This Privacy Policy explains what personal information Thoth collects about you, why we collect it, and what we do with it. We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. The short version
We collect the minimum needed to provide our services and reply to your messages. We don't sell your data. We don't run third-party trackers on this site. We host in Australia by default and tell you when we don't.
2. What we collect
- What you send us. Name, email address, business name, and the contents of any message you submit through the contact form or by email.
- Account information. If you become a client: billing details, domain ownership records, and credentials needed to manage the services you've signed up for.
- Server logs. Standard web logs — IP address, timestamp, requested URL, user agent — kept for security and debugging.
3. How we use it
We use your information to deliver the services you've engaged us for, reply to your enquiries, issue invoices, and meet our legal obligations (tax, record-keeping). We don't profile you, run marketing automations, or build a list to sell.
4. Who we share it with
We share information only with the providers we need to run the service:
- Infrastructure partners — the data centres and VPS providers your site runs on. Australian providers by default.
- Payment processor — for invoicing and card processing.
- Email delivery — for transactional emails (invoices, alerts, replies).
If a law-enforcement request is properly made, we'll comply. We won't volunteer your data.
5. Cookies & analytics
This website itself sets no third-party tracking cookies and runs no third-party analytics. We may store small, first-party preferences locally in your browser (e.g. whether you've chosen "plain English" or "technical" view).
6. Data on hosted sites
If you're a Hosting, Managed or Enterprise client, the websites and applications you host with us may collect their own data from their visitors. That data is yours and your responsibility — Thoth is a processor, not a controller. Make sure your own privacy notice reflects what your site collects.
7. Your rights
You can ask to see what we hold about you, ask us to correct it, or ask us to delete it (subject to legal retention requirements). Email hello@thoth.au and we'll respond within 30 days.
8. How long we keep it
Enquiry emails: kept while still relevant, deleted within 24 months if no engagement results. Client data: kept while you're a client and for 7 years after the last invoice, as required for tax records. Server logs: 90 days. Backups: 14 days on Hosting and Managed, longer if scoped on Enterprise.
9. Contact
Privacy questions and requests: hello@thoth.au. If you're unhappy with how a request was handled, you can complain to the Office of the Australian Information Commissioner.
Plain-English summary: we collect the bare minimum, never sell it, and tell you exactly where it goes. Questions: hello@thoth.au.