Privacy Policy

Effective Date: 01/01/2020

Last Updated: 08/10/2026

Datad Pty Ltd (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our software-as-a-service (SaaS) platform, APIs, mobile applications, or related services (collectively, the “Services”).

1. Information We Collect

We collect information directly from you, automatically through your use of the Services, and from third-party sources.

A. Information You Provide Directly

• Account Registration & Profile: Name, work email address, phone number, username, password, company name, and job title.
• Billing & Payment Details: Billing address, tax ID, and payment card details (processed securely via our third-party payment processors; we do not store full payment card numbers).
• Customer Content & Support: Communications sent to our support teams, feedback, onboarding information, and files or data you upload to the Services.

B. Information Collected Automatically

• Log & Usage Data: IP address, browser type, operating system, referring URLs, access timestamps, feature interactions, and performance metrics.
• Device Telemetry: Device identifiers, system architecture, crash reports, and hardware models.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and web beacons used for session management, security, preferences, and analytics.

C. Information from Third Parties

• Integrations & Single Sign-On (SSO): Account metadata and tokens if you authenticate through third-party identity providers (e.g., Google Workspace, Microsoft Entra ID, GitHub).
• Business Enrichment: Business contact data from data enrichment partners, public directories, and referral sources.

2. How We Use Your Information

We process personal information for the following operational and commercial purposes:

Purpose	Legal Basis (GDPR / Global Standards)
Provisioning, operating, and maintaining the Services	Performance of a Contract
Processing transactions and invoicing	Performance of a Contract
Security monitoring, abuse detection, and authentication	Legitimate Interests / Legal Obligation
Product debugging, feature enhancement, and analytics	Legitimate Interests
Service announcements, security alerts, and support	Performance of a Contract / Legitimate Interests
Marketing communications (opt-out available at any time)	Consent / Legitimate Interests
Compliance with statutory tax, corporate, and legal duties	Legal Obligation

3. How We Share and Disclose Information

We do not sell personal data or rent user lists. Data is shared strictly under the following circumstances:

• Subprocessors and Service Providers: Third-party cloud infrastructure (e.g., AWS, Azure, GCP), database management, customer support tooling, error monitoring, and payment processors bound by confidentiality and Data Processing Agreements (DPAs).
• Enterprise Accounts: If you access the Services through an employer or enterprise domain, administrators may view telemetry, access logs, and account details.
• Corporate Transactions: In the event of a merger, acquisition, reorganization, bankruptcy, or asset sale, customer records may be transferred subject to existing privacy terms.
• Legal and Regulatory Compliance: Where required by enforceable subpoenas, court orders, or applicable law enforcement requests.

4. Data Security

We implement technical and organizational controls designed to protect personal data against unauthorized access, loss, alteration, or disclosure, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256).
• Role-based access control (RBAC), multi-factor authentication (MFA), and least-privilege administrative access.
• Network segmentation, vulnerability management, and routine audit logging.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, maintain active customer accounts, resolve disputes, enforce agreements, and comply with statutory legal and tax obligations. Upon account closure or termination of service, data is either securely deleted or anonymized within [e.g., 30 to 90 days], unless longer retention is required by statute.

6. International Data Transfers

If data is transferred across international borders, we ensure adequate protection through approved legal transfer mechanisms, such as standard contractual clauses (SCCs) or adequacy decisions recognized by relevant regulatory authorities.

7. Your Privacy Rights

Depending on your jurisdiction (such as the GDPR in Europe, DPDP Act in India, or CPRA/CCPA in California), you may hold the following statutory rights:

• Access & Portability: Request a copy of the personal data we hold about you in a structured, commonly used format.
• Rectification: Request correction of inaccurate, outdated, or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”), subject to statutory exceptions.
• Restriction & Objection: Object to or restrict specific processing operations, including direct marketing.
• Consent Withdrawal: Withdraw consent at any time where processing relies on consent.

To exercise these rights, submit a verifiable request to Privacy@datad.co.

8. Children’s Privacy

Our Services are designed exclusively for commercial enterprise and general professional audiences. We do not knowingly collect personal information from individuals under the age of 18 (or 16 depending on local jurisdiction). If we discover that an underage individual has registered an account, we will take prompt steps to delete the information.

9. Changes to This Privacy Policy

We may update this policy periodically to reflect product evolutions, operational shifts, or legal amendments. For material changes, we will provide advance notice via email or through prominent notifications within the application before modifications become effective.

10. Contact and Grievance Officer

For questions, requests, or grievances regarding this Privacy Policy or our data handling practices, contact our privacy office:

• Company Name: Datad INC
• Email: Privacy@datad.co