Privacy Policy
Last Updated: January 2026
Your privacy matters to us. This policy explains how we collect, use, and protect your personal information.
1. Introduction
Achivly Pty Ltd ("Achivly," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our appointment scheduling platform and related services. By using Achivly, you consent to the data practices described in this policy. We comply with the Australian Privacy Principles (APPs), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) where applicable.
2. Information We Collect
We collect information that you provide directly and information collected automatically:
- •Account Information: Full name, email address, phone number, business name, business address, industry type, and role/position
- •Billing Information: Payment card details (processed securely by Stripe), billing address, and transaction history
- •Business Data: Customer/client information you store, appointment schedules, staff details, services, products, inventory, and invoices
- •Usage Data: Features accessed, actions taken, time spent, search queries, and interaction patterns within the platform
- •Technical Data: IP address, browser type and version, device identifiers, operating system, referring URLs, and access timestamps
- •Communications: Support tickets, feedback, emails, and any other communications with our team
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:
- •Contract Performance: Processing necessary to provide the Service you requested and fulfill our contractual obligations
- •Consent: Where you have given explicit consent for specific processing activities, such as marketing communications
- •Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services, preventing fraud, and ensuring security
- •Legal Obligation: Processing required to comply with applicable laws, regulations, or legal processes
4. How We Use Your Information
We use the information we collect for the following purposes:
- •Service Delivery: Provide, operate, and maintain the Achivly platform and its features
- •Transaction Processing: Process payments, send invoices, and manage subscriptions
- •Service Improvement: Analyze usage patterns, conduct research, and develop new features
- •Personalization: Customize your experience and provide relevant recommendations
- •Communications: Send service updates, security alerts, support messages, and transactional emails
- •Marketing: Send promotional materials and newsletters (with your consent, where required)
- •Security: Detect, prevent, and respond to fraud, abuse, and security incidents
- •Legal Compliance: Comply with applicable laws, regulations, and legal processes
- •Analytics: Generate aggregated, anonymized insights for business intelligence and benchmarking
5. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your data in the following circumstances:
- •Service Providers: Trusted third-party vendors who assist us in operating the Service (e.g., AWS for hosting, Stripe for payments, Resend for email delivery, Twilio for SMS). These providers are contractually bound to protect your data.
- •Integrations: Third-party applications you choose to connect, subject to those providers' privacy policies
- •Legal Requirements: When required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights or the safety of others
- •Business Transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, where your data may be transferred to the successor entity
- •With Your Consent: In any other situation with your explicit authorization
6. International Data Transfers
Achivly operates globally and may transfer your personal data to countries outside your country of residence, including Australia and the United States. When we transfer data internationally, we implement appropriate safeguards to ensure your data remains protected, including Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules, and other mechanisms compliant with applicable data protection laws. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
7. Data Security
We implement comprehensive security measures to protect your personal information, including: encryption of data in transit (TLS 1.2+) and at rest (AES-256), secure cloud infrastructure with SOC 2 compliance, regular security assessments and penetration testing, access controls and authentication mechanisms, employee security training and confidentiality agreements, and incident response procedures. While we strive to protect your data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but will promptly notify you of any breach affecting your personal information as required by law.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including: while your account is active and you continue to use the Service, as needed to provide customer support and resolve disputes, to comply with legal obligations, tax requirements, and audit purposes (typically 7 years for financial records), and to enforce our agreements and protect our legal rights. Upon account termination, we retain your data for 30 days to allow for data export, after which it is scheduled for secure deletion. Some anonymized or aggregated data may be retained indefinitely for analytics purposes.
9. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- •Right to Access: Request a copy of the personal data we hold about you
- •Right to Rectification: Request correction of inaccurate or incomplete data
- •Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- •Right to Restriction: Request that we limit how we use your data
- •Right to Data Portability: Receive your data in a structured, machine-readable format
- •Right to Object: Object to processing based on legitimate interests or for direct marketing
- •Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- •Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise these rights, contact us at support@achivly.com. We will respond to your request within 30 days (or as required by law). We may need to verify your identity before processing your request.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- •Right to Know: Request disclosure of the categories and specific pieces of personal information we collected, the sources, purposes, and third parties with whom we shared it
- •Right to Delete: Request deletion of your personal information, subject to certain exceptions
- •Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (note: we do not sell your data)
- •Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
- •Right to Correct: Request correction of inaccurate personal information
- •Right to Limit: Limit the use and disclosure of sensitive personal information
To submit a CCPA request, email support@achivly.com or use our in-app privacy settings. You may designate an authorized agent to make requests on your behalf.
11. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
- •Essential Cookies: Required for the Service to function properly (e.g., authentication, security)
- •Functional Cookies: Remember your preferences and settings
- •Analytics Cookies: Help us understand how users interact with the Service (e.g., Google Analytics)
- •Marketing Cookies: Used to deliver relevant advertisements (only with your consent)
You can control cookies through your browser settings or our cookie preference center. Disabling certain cookies may limit functionality. We honor "Do Not Track" browser signals where technically feasible.
12. Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services you access. Third-party integrations you enable are subject to those providers' terms and privacy policies.
13. Children's Privacy
The Achivly Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete such information. If you believe a child has provided us with personal information, please contact us at support@achivly.com.
14. Automated Decision-Making
We may use automated systems to analyze data for fraud prevention, security, and service optimization. We do not make solely automated decisions that significantly affect you without human oversight. If you believe an automated decision has adversely affected you, you have the right to request human review by contacting support@achivly.com.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on our website with a new "Last Updated" date. For material changes, we will provide prominent notice (e.g., email notification, in-app banner) at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: support@achivly.com, Support: support@achivly.com, Address: Achivly Pty Ltd, Sydney, NSW, Australia. For GDPR inquiries, you may also contact our Data Protection representative. We aim to respond to all inquiries within 30 days.
Ready to get started?
Join thousands of businesses who trust us with their data