Privacy policy — Fathom Analytics

Cited by

Facts read from this source

• Entity Report an error

  “This privacy notice explains how we, Conva Ventures Inc. (the corporation behind Fathom Analytics), process personal data”

• Privacy officer Report an error

  “We have also formally appointed a Privacy Officer to help us stay continuously up to date with global data protection and privacy rules and regulations.”

• No data sales Report an error

  “We do not rent, buy or sell personal data from or to others, use automated decisions or profiling in the processing of your personal data, or process any special category data as per the GDPR Article 9.”

• Lawful bases Report an error

  “Your consent We have a contractual obligation (contract) We have a legal obligation We have a legitimate interest”

• Retention canadian tax Report an error

  “One example is the Canadian Income Tax Act, where we are required to retain data for as long as someone is a customer and then for at least six years.”

• Trial length Report an error

  “We want you to be able to try Fathom Analytics before you spend money, which is why we offer a 7-day free trial.”

• Trial requirements Report an error

  “To get access, you need to share your email address and billing address, set a password, select your preferred plan, and enter your payment card details. Your card will be charged at the end of your trial unless you have cancelled your account.”

• Trial retention Report an error

  “We review this data at our regular GDPR audits and delete personal data as appropriate; however, no later than two years after you signed up for the trial.”

• Support AI Report an error

  “We also use an AI provider to help us answer you. When you email us, it drafts a reply, and a person on our team reviews every reply before it’s sent. When you use the help chat in your Fathom dashboard, it answers your messages directly.”

• Communications retention Report an error

  “We typically keep this type of personal data for up to two years or six years if we have a legal obligation in accordance with accounting and bookkeeping rules.”

• Partners program Report an error

  “If you participate in our Partners program, we process bank details and invoice PDFs when you submit a payout claim (note that we do not share any personal data about the referrals you’ve made).”

• Website no cookies Report an error

  “We don’t use cookies or similar technology on our website, and we don’t collect any personal data that would trigger the consent requirement under the ePrivacy Directive (Directive 2009/136/EC).”

• Website ddos logs Report an error

  “Following a significant DDoS (Distributed Denial of Service) attack, we were also forced to start keeping partial access logs. We don’t keep track of which pages are viewed, only the time & total requests per IP.”

• Purposes Report an error

  “We use data processors for: Email, calendar and digital meetings Accounting/bookkeeping This website, including online payments providers Transactional emails to customers Support ticket system AI that drafts support replies and answers questions in our in-app help chat”

• Stripe Report an error

  “We practice data minimization, so we will only use data suppliers to process your personal data when required (e.g. Stripe for payment processing).”

• Not published Report an error

  “We don’t publish further details (like names) of our data processors to protect our business.”

• Data isolation Report an error

  “We use Data Isolation which is available to all customers on all plans.”

• Breach notification Report an error

  “we will notify the national data authority within 72 hours. If the risk is deemed high for the people affected, we will inform them directly, if possible.”

• Processor role Report an error

  “When you use Fathom Analytics on your website, we process data from your website visitors on your behalf. In this case, you are the controller of such data, and we are a data processor of yours.”

• Subprocessor changes Report an error

  “We also engage other (sub)processors as per your general written authorization and will inform you of any intended changes regarding such (sub)processors to object to such changes, should you not agree to them.”

• Minimal data processed Report an error

  “we have minimized the amount of personal data being processed to only include the IP address and User-Agent (in line with one of the fundamental principles of the GDPR; Article 5(1)(c)).”

• Eprivacy no consent Report an error

  “IP addresses provided in that manner are therefore outside the scope of Article 5 (3), and the consent requirement will not apply under the ePrivacy Directive (Directive 2009/136/EC).”

• EU infrastructure Report an error

  “We process EU visitor data through EU infrastructure - learn more about data isolation here.”

• Reply time Report an error

  “You are entitled to a reply within 30 days.”

• Address Report an error

  “Conva Ventures Inc. 26 Bastion Square, Third Floor Burnes House, Victoria, British Columbia, V8W 1H9, Canada.”

• Updated Report an error

  “This privacy notice was last updated: October 2, 2026”

• GDPR project Report an error

  “In May 2020, we further solidified our privacy efforts with a comprehensive GDPR project led by a European-based GDPR consulting company.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Developer Consent-free operation & data minimisation
• The Agency Developer European sovereignty
• The Data Protection Officer Consent-free operation & data minimisation
• The Data Protection Officer European sovereignty
• The E-Commerce Marketing Lead Consent-free operation & data minimisation
• The E-Commerce Marketing Lead European sovereignty
• The Growth Analyst Consent-free operation & data minimisation
• The Growth Analyst European sovereignty
• The Public-Sector Site Owner Consent-free operation & data minimisation
• The Public-Sector Site Owner European sovereignty
• The Skeptic Consent-free operation & data minimisation
• The Skeptic European sovereignty