Ontollo builds software that turns scattered signals, business drivers, and knowledge into an operational graph that AI can act on. This policy explains what information we collect when you visit our website or use our platform, how we use it, who we share it with, and the choices and rights you have. We believe privacy is a baseline, not a feature.
1. Who we are
Ontollo PTY LTD (ABN 35 693 867 917) ("Ontollo", "we", "us", or "our") is the controller responsible for your personal information under this policy. We are an Australian company based at 15/4 Banksia, Byron Bay, NSW 2481, Australia, with operations in Australia and San Francisco, California, and we serve customers around the world.
For any privacy question, or to exercise your rights, contact us at hello@ontollo.com or by post at 15/4 Banksia, Byron Bay, NSW 2481, Australia.
2. Scope & the laws we follow
This policy applies to the Ontollo website, our product and platform, and our sales, marketing, and support activities. Because we operate globally, we have designed it to meet the requirements of the major privacy frameworks that may apply to you, including:
- Australia's Privacy Act 1988 and the Australian Privacy Principles (APPs);
- New Zealand's Privacy Act 2020;
- U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and comparable laws in states such as Virginia, Colorado, Connecticut, Texas, and others;
- Canada's PIPEDA.
Where a specific law gives you additional rights, those rights are described in the Your privacy rights section below.
3. Information we collect
Information you give us directly
Such as your name, email address, company, job title, and phone number when you sign up, request a demo, subscribe, or contact us. If you become a paying customer, we also collect billing information — your card details are handled by our payment processor, and we do not store them.
Information we collect automatically
Such as your IP address, approximate location, browser and device type, referring pages, the pages you visit, and how you interact with our site and product. We collect this through cookies and similar technologies, described in the Cookies & tracking section. Non-essential cookies load only after you consent.
Information you send us
Anything you share through support requests, forms, emails, or other communications.
Information from third parties
We may receive limited information from our service providers (for example, our CRM and marketing tools) and, where you have engaged with us, from business-contact and enrichment sources, consistent with applicable law.
We do not knowingly collect information from anyone under 16, and our services are not directed at children.
4. How we use it & our legal bases
We use your information to:
- Run, secure, and improve our website and product;
- Set up and manage your account and provide the services you request;
- Process payments;
- Respond to your questions and support requests;
- Send you product updates and marketing (you can opt out at any time);
- Understand how people use our site so we can make it better;
- Prevent abuse and keep our systems secure; and
- Meet our legal obligations.
You can opt out of marketing at any time, and we set non-essential cookies only with your consent, which you can withdraw whenever you like.
5. Cookies & tracking
We use a small number of essential cookies that are required for the site to function. We also use non-essential cookies for analytics and marketing — for example, HubSpot (our forms, CRM, and site analytics) and Google Analytics (site-usage measurement). Any other analytics or advertising partners we may use (which could include providers such as Meta or LinkedIn) are treated the same way.
Non-essential cookies load only after you accept them through our cookie banner. If you decline, or ignore the banner, we do not set analytics or marketing cookies. You can change your choice at any time using the Cookie settings link in the footer, or by clearing your cookies. Where your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we treat it as a request to opt out of non-essential cookies and "sharing" for targeted advertising.
6. How we share information
We do not sell your personal information for money. We share it only with:
- Service providers who help us run Ontollo — for example our CRM and marketing platform (HubSpot), our analytics provider (Google Analytics), our hosting and content-delivery provider (Vercel), and our payment processor — each bound by contracts that limit how they may use your data;
- Analytics and advertising partners, where we use them for campaign measurement or retargeting, and only after you have consented to non-essential cookies;
- Authorities or other parties, if required by law or to protect the rights, property, or safety of Ontollo, our users, or others; and
- A buyer, if Ontollo is ever involved in a merger, acquisition, or sale of assets — your information may transfer as part of that transaction, subject to this policy.
Some data-sharing for targeted advertising may count as "sharing" (or a "sale") under certain U.S. state laws even where no money changes hands. You can opt out at any time by declining non-essential cookies or by sending a GPC signal.
7. International data transfers
Because we operate across Australia, the United States, New Zealand, and elsewhere, your information may be processed in a country other than your own — including the United States, where several of our service providers are based. When we transfer personal information overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable law, and that the recipients protect it appropriately. You may request more information using the contact details below.
8. How long we keep it
We keep your information for as long as we need it to provide our services, meet our legal obligations, resolve disputes, and enforce our agreements. When we no longer need it, we delete or de-identify it. Retention periods vary by the type of data and the purpose for which it was collected.
9. Your privacy rights
Depending on where you live, you have some or all of the following rights over your personal information. We will not discriminate against you for exercising them, and we will respond within the timeframe the applicable law requires.
Australia Privacy Act / APPs
You can ask to access or correct your personal information. If you are unhappy with our response, you can raise it with the Office of the Australian Information Commissioner (OAIC).
New Zealand Privacy Act 2020
You have the right to access and correct your information, and to know how and why we collected it. You can raise concerns with the Office of the Privacy Commissioner.
United States CCPA/CPRA & state laws
Depending on your state, you may have the right to know what we have collected, obtain a copy of it, correct it, delete it, and opt out of targeted advertising or the "sale" or "sharing" of your data. We do not sell data for money, but our use of advertising cookies may count as "sharing" under some state laws. You can opt out anytime by declining non-essential cookies in our banner or via a Global Privacy Control signal, and we will not discriminate against you for doing so.
Canada PIPEDA
You have the right to access and correct your personal information and to challenge our handling of it. You may also contact the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, email us at hello@ontollo.com. We may need to verify your identity before we act on your request, and you may use an authorized agent where the law allows.
10. Security
We use reasonable technical and organizational safeguards to protect your information. No system is completely secure, but we take this seriously and continually work to improve our protections.
11. Children
Our services are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
12. Third-party links
Our site may link to other websites. We are not responsible for their privacy practices, so it is worth reviewing their policies too.
13. Automated decisions
We do not use your personal information to make decisions that produce legal or similarly significant effects about you solely by automated means without human involvement. If this ever changes, we will update this policy and, where required, obtain your consent or provide the safeguards the law requires.
14. Changes to this policy
We will update this page if our practices change, and we will revise the date at the top. If a change is significant, we will take reasonable steps to let you know.
15. Contact us
Questions about this policy or your data? Email us at hello@ontollo.com, or write to us at 15/4 Banksia, Byron Bay, NSW 2481, Australia.