PalydinSign In

Privacy Policy

Last updated: 14 March 2026

1. Introduction

Palydin Pty Ltd (ABN pending) ("we", "us", "our") operates the Palydin platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following types of information:

Account Information

  • Full name, email address, and password
  • Organisation name and details
  • Role and permissions within your organisation

Project and Contract Data

  • Project details, contract information, work breakdown structures
  • Payment claims, variations, cost data, and financial records
  • Compliance documents (insurance certificates, licences)
  • Uploaded documents and files

Usage Data

  • Browser type, device information, and IP address
  • Pages visited, features used, and session duration
  • Error logs and performance data

Payment Information

Payment processing is handled by third-party providers. We do not store credit card numbers or bank account details on our servers.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Platform
  • Process transactions and manage your subscription
  • Send service-related communications and notifications
  • Provide AI-powered features such as document analysis and chat
  • Ensure platform security and prevent fraud
  • Comply with legal obligations
  • Generate anonymised, aggregated analytics to improve our service

4. AI Processing

When you use AI-powered features, your documents and queries are processed by third-party AI providers to generate responses. We do not use your project data to train AI models. Document content is processed in real-time and is not retained by our AI providers beyond the duration of the request.

5. Information Sharing

We do not sell your personal information. We may share your information with:

  • Other users in your organisation - members of your organisation can see your name, email, and role as part of normal platform use
  • Counterparty organisations - when you are linked as a counterparty on a contract, the other party can see your organisation name and designated contact information
  • Service providers - we use third-party services for hosting (Railway), file storage (Cloudflare R2), email delivery (Resend), payment processing, AI processing (xAI), and accounting integration (Xero). These providers process data on our behalf under contractual obligations
  • Legal requirements - when required by law, regulation, or legal process

6. Data Storage and Security

Your data is stored on servers located in Australia and the United States. We implement appropriate technical and organisational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL)
  • Session-based authentication with secure cookies
  • Role-based access controls and permission systems
  • Regular security reviews

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. After account termination, we retain Your Data for 30 days to allow for export, after which it may be permanently deleted.

We may retain certain information as required by law or for legitimate business purposes such as resolving disputes and enforcing agreements.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access - request a copy of the personal information we hold about you
  • Correction - request correction of inaccurate or incomplete information
  • Deletion - request deletion of your personal information, subject to legal retention requirements
  • Data export - request an export of your data in a structured format
  • Complaint - lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us at [email protected].

9. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Platform to function and cannot be disabled. We do not use advertising or tracking cookies.

10. Third-Party Links

The Platform may contain links to third-party services (e.g., Xero for accounting integration). We are not responsible for the privacy practices of these services. We encourage you to review their privacy policies.

11. Children

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform. The "Last updated" date at the top of this page indicates the most recent revision.

13. Contact

For privacy-related enquiries or to exercise your rights, contact us at:

[email protected]

You may also lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.