Privacy Policy

Attova is operated by Techloom Solutions. We provide software for session-based education businesses to manage attendance, classes, billing, and parent communication.

For service-related terms, see our Terms of Service.

Privacy enquiries: legal@attova.com.au

This policy applies when you:

• visit the Attova website or marketing pages;
• create or use an Attova account as a centre owner, administrator, or teacher;
• access a parent or guardian portal linked to a student account;
• communicate with us about the service.

If you are a centre using Attova, you are typically the data controller for student and parent information you upload. Attova acts as a data processor on your instructions, except where we determine purposes and means of processing for our own account, billing, security, or product operations.

Depending on how you use Attova, we may process:

• Account data: name, email address, password hash, role, organisation membership, and profile settings.
• Organisation data: centre name, billing settings, invoice preferences, and team member invitations.
• Student and family data: names, contact details, class enrolments, attendance records, notes, and invoice or payment history entered by your centre.
• Usage data: log files, device and browser information, IP address, pages viewed, and feature interactions.
• Communications: support requests, feedback, and service notifications.
• Payment-related data: billing contact details and transaction records where paid plans are used. Card details are handled by our payment providers, not stored directly by us where possible.

We use personal data to:

• provide, operate, and maintain Attova;
• authenticate users and enforce access controls by role;
• generate attendance records, invoices, and reports for your centre;
• send transactional emails such as invitations, receipts, and account alerts;
• improve reliability, security, and product performance;
• comply with legal obligations and respond to lawful requests;
• market Attova to prospective customers where permitted, with opt-out options.

Where UK or EU data protection law applies, we rely on one or more of the following:

• Contract: processing needed to provide the service you or your organisation requested.
• Legitimate interests: securing the platform, preventing abuse, and improving the product, balanced against your rights.
• Consent: where required, such as optional marketing communications or non-essential cookies.
• Legal obligation: where we must retain or disclose information by law.

We do not sell personal data. We may share information with:

• Service providers that host infrastructure, provide authentication, deliver email, process payments, or supply analytics — only as needed to operate Attova.
• Your organisation's authorised users according to role permissions you configure.
• Professional advisers or authorities where required by law or to protect rights, safety, and security.
• Successors in the event of a merger, acquisition, or asset transfer, subject to appropriate safeguards.

Attova may process data in the United Kingdom and other countries where our providers operate. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We retain personal data for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Centres may delete or export certain records according to product functionality and their own policies.

When an account is closed, we will delete or anonymise data within a reasonable period, unless retention is required by law or legitimate business needs such as security logs.

We implement technical and organisational measures designed to protect personal data, including access controls, encryption in transit, and monitoring. No online service can be guaranteed completely secure, so you should also protect your credentials and devices.

Attova is intended for use by education businesses and their authorised staff. Student and child data is typically entered by the centre or parent/guardian under the centre's responsibility.

Centres must ensure they have a lawful basis to share student information with Attova and to communicate with parents or guardians through the platform.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability or withdrawal of consent where processing is consent-based.

If Attova processes student or parent data on behalf of your centre, please contact your centre first. We will assist centres with data subject requests as required by applicable law and our agreements with them.

You may also lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

We use essential cookies and similar technologies to keep you signed in, protect the service, and remember preferences. We may also use analytics tools to understand how the product is used.

Where non-essential cookies require consent, we will ask before placing them. You can manage cookies through your browser settings, though some features may not work correctly if essential cookies are disabled.

We may update this Privacy Policy from time to time. Material changes will be communicated through the service or by email where appropriate. The "Last updated" date at the top of this page shows when it was last revised.

For privacy questions or requests, contact legal@attova.com.au.