Privacy Notice

Ishtiga.com ("Ishtiga", "we", "us") operates the Ishtiga service and is the data controller for the personal data described in this notice. Contact: support@ishtiga.com.

• Account data — name, email address, and sign-in credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Your content — documents, website imports, questions, and chat history you add to the service, used to provide the service to you (legal basis: contract).
• Usage and technical data — feature usage, plan consumption, device identifiers, IP address, and log data, used to operate, secure, and improve the service and to prevent fraud (legal basis: legitimate interests).
• Support messages — when you contact us, we keep the conversation to help you and improve our support (legal basis: legitimate interests).
• Marketing — if you opt in, we use your email to send product updates (legal basis: consent, which you can withdraw at any time).

Payment details are collected and processed by Paddle, our Merchant of Record, not by us; see section 3.

• Service providers — hosting, database, AI processing, and analytics providers that process data on our behalf under contract.
• Paddle — our Merchant of Record (Paddle.com), which receives the data needed for the sale of our product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — lawyers and accountants, where needed.
• Authorities — where we are required by law.

Some of these recipients are located outside Australia, the UK, and the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep personal data only for as long as needed for the purposes above — generally for the life of your account plus a short period for backups, legal, and accounting obligations. Data is deleted or anonymised when it is no longer needed.

Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email support@ishtiga.com — we respond within one month. You also have the right to complain to your local data protection authority (in Australia, the Office of the Australian Information Commissioner).

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level isolation between customer workspaces, to protect personal data against unauthorised access, loss, or misuse.

We use essential cookies and local storage to keep you signed in and remember your preferences (such as theme). We do not use advertising cookies. You can clear or block cookies in your browser settings; essential cookies are required for the service to function.

If we change this notice, we will update the date above and, for significant changes, notify you by email or in the app.