1. Who we are
Attova is operated by Techloom Solutions. We provide software for session-based education businesses to manage attendance, classes, billing, and parent communication.
For service-related terms, see our Terms of Service.
Privacy enquiries: legal@attova.com.au
2. Scope of this policy
This policy applies when you:
- visit the Attova website or marketing pages;
- create or use an Attova account as a centre owner, administrator, or teacher;
- access a parent or guardian portal linked to a student account;
- communicate with us about the service.
If you are a centre using Attova, you are typically the data controller for student and parent information you upload. Attova acts as a data processor on your instructions, except where we determine purposes and means of processing for our own account, billing, security, or product operations.
3. Personal data we collect
Depending on how you use Attova, we may process:
- Account data: name, email address, password hash, role, organisation membership, and profile settings.
- Organisation data: centre name, billing settings, invoice preferences, and team member invitations.
- Student and family data: names, contact details, class enrolments, attendance records, notes, and invoice or payment history entered by your centre.
- Usage data: log files, device and browser information, IP address, pages viewed, and feature interactions.
- Communications: support requests, feedback, and service notifications.
- Payment-related data: billing contact details and transaction records where paid plans are used. Card details are handled by our payment providers, not stored directly by us where possible.
4. How we use personal data
We use personal data to:
- provide, operate, and maintain Attova;
- authenticate users and enforce access controls by role;
- generate attendance records, invoices, and reports for your centre;
- send transactional emails such as invitations, receipts, and account alerts;
- improve reliability, security, and product performance;
- comply with legal obligations and respond to lawful requests;
- market Attova to prospective customers where permitted, with opt-out options.
5. How we handle personal information
Attova is operated from Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We collect and use personal information to:
- Provide the service: operate your account and deliver the features you or your organisation requested.
- Keep Attova secure and reliable: prevent abuse, investigate incidents, and improve the product.
- Communicate with you: send service notifications, support responses, and, where permitted, marketing with opt-out options.
- Meet legal obligations: retain or disclose information where required by Australian law or a valid legal request.
Where the Privacy Act requires consent — for example, for certain direct marketing or non-essential cookies — we will ask before collecting or using your information for that purpose.
6. How we share data
We do not sell personal data. We may share information with:
- Service providers that host infrastructure, provide authentication, deliver email, process payments, or supply analytics — only as needed to operate Attova.
- Your organisation's authorised users according to role permissions you configure.
- Professional advisers or authorities where required by law or to protect rights, safety, and security.
- Successors in the event of a merger, acquisition, or asset transfer, subject to appropriate safeguards.
7. Overseas disclosure
Attova is based in Australia. We primarily store and process personal information in Australia, but some of our infrastructure, authentication, email, payment, and analytics providers may handle data in other countries where they operate.
Before we disclose personal information to an overseas recipient, we take reasonable steps under APP 8 to ensure the recipient handles the information in a way that is consistent with the APPs, or we otherwise comply with the Privacy Act.
8. Data retention
We retain personal data for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Centres may delete or export certain records according to product functionality and their own policies.
When an account is closed, we will delete or anonymise data within a reasonable period, unless retention is required by law or legitimate business needs such as security logs.
9. Security
We implement technical and organisational measures designed to protect personal data, including access controls, encryption in transit, and monitoring. No online service can be guaranteed completely secure, so you should also protect your credentials and devices.
10. Children and student data
Attova is intended for use by education businesses and their authorised staff. Student and child data is typically entered by the centre or parent/guardian under the centre's responsibility.
Centres must ensure they have a lawful basis to share student information with Attova and to communicate with parents or guardians through the platform.
11. Your rights
Under the Privacy Act, you may request access to the personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
If Attova handles student or parent information on behalf of your centre, contact your centre first. We will help centres respond to privacy requests as required by the Privacy Act and our agreements with them.
If you have a privacy concern, contact us at legal@attova.com.au. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Cookies and similar technologies
We use essential cookies and similar technologies to keep you signed in, protect the service, and remember preferences. We may also use analytics tools to understand how the product is used.
Where non-essential cookies require consent, we will ask before placing them. You can manage cookies through your browser settings, though some features may not work correctly if essential cookies are disabled.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the service or by email where appropriate. The "Last updated" date at the top of this page shows when it was last revised.
14. Contact
For privacy questions or requests, contact legal@attova.com.au.
Questions about this document? Return to Attova