Privacy Policy

Tatheon Pty Ltd ("Tatheon", "we", "us" or "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use and protect it, and the choices you have. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1Who we are

Tatheon provides a reporting and business-intelligence platform for ecommerce brands. Our software connects to data sources that a customer authorises, such as their advertising, analytics, ecommerce and email platforms, and presents that information back to the customer in a single operating view. This policy applies to our website, our product, and our dealings with customers and visitors.

2Information we collect

Information you give us

• Contact and account details, such as your name, business name, email address, phone number and role, when you contact us, request access, or create an account.
• Communications, the content of enquiries, support requests and correspondence you send us.

Connected business data

When you authorise Tatheon to connect to a third-party platform (for example Shopify, Meta, Google Ads, Google Analytics, Klaviyo or a subscription platform), we access and process the business and performance data you have permitted us to retrieve. This may include order, revenue, advertising spend, campaign, product, inventory and customer-metric data. We access this data only through the permissions you grant and only to provide the reporting and analytics features of the product.

Information collected automatically

• Usage and device data, such as IP address, browser type, pages viewed and actions taken, collected when you use our website or product.
• Cookies and similar technologies, used to keep you signed in, remember preferences, and understand how our site is used. You can control cookies through your browser settings.

3How we use your information

We use personal and connected data to:

• provide, operate, maintain and improve the Tatheon product and website;
• connect to the data sources you authorise and generate your reporting and analytics;
• respond to your enquiries and provide customer support;
• send you service-related communications and, where you have opted in, product updates;
• protect the security and integrity of our systems and detect or prevent misuse; and
• comply with our legal obligations.

4Google user data

Where you connect a Google service (such as Google Ads or Google Analytics), Tatheon's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We access Google data only to provide and improve reporting features you have requested, we do not transfer it except as necessary to provide those features or as required by law, and we do not use it for advertising or allow humans to read it except with your consent, for security, or to comply with applicable law.

5How we share information

We may share information in limited circumstances:

• Service providers, trusted vendors who help us run the business (for example hosting, infrastructure and analytics), bound by confidentiality and permitted to use the data only to provide services to us.
• Legal and safety, where required by law, regulation or legal process, or to protect the rights, property or safety of Tatheon, our customers or others.
• Business transfers, in connection with a merger, acquisition or sale of assets, subject to the protections in this policy.

6Data security

We take reasonable steps to protect personal and connected data from misuse, interference, loss, and unauthorised access, modification or disclosure. These include encrypted credential storage, controlled and permissioned access to connected accounts, and access limited to authorised users. No system can be guaranteed completely secure, but we work to protect your information and to keep our practices under review.

7Data retention

We retain personal information for as long as needed to provide the product, meet the purposes described in this policy, and satisfy our legal and record-keeping obligations. When a connection is removed or an account is closed, we take reasonable steps to delete or de-identify the associated data unless we are required to retain it.

8Your rights and choices

• Access and correction, you can request access to the personal information we hold about you, and ask us to correct it if it is inaccurate.
• Disconnect a source, you can revoke Tatheon's access to any connected platform at any time, through the product or through that platform's own settings.
• Marketing, you can opt out of non-essential communications at any time using the unsubscribe link or by contacting us.
• Complaints, if you have a concern about how we handle your information, contact us and we will investigate. You may also contact the Office of the Australian Information Commissioner (OAIC).

9Overseas disclosure

Some of our service providers may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure the information is handled consistently with this policy and the Australian Privacy Principles.

10Children

Tatheon is a business product and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above, and where changes are significant we will take reasonable steps to notify you.

12Contact us

If you have questions about this policy or how we handle your information, please get in touch: