Analytica logoAnalytica

Privacy Policy

Effective Date: 14 November 2025

Analytica Software Pty Ltd (ACN 693 260 589) of 3/49 Wilson Street, South Yarra, Victoria, Australia ("Analytica", "we", "us" or "our") takes privacy seriously.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you access or use the Analytica platform and related services (the "Platform").

By using or accessing the Platform, you acknowledge and agree to the practices described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service. Any capitalised terms used but not defined in this Privacy Policy have the meanings given to them in the Terms of Service.

This Privacy Policy is intended to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Privacy Policy Table of Contents

  1. What this Privacy Policy Covers
  2. Personal Information
  3. Categories of Personal Information We Collect
  4. Sources of Personal Information
  5. Why We Collect, Use and Disclose Personal Information
  6. How We Disclose Personal Information
  7. Cookies, Analytics and Tracking
  8. Data Security and Retention
  9. Children
  10. Overseas Storage and Disclosure
  11. Access, Correction and Complaints
  12. Changes to this Privacy Policy
  13. Contact Information

1. What this Privacy Policy Covers

1.1 Scope. This Privacy Policy applies to personal information we collect when you access or use the Platform, interact with us, or otherwise deal with us in connection with the Platform.

1.2 Personal Information. For the purposes of this Privacy Policy, personal information generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

1.3 Third Parties. This Privacy Policy does not apply to the practices of organisations we do not own or control, or to third parties that you interact with independently (including third-party applications you choose to connect to the Platform).

2. Personal Information

2.1 Business Use. We collect personal information primarily to provide the Platform to business customers and their authorised users. In many cases, personal information we handle will relate to business users (for example, names and business email addresses), however personal information may also be included within Customer Data uploaded into the Platform.

2.2 Information About Others. If you provide us personal information about another person, you confirm you have authority to do so and have provided them with this Privacy Policy (or otherwise obtained any necessary consents). Our Terms of Service require Customers to ensure they have all necessary rights and consents to upload personal information to the Platform.

3. Categories of Personal Information We Collect

3.1 Profile and Contact Information. We may collect profile and contact information including:

  • name

  • business email address

  • business phone number (if provided)

  • job title (if provided)

  • company name

  • account identifiers and authentication information (such as passwords or secure tokens)

    3.2 Billing and Payment Information. We may collect billing and payment information including:

  • billing contact name and email

  • billing address (if provided)

  • payment method details provided to our payment processor (for example, card type and last four digits)

We do not typically store full card details. Payment processing is generally handled by third-party payment processors.

3.3 Device, Network and Log Information. We may collect device, network and log information including:

  • IP address

  • device identifiers

  • browser type and settings

  • operating system

  • log files, time stamps, and activity records relating to Platform usage

    3.4 Usage and Analytics Information. We may collect usage and analytics information including:

  • feature usage and interactions

  • pages or screens viewed within the Platform

  • referral information (how you reached the Platform)

  • performance and diagnostic data

    3.5 Customer Data That May Contain Personal Information. The Platform allows Customers and Users to upload or enter information that may include personal information, including (without limitation):

  • invoices, supplier details, and contacts

  • communications and notes entered in the Platform

  • attachments or documents

  • user-generated fields and descriptions

    3.6 Support and Communications. We may collect information included in:

  • emails and messages you send to us

  • support tickets and related information

    3.7 Future Categories. As the Platform evolves, we may collect additional categories of personal information. If we introduce material changes to the way we handle personal information, we will update this Privacy Policy and notify affected Users as described in section 12.

4. Sources of Personal Information

4.1 You and Your Organisation. We may collect personal information:

  • when you create an account

  • when you use the Platform

  • when you submit information through the Platform

  • when you contact us or request support

  • when you subscribe to communications (where applicable)

    4.2 Automatically Through Use of the Platform. We may collect personal information automatically:

  • through cookies and similar technologies

  • through logs and analytics tools that record activity within the Platform

    4.3 Third Parties. We may collect personal information from third parties including:

  • payment processors (for payment status and billing confirmation)

  • analytics providers (to understand Platform usage and improve performance)

  • third-party applications you authorise to connect to the Platform (for example, accounting or document systems), where you choose to enable those integrations

5. Why We Collect, Use and Disclose Personal Information

5.1 Providing, Operating and Improving the Platform. We collect, use and disclose personal information to:

  • create and manage accounts

  • authenticate Users and enable secure access

  • provide Platform functionality (including processing Customer Data)

  • provide onboarding and operational support

  • monitor performance, reliability and availability

  • develop new features and improve existing features

  • conduct internal research, testing, analytics and troubleshooting

    5.2 AI-Assisted Processing and Reporting. The Platform may use artificial intelligence and automated systems to process Customer Data, perform financial calculations, generate reports, and produce analytical outputs.

Where personal information is included within Customer Data, that personal information may be processed as part of providing these Platform functions.

We do not use Customer Data to train general artificial intelligence models or to develop unrelated AI products.

5.3 Security, Fraud Prevention and Compliance. We collect, use and disclose personal information to:

  • protect the Platform and Users

  • detect and prevent misuse, fraud, or unauthorised access

  • enforce our Terms of Service and other policies

  • comply with legal obligations and respond to lawful requests

    5.4 Communications. We collect, use and disclose personal information to:

  • respond to enquiries and support requests

  • send operational notices (such as account, billing, security and service communications)

  • send product updates or service announcements relating to your subscription

    5.5 Aggregated and De-Identified Data. We may create aggregated and de-identified data from Platform usage and performance information. We may use this data to analyse, maintain and improve the Platform, and for lawful business purposes. Aggregated and de-identified data will not include information that can reasonably be used to identify an individual.

6. How We Disclose Personal Information

6.1 Service Providers. We may disclose personal information to service providers where reasonably necessary, including:

  • cloud hosting and infrastructure providers (including Amazon Web Services (AWS))

  • communications and support tooling providers

  • security and fraud prevention providers

  • analytics and monitoring providers

  • payment processors (for billing and payments)

    6.2 Third-Party Applications You Connect. If you enable integrations, we may disclose information to the third-party application provider as required to provide the integration. Those third parties handle information under their own terms and privacy policies.

    6.3 Legal and Regulatory Disclosures. We may disclose personal information where required or authorised by law, including in response to lawful requests from courts, regulators, law enforcement, or to protect rights, safety and security.

    6.4 Corporate Transactions. If we undergo a merger, acquisition, reorganisation, or sale of assets, personal information may be disclosed as part of that transaction, subject to appropriate protections.

    6.5 No Sale. We do not sell personal information.

7. Cookies, Analytics and Tracking

7.1 Use of Cookies. The Platform and related websites may use cookies and similar technologies to:

  • keep you signed in (where applicable)

  • maintain session functionality

  • remember preferences

  • measure performance and diagnose issues

  • understand usage patterns to improve the Platform

    7.2 Cookie Controls. You can control cookies through your browser settings. Disabling cookies may affect functionality.

8. Data Security and Retention

8.1 Security. We implement reasonable administrative, technical and physical safeguards designed to protect personal information against misuse, interference and loss, and against unauthorised access, modification or disclosure.

No system is completely secure, and we cannot guarantee absolute security.

8.2 Retention. We retain personal information for as long as necessary to:

  • provide the Platform and Services
  • maintain business records
  • comply with legal obligations
  • resolve disputes and enforce agreements

Retention of Customer Data (including any personal information contained within it) is also governed by the Terms of Service, including how data is handled on suspension or termination.

8.3 Notifiable Data Breaches. We maintain an internal data breach response plan. If we experience an eligible data breach under Part IIIC of the Privacy Act 1988 (Cth), we will assess the incident and, where required, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

9. Children

9.1 Business Platform. The Platform is intended for business use and is not directed to children. We do not knowingly collect personal information from children.

9.2 Deletion. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it.

10. Overseas Storage and Disclosure

10.1 AWS Hosting. Customer Data (which may include personal information) is hosted on Amazon Web Services (AWS). We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, and we remain accountable under APP 8 for personal information disclosed to overseas recipients.

10.2 Cross-Border Safeguards. Where personal information is disclosed to overseas service providers, we implement contractual and technical safeguards designed to ensure that personal information is handled in accordance with Australian privacy law.

11. Access, Correction and Complaints

11.1 Access and Correction. You may request access to personal information we hold about you, or request correction of inaccurate personal information.

We will respond within a reasonable time and in accordance with the Privacy Act.

11.2 Complaints. If you believe we have mishandled personal information or breached the Australian Privacy Principles, you may lodge a complaint with us. We will investigate and respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

12. Changes to this Privacy Policy

12.1 Updates. We may update this Privacy Policy from time to time. If we make changes, we will update the Effective Date and may provide notice via the Platform or other reasonable means.

12.2 Material Changes. If we make material changes to how we collect, use or disclose personal information, we will provide direct notice to affected Users (for example, by email to the account holder) and, where required by law, seek fresh consent before those changes take effect.