Privacy policy

This policy explains how Thind Ventures Ltd. (“we”, “us”), operating as Athon Labs, collects and uses personal information when you visit athonlabs.com or contact us through the site.

Who is responsible

The data controller is Thind Ventures Ltd. For privacy questions or requests, email harry@athonlabs.com.

Information we collect

• Contact requests. When you use the contact form we collect your work email, company name, the type of help you need, and any optional details you provide.
• Savings breakdown emails. When you ask us to email a savings estimate from the calculator, we collect your work email, optional company name, and the calculator inputs you entered.
• Company lookup. If you enter a work email on the contact page, we look up your email domain via logo.dev to show a company name and logo. We do not store that lookup result on our servers beyond what is needed to render the page during your visit.
• Technical data. Our hosting provider (Cloudflare) may process standard server logs such as IP address, browser type, and pages viewed to deliver and protect the site.

How we use information

• Reply to enquiries you submit through the site.
• Send the savings breakdown you requested.
• Operate, secure, and improve the website.
• Keep a record of business correspondence where needed.

We do not add you to a newsletter or marketing list. Emails we send in response to your request are transactional only.

Legal bases (where applicable)

• Consent — when you submit a form or ask us to email you a breakdown.
• Legitimate interests — to respond to business enquiries, secure the site, and understand how the site is used.

Sharing and processors

We share information only as needed to run the site and respond to you:

• Cloudflare — hosting, CDN, and security.
• logo.dev — company name and logo lookup by email domain.
• Our email delivery provider — to send replies and savings breakdowns.

We do not sell personal information.

Workforce platforms we build

Case studies on this site describe custom workforce platforms we have built for clients (for example, gate check-in and emergency headcount). When we host such a platform:

• What is captured at the gate. A photo and timestamp linked to the worker's shift record — used for attendance, payroll reconciliation, and emergency muster. We do not run automated facial recognition or biometric matching unless that is separately agreed in writing with the client.
• Who controls worker data. The client operating the site (for example, the employer or site operator) is typically the data controller for worker and visitor information. We act as a processor when we build or host the platform, handling data only under the client's instructions and our agreement with them.
• Retention. Gate photos and attendance records are kept for as long as needed for payroll, safety, and audit purposes defined in the client agreement — typically aligned with shift and payroll record retention — then deleted or anonymised when no longer required.
• Subprocessors. Hosted platforms may use Cloudflare for infrastructure and security. Other subprocessors are listed in the client's data-processing agreement and available to their privacy or security teams on request.
• Security. We apply access controls, encryption in transit, and least-privilege access to hosted systems. We do not currently hold SOC 2 Type II certification; security practices for enterprise deployments are documented in client agreements and available on request.

If you are a worker or visitor whose data is processed through a platform we built, contact the site operator first. They can reach us at harry@athonlabs.com for processor support.

Retention

We keep contact and savings submissions for as long as needed to respond, maintain a business record, and meet legal obligations, then delete or anonymise them when no longer required.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, and to withdraw consent where processing is consent-based. Canadian residents may have rights under PIPEDA; UK and EEA residents may have rights under UK/EU GDPR. To exercise these rights, contact us at harry@athonlabs.com.

Email and CASL

If you are in Canada, messages we send in direct response to your request are consistent with Canada's Anti-Spam Legislation (CASL). We will not send promotional email unless you separately opt in.

Changes

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do.