Privacy Policy | Parallax

Parallax Services LLC ("Parallax", "we", "us", or "our") provides infrastructure-as-a-service, colocation, connectivity, and related services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and retain personal information, and what choices and rights you have.

This Policy applies to parallax.net and any other website, portal, or application we operate that links to it, to our sales and support interactions, and to the administration and billing of the Services. It does not apply to the content you choose to store, process, or transmit using the Services, which is addressed separately in Our Two Different Roles below.

Please read this Policy together with our Terms of Service. By accessing our websites or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with it, do not use the Services.

1. Our Two Different Roles

We handle two very different categories of information, and your rights differ depending on which one is at issue. This distinction matters, so we set it out first.

Account Data. Information about you or your organisation that we collect and use for our own purposes: the identity and contact details of account holders and authorised users, billing and payment records, support correspondence, service configuration and usage records, and website analytics. For Account Data, we act as a controller (or, under certain US state laws, a "business"), and this Policy describes what we do with it.

Customer Content. Any data, files, software, databases, communications, images, logs, or other material that you or your users upload to, store on, process with, or transmit through the Services, including any personal information about your own customers, employees, or end users that it contains. For Customer Content, we act as a processor (or "service provider") on your behalf. We do not control it, we do not determine the purposes for which it is processed, and we do not use it for our own purposes. You are the controller of Customer Content, and you are solely responsible for its content, legality, and for providing any notices and obtaining any consents required from the individuals it concerns.

We do not monitor, inspect, index, or review Customer Content as a matter of course, and we have no obligation to do so. We may access it only in the limited circumstances described in When We Access Customer Content.

2. Information We Collect

Information you provide to us

Identity and contact details — name, job title, employer, email address, telephone number, and postal address.
Account credentials — usernames, passwords (stored only in hashed form), API keys, SSH public keys, and multi-factor authentication settings.
Billing and financial information — billing contact and address, purchase orders, tax identifiers, bank or payment-card details, and transaction history. Payment-card data is collected and processed by our payment processors; we do not store full card numbers on our systems.
Quote, order, and provisioning information — the technical requirements, workload descriptions, capacity needs, locations, timelines, and other details you submit through our forms or discuss with our sales and engineering teams.
Support and correspondence — tickets, emails, chat messages, call notes, and any attachments or diagnostic information you choose to send us.
Compliance and verification information — information we may need to verify identity, authority to bind an organisation, creditworthiness, beneficial ownership, or sanctions and export-control status.
Marketing preferences — your subscription choices and the records of your consents and opt-outs.

Information we collect automatically

Network and connection data — IP addresses, ports, protocols, timestamps, routing information, traffic volumes, flow records, and similar metadata generated by operating a network. We generate and retain this for security, abuse prevention, capacity planning, billing, and troubleshooting.
Server, platform, and access logs — authentication events, console and out-of-band access events, provisioning and configuration changes, administrative actions, and error and diagnostic logs.
Security telemetry — DDoS detection and mitigation records, intrusion detection alerts, rate-limiting and firewall events, and abuse signals.
Device and browser data — browser type and version, operating system, language, screen characteristics, referring and exit pages, and pages viewed on our websites.
Physical access records — where you visit a facility, records of entry and exit, identification presented, escort details, and closed-circuit television footage captured by the facility operator.

Information from third parties

Our data centre and facility partners, in relation to physical access, cross-connects, and incident records.
Our payment processors and financial institutions, in relation to payment authorisation, chargebacks, and fraud signals.
Credit reference, identity verification, fraud prevention, and sanctions screening providers, where we are permitted or required to screen.
Abuse and threat intelligence sources, including reports from third parties, blocklist operators, and security researchers, relating to activity attributed to your account or IP addresses.
Publicly available sources, such as domain and IP registration records, routing registries, and company registers.

Information we ask you not to give us

We do not seek, and the Services are not designed or offered as a destination for, special category or sensitive personal information about you in the course of administering your account. Please do not send us, through support channels or forms, information concerning health, genetic or biometric identifiers, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sexual orientation, criminal history, precise geolocation, government identification numbers, or financial account credentials, unless we have specifically and in writing asked you to.

This request concerns information about you, in your dealings with us. It does not restrict what you may lawfully store as Customer Content, subject to the Terms of Service, applicable law, and your own compliance obligations.

3. How We Use Information

We use Account Data for the following purposes:

To provide the Services — creating and administering accounts, scoping and quoting requirements, provisioning and configuring infrastructure, routing traffic, and delivering support.
To bill and collect — invoicing, processing payments, pursuing unpaid amounts, managing disputes and chargebacks, and keeping tax and accounting records.
To communicate with you — responding to enquiries, sending service, maintenance, security, and billing notices, and giving notice of changes to terms or policies. Service and transactional communications are not marketing, and you cannot opt out of them while you hold an account.
To operate, secure, and improve our network and platform — monitoring availability and performance, capacity planning, diagnosing faults, investigating incidents, hardening systems, and developing new or improved features.
To prevent, detect, and investigate abuse, fraud, and unlawful activity — including enforcing our Terms of Service and Acceptable Use Policy, investigating abuse reports, and protecting our network, our other customers, and third parties.
To market our Services — sending information about products and services that may interest you, subject to the choices described in Marketing Choices.
To comply with law and manage legal risk — meeting legal, regulatory, accounting, and reporting obligations; responding to lawful requests from public authorities; establishing, exercising, or defending legal claims; and conducting audits.
For corporate purposes — including due diligence and the evaluation, negotiation, and completion of a financing, merger, acquisition, reorganisation, or sale of assets.

