Privacy, with the lights on.

What we collect

We collect account information such as your display name, email address, password record, account and membership status, and activity needed to operate your account. If you apply to publish a wish, we also collect your legal name, phone number, residential address and a copy of your driver licence. We collect the bill and bill-payment details needed to review a wish. We also collect information you provide in stories, thank-you notes, support requests and identity reviews.

Why we collect it

We use this information to create and secure accounts; verify identity and eligibility to publish a wish; review bills; prevent fraud and misuse; keep the service working; provide support; manage keys and memberships; and meet legal obligations. We minimise what is shown to other users: public wish content is redacted, and legal identity, contact details, address, licence and full bill are restricted to authorised reviewers.

Payments and sharing

Wishly Forward does not receive, pool or hold money intended for a wish. Helpers receive verified biller details and pay the biller directly. Stripe processes platform purchases for keys and memberships under Stripe’s own privacy terms. We may disclose information to service providers that host, secure or operate the service, professional advisers, regulators or law enforcement where required or permitted by law. We do not sell personal information or use identity documents for advertising.

Storage, security and retention

We use reasonable administrative, technical and access controls. Identity documents and bills are kept separately from public wish content and accessed only by authorised reviewers who need them. No method of transmission or storage is completely secure. We retain information only for as long as reasonably necessary for verification, fraud prevention, legal, accounting and dispute purposes, then delete or de-identify it where practical.

Access, correction and overseas processing

You can request access to, or correction of, personal information by contacting us below. Some service providers, including payment and infrastructure providers, may process information outside Australia; where this occurs, we take reasonable steps to use providers with appropriate safeguards. We will respond to privacy complaints as described below.

Cookies and changes

We use essential local storage and session technology to keep you signed in and remember display preferences. We do not use third-party advertising cookies. We may update this policy when our practices or the law change; the date above will show when it was last updated.

Using Wishly Forward

Wishly Forward is a platform for private, verified requests for help with bills. By creating an account or using the service, you agree to these terms. You must provide accurate information, protect your account credentials and use the service lawfully. You must be at least 18 years old and able to enter into a binding agreement.

Publishing a wish

You may publish only after your identity has been verified by Wishly Forward. You must provide a genuine bill, payment details that match the bill and a truthful story. You must not submit another person’s bill without authority, include personal information that is not necessary, misrepresent hardship or use the service to obtain cash. We may set or change publishing limits, require more information, reject a wish or suspend an account to protect users and the service.

Helping with a wish

Opening a wish uses a key and does not reserve or guarantee a share. When you choose to help, you pay the verified biller directly using the payment details displayed in the service. You are responsible for confirming the payment in your own banking channel. A payment declaration records what you told us; it is not financial advice, a payment instruction or a guarantee that a biller will accept, apply or reverse a payment.

Keys, memberships and refunds

Keys and memberships are platform-access products processed by Stripe, not charitable donations and not funds for a wish. Unless Australian Consumer Law requires otherwise, keys are non-transferable and are not refundable once used. Membership terms, billing and cancellation are shown in Stripe’s customer portal. Nothing in these terms excludes rights that cannot lawfully be excluded.

Privacy, anonymity and thank-you notes

Do not publish names, addresses, licence numbers, account numbers or other identifying information in a wish, story or thank-you note. We may redact, edit, reject or remove content that risks privacy or safety. A thank-you note is shared only with people who completed that wish and may appear in an anonymous Constellation; it must remain respectful and non-identifying.

Availability and limits

We work to keep Wishly Forward available and accurate, but the service is provided on an “as available” basis. We do not guarantee any wish will be approved, funded or completed, or that a biller will accept a payment. To the maximum extent permitted by law, we are not liable for indirect loss, lost opportunity or loss arising from a user’s banking, biller or account decision. This does not limit consumer guarantees or other rights that cannot legally be excluded.

Suspension and termination

We may suspend, restrict or close an account where we reasonably believe there is fraud, identity misuse, harmful conduct, breach of these terms, legal risk or a threat to the safety or privacy of users. You may stop using the service at any time. Some records may be retained as explained in the privacy policy.

Start with us.

For privacy access, correction, deletion or complaints, email privacy@wishlyforward.com with enough detail for us to identify your account and concern. We will acknowledge your complaint and investigate it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

This page is a product-specific draft for Wishly Forward. Before public launch, have an Australian privacy and consumer-law professional review it against your final corporate entity, hosting locations, support process and retention schedule.