What we store, and who sees it
Last updated 2 November 2026. Written to be read, not to be survived.
What a volunteer gives us
Your name, your email address, and a password we never store in readable form (it is hashed with argon2id, which means we cannot recover it and neither can anyone who takes a copy of the database).
If you take the DNA quiz, we store your answers: which causes matter most to you, how you prefer to be recognised, the kinds of impact you want, your long-term aspiration, and how many hours a week you have. This is the only thing in Aux7 that is genuinely private to you.
As you use the product we also record which offers you were sent, what you answered, when, which placements you completed, and the points those actions earned.
If you ask us for a sales call
We keep what you enter on the contact form and email it to our sales team, who use it to reply to you.
What a coordinator can see about you
Your name, your contact details, your skills, your availability band, and your 90-day response rate as a number. They can see the offers they sent you and what you said.
They cannot see your DNA quiz answers. That restriction is written into the database itself as a row-level security policy rather than hidden in the interface, so it holds even for a query that goes around the application.
They are also never shown a count of your declines, in any screen, any export or any summary. Declining is a normal answer in this product and there is nowhere for a tally of it to appear.
Cross-organisation leagues
If your organisation has gamification set to Full, you are placed in a weekly cohort of twenty to thirty volunteers drawn from several organisations, grouped by how many hours a week you said you have. Other people in that cohort see a display label and the cause area you work in. They do not see your organisation, your email, your placements or your quiz answers.
Organisations can turn this off for everyone, and you can opt out of it for yourself in Settings while keeping the rest of the product.
Where a language model is involved
Two features call a model: the estimated impact on an offer, and the impact story written after a placement. The gateway runs on the same server as the rest of Aux7.
What gets sent is the organisation name, the project and role title, your first name, and the numbers the organisation filed. Your quiz answers, your email address and your response history are never part of a prompt. Generated stories are checked before they are shown: any number in the text that was not filed by the organisation causes the draft to be rejected rather than published.
Notifications
Offers reach you by email. If you turn on push notifications on a device, we store the subscription that device's browser gives us so we can send to it. Turning it off in Settings deletes that record.
Cookies
One cookie, for your signed-in session. It is httpOnly, which means page scripts cannot read it, and the session itself lives in our database rather than in the cookie. There is no analytics tag, no advertising pixel and no third-party script on any page of this site or the application.
How long it is kept, and getting it back
Your account and its history stay until you ask us to delete them. Ask, and the volunteer record and everything hanging off it goes, including quiz answers, points and notification subscriptions. Placements you completed remain in the organisation's own outcome records with your name removed, because those numbers are the charity's reporting, not yours.
Ask and we will send you everything we hold about you in a file you can read.
Contact
Operating entity and contact address to be confirmed before launch.