We do not use Customer Content for any of the purposes above. We do not use Customer Content to train machine learning or artificial intelligence models, and we do not sell it.

4. Legal Bases for Processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

Providing and administering the Services — performance of a contract.
Billing, collection, and tax records — performance of a contract, and compliance with a legal obligation.
Service, security, and maintenance notices — performance of a contract, and our legitimate interests in operating the Services safely.
Network and platform security, abuse and fraud prevention — our legitimate interests in protecting our network, our customers, and third parties, and compliance with a legal obligation.
Improving and developing the Services — our legitimate interests in understanding how the Services are used and making them better.
Marketing to business contacts — our legitimate interests in promoting our Services, or your consent where consent is required.
Responding to legal process and defending claims — compliance with a legal obligation, and our legitimate interests in establishing, exercising, or defending legal claims.
Corporate transactions — our legitimate interests in evaluating and carrying out a financing, merger, acquisition, or sale of assets.

Where we rely on legitimate interests, we have assessed that our interests in operating a secure, reliable, and solvent business do not override your rights and freedoms. You may ask us for information about that assessment using the contact details below. Where we rely on consent, you may withdraw it at any time, which does not affect processing already carried out.

5. Cookies and Similar Technologies

Our websites use a deliberately small number of cookies and similar technologies:

Strictly necessary — to route requests, balance load, maintain session state, and protect our forms against automated abuse. Our contact and quote forms are protected by Cloudflare Turnstile, which sets a token for that purpose.
Security and network — set by Cloudflare, which provides our network edge, to identify trusted traffic, mitigate attacks, and apply rate limiting.
Preference — to remember choices such as display settings, where offered.

We do not use advertising cookies, and we do not permit third parties to use our websites to build advertising profiles about you.

Most browsers let you block or delete cookies. Blocking strictly necessary cookies will prevent parts of our websites, including the contact forms, from working. Because we do not engage in cross-context behavioural advertising, we do not act on Global Privacy Control or "Do Not Track" signals differently from our standard practice, which is not to track you for advertising at all.

6. How We Disclose Information

We do not sell personal information. We disclose it only as follows.

Service providers and subprocessors. We use third parties to perform functions on our behalf, under contracts that restrict them to processing information for the purposes we specify. These currently include, by category: data centre and colocation facility operators; network, transit, and content delivery providers; payment processors and billing platforms; email and communications providers; ticketing and support tooling; monitoring, logging, and security tooling; cloud and backup storage providers; and professional advisers including accountants, auditors, and lawyers.

Within our group. With affiliates and subsidiaries, where we have them, for the purposes described in this Policy.

Legal process and public authorities. We may disclose information where we believe in good faith that disclosure is required by applicable law, regulation, legal process, or governmental request, including subpoenas, court orders, search warrants, and lawful demands from law enforcement, regulators, or courts. Where we are legally permitted to do so, and unless we believe doing so would create a risk of harm, interfere with an investigation, or be otherwise prohibited, we will make reasonable efforts to notify the affected customer before disclosing Customer Content in response to such a request, so that the customer may seek protective relief. We are not obliged to challenge any request on your behalf, and nothing in this Policy requires us to do so.

Protection of rights and safety. We may disclose information where we believe it is reasonably necessary to enforce our Terms of Service, to investigate suspected abuse or fraud, to protect the security, integrity, or availability of our network, to protect our rights, property, or safety, or those of our customers or the public, or to prevent or respond to an emergency involving a risk of death or serious physical injury.

Corporate transactions. In connection with, or during negotiations for, a financing, merger, acquisition, reorganisation, insolvency, bankruptcy, or sale of all or part of our business or assets, information may be disclosed to counterparties and their advisers, and may be transferred as a business asset.

At your direction. Where you ask or authorise us to share information, for example with a reseller, managed service provider, consultant, or other agent acting for you.

Aggregated and de-identified information. We may create and use aggregated, anonymised, or de-identified information, including statistics about network traffic and platform usage, which is not personal information and which we may disclose for any lawful purpose. We will not attempt to re-identify such information except to test the effectiveness of our de-identification.

