Privacy Policy

1. Introduction

Tanglo ("we," "our," or "us") is a product of Mellosoft Pty Ltd. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document intelligence platform, website, and related services (collectively, the "Service"). By accessing or using the Service you agree to this Privacy Policy.

2. Types of Information

The Privacy Act 1988 (Cth) defines "Personal Information" as information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether it is recorded in a material form or not.

"Sensitive Information" is a subset of Personal Information that includes information about an individual's racial or ethnic origin, political opinions, religious beliefs, trade union membership, sexual orientation, criminal record, health information, and biometric data, among other categories defined in the Act.

Where we collect Sensitive Information, we will only use or disclose it for the primary purpose for which it was collected, a directly related secondary purpose, or with your consent or as required or authorised by law.

3. Information We Collect

We collect the following categories of information:

• Account information — name, email address, and authentication credentials when you register or sign in via Google OAuth.
• Uploaded content — documents and files you upload for processing by our document extraction engine.
• Usage data — pages visited, features used, search queries, API calls, and related analytics.
• Device and log data — IP address, browser type, operating system, and access timestamps collected automatically.
• Billing information — payment details are processed and stored by our payment processor, Stripe. We do not store full credit card numbers.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process documents through our document extraction engine and deliver results.
• Manage your account, subscriptions, and billing.
• Respond to support requests and communicate service updates.
• Monitor usage for security, fraud prevention, and abuse detection.
• Improve and develop new features based on aggregated, anonymised usage patterns.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers — cloud infrastructure (AWS), payment processing (Stripe), and analytics providers who assist in operating the Service under contractual obligations.
• Legal requirements — when required by law, regulation, or legal process, or to protect the rights, safety, or property of Tanglo and its users.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement enterprise-grade security measures to protect your data, including encryption in transit (TLS) and at rest (AES-256), isolated multi-tenant architecture, and regular security reviews. We require DPAs with all sub-processors who handle customer data. While no system is 100% secure, we are committed to protecting the confidentiality and integrity of your information.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete a document, it is removed from active storage within 30 days. Account data is retained for up to 90 days after account closure to comply with legal and audit obligations, after which it is permanently deleted.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Object to or restrict certain processing activities.

To exercise any of these rights, contact us at legal@tanglo.ai.

9. Cookies and Tracking

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies. Analytics data is collected in aggregate form and does not track individual users across other websites.

10. International Transfers

Our Service is hosted on AWS infrastructure in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for any cross-border data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Complaint Procedure

If you believe your privacy has been breached or you have a complaint about how we have handled your Personal Information, please contact us at legal@tanglo.ai.

All complaints will be taken seriously and investigated. We may need to contact you to seek further information about your complaint. If we receive a complaint that we consider well-founded, we will take appropriate steps to rectify the issue.

If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

If you have questions about this Privacy Policy, contact us at legal@tanglo.ai.