Privacy Policy
This policy explains how we handle personal information when you visit attributable.ai, create an Attributable account, use our attribution services, or contact us. A customer using Attributable controls the marketing and commerce data submitted from its own properties; we process that data to provide the service.
Information we collect
- Account and business details, including names, work email addresses, company, website and authorised users.
- Billing and subscription records. Card details are collected and stored by Stripe, not by Attributable.
- Product usage, security and support information, including login activity, IP address, browser information, diagnostics and correspondence.
- Attribution event data submitted by customer websites and connected platforms, such as page and campaign information, order or lead identifiers, amounts, product data, click identifiers and approved customer matching fields. Depending on the integration, matching fields may be hashed before storage or delivery.
Why we use it
We use information to provide and secure the service, attribute marketing outcomes, deliver customer-authorised conversion events to connected platforms, manage subscriptions, provide support, monitor reliability, prevent abuse, comply with law and improve the product. We do not sell personal information.
Cookies and first-party measurement
Our site uses essential storage for account and security functions. Customer-installed Attributable tracking records first-party visit, campaign and click information according to that customer's configuration and consent obligations. Each customer is responsible for its own privacy notices and consent settings.
Service providers and disclosures
We disclose only what is reasonably necessary to providers that help operate Attributable, including Google Cloud for hosting and data processing, Stripe for payments, Resend for service email, and customer-selected advertising, analytics, ecommerce or marketing platforms. The optional AI Analyst sends an aggregated workspace KPI summary, not raw event records, to the configured AI provider when the workspace has opted in. We may also disclose information when required by law or as part of a business transaction subject to appropriate safeguards.
Overseas processing
Some providers and connected platforms process information outside Australia, including in the United States and other regions where they operate. We use contractual, access-control and security measures appropriate to the service and provider.
Security and retention
We use access controls, encryption in transit, restricted service identities, audit logging and tenant separation. No internet service is risk-free. We retain account, billing and event information for as long as needed to provide the service, meet legal obligations, resolve disputes and maintain legitimate business records, then delete or de-identify it. A customer's configured warehouse retention may differ.
Your choices and rights
You may ask to access or correct personal information we hold about you, close an account, or request deletion where applicable. You may also complain about our handling of personal information. We will verify requests and respond within a reasonable period. Some records may need to be retained by law or for legitimate security and billing purposes.
Contact
Email adam@121group.io with “Attributable privacy” in the subject. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
Changes
We will keep this policy current. Material changes will be shown here with a new effective date and, where appropriate, notified to account owners.