete: Delete your Customer Data or your entire account as described in the “Data Retention” section above.
  • Questions: If you have any questions about your data or wish to exercise other rights, please contact us.

8. International Data Transfers

QuantifiedChange is operated from the United States. However, all Customer Data you provide is transferred directly to and processed and stored on our servers in Switzerland. By using our service, you consent to this transfer and storage.

9. Children’s Privacy

Our service is intended for professionals and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice in the application before the change becomes effective. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or feedback about this Privacy Policy, please contact me directly:

Austin King QuantifiedChange.com Email: austin@quantifychange.com