Privacy Policy
Last updated: June 2026
1. Introduction
Octavise ("we", "our", or "us") operates the Octavise analytics dashboard platform accessible at octavise.com.au. This Privacy Policy explains how we collect, use, store, and protect information when you use our services. By using Octavise, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect the following types of information: Account information: When you register for Octavise, we collect your email address and the credentials necessary to create and manage your account. Practice management data: With your explicit authorisation, Octavise connects to your practice management system (such as Nookal or Cliniko) and accesses selected practice management records required to produce aggregated, anonymised business metrics including appointment counts, revenue totals, patient counts, cancellation rates, and practitioner performance summaries. Advertising platform data: With your explicit authorisation, Octavise connects to your advertising accounts (such as Meta Ads and Google Ads) and retrieves campaign performance metrics including ad spend, impressions, clicks, conversions, and cost per result. We do not store patient names, email addresses, phone numbers, full dates of birth, addresses, clinical notes, or individual clinical records in the Octavise dashboard. Practice management data is processed to produce aggregated business metrics, and where patient continuity is required for reporting, Octavise uses pseudonymised or hashed identifiers rather than direct patient identifiers.
3. How We Use Your Information
We use the information we collect to: • Provide and operate the Octavise dashboard service • Display aggregated business performance metrics in your dashboard • Generate insights and analysis based on your aggregated data • Maintain and improve the platform • Communicate with you about your account and our services • Comply with legal obligations We do not sell your data to third parties. We do not use your data for advertising purposes.
4. Data Storage and Security
Your data is stored in Australia using Supabase's Sydney region (ap-southeast-2) infrastructure. We implement the following security measures: • Row Level Security (RLS) at the database level ensures each client's data is completely isolated and inaccessible to other clients • All data is encrypted at rest and in transit using HTTPS/TLS • API credentials and secrets are stored in encrypted environment variables and never exposed to the browser • Access to your dashboard requires authenticated login • We maintain read-only access to connected systems - we never modify, delete, or write data back to your practice management system or advertising accounts
5. Third-Party Services
Octavise integrates with the following third-party services to provide its functionality: • Nookal and Cliniko: Practice management systems. We access these services using API credentials you provide. We use selected practice management records only where required to produce aggregated dashboard metrics. • Meta Ads: We access your advertising data using OAuth 2.0 authorisation with read-only scope. We retrieve only campaign performance metrics. • Google Ads: We access your advertising data using OAuth 2.0 authorisation for the Google Ads API. Octavise only uses this access to retrieve campaign performance metrics. • Supabase: Our database provider. Data is stored in Australia (Sydney region). • Vercel: Our hosting provider. Application code is served from Vercel's infrastructure. Each third-party service is governed by their own privacy policy and terms of service.
6. Google Ads API Data
Octavise uses the Google Ads API to retrieve campaign performance data on behalf of authorised customers. Specifically: • We request the Google Ads API OAuth scope and use it only for reporting reads • We retrieve advertising performance metrics including campaign spend, impressions, clicks, conversions, click-through rate (CTR), cost per click (CPC), and other reporting metrics made available through the Google Ads API • We use Google Ads API data solely to provide reporting, analytics, attribution reporting, business intelligence, performance monitoring, and performance insights to the authorised customer • Octavise does not request, access, store, or process customer list data, remarketing audience data, or personally identifiable information from Google Ads accounts. Octavise only uses Google Ads reporting data needed to provide dashboard analytics • We do not create, modify, pause, resume, delete, or otherwise manage campaigns, ad groups, advertisements, keywords, budgets, bidding strategies, or any other advertising assets • We do not use Google Ads API data for advertising, remarketing, profiling, or marketing activities • We do not sell Google Ads API data or share Google Ads API data with third parties except where required to provide the Octavise service or where required by law • We do not use Google Ads API data to train artificial intelligence or machine learning models • Google Ads API data is stored only within the authorised customer's client-isolated environment and is not accessible to other Octavise customers • Customers may revoke Octavise's access to Google Ads at any time through their Google account permissions or by contacting Octavise.
7. Data Retention
We retain your account data for as long as your account is active. Aggregated snapshot data is retained to enable historical trend analysis in your dashboard. If you close your account, we will delete your personal account information and aggregated snapshot data within 30 days of your request, unless we are required to retain it for legal or regulatory purposes. You may request deletion of your data at any time by contacting us at https://octavise.com.au/contact.
8. Your Rights
Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to: • Access the personal information we hold about you • Request correction of inaccurate or incomplete information • Request deletion of your personal information • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act To exercise any of these rights, please contact us at https://octavise.com.au/contact.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Your continued use of Octavise after any changes constitutes your acceptance of the updated policy.
10. Contact Us
Contact: https://octavise.com.au/contact Website: https://octavise.com.au