Edge Mode active: data sealed locally
Log in Book a demo
Trust · Privacy · v1.0 · effective 1 May 2026

Privacy policy.

Parallax Industries Pty Ltd ("Parallax", "we") is bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth). This policy explains how we collect, use, store, and disclose personal information when you use ParallaxOS.

Plain-language summary, not a substitute for the policy. We collect what we need to operate a rail compliance platform — no more. We host data in Australia. We don't sell data. Customers own their tenant's data and can export or delete it. Where we act as a processor (handling worker data on behalf of a subcontractor), the subcontractor is the data controller.

1 · Who we are

Parallax Industries Pty Ltd, an Australian proprietary company. Our trading name is ParallaxOS. The Privacy Officer can be reached at privacy@parallaxos.com.au.

2 · What we collect

  • Account information: name, business email, role, employer.
  • Worker compliance data: RIW card numbers, certifications, medical category and expiry, FAID scoring inputs, photo IDs where required by network.
  • Operational records: timesheets with GPS coordinates, pre-start checklists, D&A test results, incident reports.
  • Device & technical: device fingerprint, app version, IP address, user agent.
  • Communications: messages, AI agent queries, support tickets.

3 · Why we collect it

To operate ParallaxOS for your employer (the customer), to comply with our obligations under the Rail Safety National Law, and to defend the integrity of the cryptographic record seal. We do not use personal information for advertising or sell it to third parties.

4 · Where it's stored

In Australia (AWS Sydney region). Data does not leave Australia except for narrow purposes — for example, AI agent queries are routed through the Anthropic Claude API (USA) and are scoped per-tenant; Sentry error reports may include redacted stack traces processed in the EU/USA.

5 · How long we keep it

Operational records are retained for as long as is needed to meet rail compliance obligations (typically 7 years from creation). Account information is retained while your account is active. On account closure, data is retained for 90 days then deleted, subject to lawful retention requirements.

6 · Your rights

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to correct information that is inaccurate.
  • Deletion / erasure — subject to overriding compliance retention obligations.
  • Complaint — raise a privacy complaint with us in the first instance, or escalate to the OAIC.

7 · Cookies & analytics

The ParallaxOS web app uses essential cookies for authentication. Marketing analytics on www.parallaxos.com.au is privacy-respecting (PostHog, EU region) and respects Do Not Track. Customer tenants can opt out of analytics on Enterprise.

8 · Contact

Privacy questions: privacy@parallaxos.com.au
OAIC: oaic.gov.au

This policy may be updated; the version and effective date appear at the top of the page. Material changes will be communicated to account owners by email at least 30 days before the change takes effect.

← PreviousSecurity