7. When We Access Customer Content

We treat Customer Content as confidential and do not routinely access it. We may access, copy, disclose, restrict, or remove Customer Content only where we reasonably believe it is necessary to:

comply with applicable law or binding legal process;
respond to a support request where you have asked us to investigate something, to the extent needed to do so;
investigate or respond to a credible report of a violation of our Terms of Service or Acceptable Use Policy, or of unlawful activity;
protect the security, integrity, or availability of the Services, our network, or any person, including responding to an active attack, compromise, or emergency; or
enforce our rights, including recovering amounts owed, or defend against a claim.

Where we take such action, we will limit it to what is reasonably necessary in the circumstances. We may do so without prior notice where providing notice is impracticable, prohibited, or would prejudice the purpose of the action.

8. International Transfers

We operate from the United States and our infrastructure described on this website is located in the United States. Our service providers may be located in other countries. If you access the Services from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal information out of the EEA, the United Kingdom, or Switzerland, we rely on an appropriate transfer mechanism, which will ordinarily be the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where relevant, supplemented by any additional safeguards we judge appropriate. You may request information about the mechanism applicable to a particular transfer using the contact details below.

9. Data Retention

We retain personal information for as long as needed for the purposes for which it was collected, and then for as long as we have a legitimate or legal reason to keep it. In practice:

Account and contact records are retained for the life of the account and then for a period reflecting applicable limitation periods for legal claims.
Billing, payment, tax, and accounting records are retained for the periods required by applicable tax, accounting, and corporate law.
Support correspondence is retained for the life of the account and for a reasonable period afterwards, for continuity and dispute purposes.
Network, security, and access logs are retained for a limited period appropriate to their operational and security purpose, and longer where specific records are relevant to an open investigation, incident, dispute, or legal hold.
Abuse and enforcement records are retained for as long as needed to detect repeat behaviour, enforce our terms, and defend claims.
Marketing records and suppression lists are retained until you ask us to delete them, except that we will keep the minimum record necessary to honour a continuing opt-out.

Customer Content is retained according to your configuration and the Terms of Service. Following termination or expiry, Customer Content may be deleted in accordance with the Terms of Service and our standard decommissioning practice, and backups and replicas may persist for a limited period before being overwritten in the ordinary course. You are responsible for maintaining your own independent backups of Customer Content, and for exporting it before termination.

Where we are subject to a legal hold or an ongoing legal, regulatory, or investigative requirement, we will retain the relevant information for as long as that requirement subsists, notwithstanding any deletion request.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, use, alteration, disclosure, and destruction. These include access controls and least-privilege administration, network segmentation and filtering, encryption of data in transit, logging and monitoring, vulnerability and patch management, background and authorisation checks for personnel with privileged access, and physical security at the facilities within which our equipment is deployed.

No method of transmission or storage is completely secure. We cannot and do not guarantee that personal information or Customer Content will never be accessed, acquired, disclosed, altered, or destroyed in breach of our safeguards. You are responsible for securing your own systems, credentials, keys, operating systems, applications, and configurations, including applying security updates to anything you control, and for configuring the Services appropriately for the sensitivity of the data you put into them.

You must notify us promptly at [email protected] if you become aware of any unauthorised access to or use of your account or credentials. Where we are required by applicable law to notify you or a regulator of a personal data breach, we will do so within the time and in the manner that law requires.

11. Your Privacy Rights

Depending on where you live and the role in which we hold your information, you may have some or all of the following rights.

If you are in the EEA, the United Kingdom, or Switzerland

You may have the right to request access to your personal information; to request correction of inaccurate information; to request erasure; to request restriction of processing; to object to processing carried out on the basis of legitimate interests or for direct marketing; to data portability; to withdraw consent where processing is based on consent; and to lodge a complaint with your supervisory authority. We would appreciate the opportunity to address your concerns before you approach a regulator.

If you are a California resident

Subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act, you may have the right to know the categories and specific pieces of personal information we have collected, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it; to request deletion; to request correction; to opt out of the sale or sharing of personal information and of its use for targeted advertising; to limit the use and disclosure of sensitive personal information; and not to be discriminated against for exercising these rights.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes that require an opportunity to limit. We therefore do not offer a "Do Not Sell or Share My Personal Information" mechanism, because there is nothing to opt out of.

If you are in another US state with a consumer privacy law

Residents of states including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others with comparable statutes may have rights to access, correct, delete, and obtain a portable copy of personal information, and to opt out of targeted advertising, sale, and certain profiling. As above, we do not engage in sale or targeted advertising. Where the applicable statute provides a right to appeal a refusal, you may appeal by replying to our decision and marking it for the attention of our privacy team.

Exercising your rights

Send your request to [email protected], or to [email protected] if you prefer. Please tell us which right you are exercising and give us enough information to locate your records.

Verification. We will take reasonable steps to verify your identity before acting, which may include asking you to confirm information we already hold or to respond from an email address on the account. We may decline requests we cannot verify.
Authorised agents. An agent may submit a request on your behalf with evidence of authority. We may still contact you directly to confirm.
Timing. We will respond within the period required by applicable law, and will tell you if we need an extension that the law permits.
Fees. Requests are free, except that we may charge a reasonable fee or refuse a request that is manifestly unfounded, excessive, or repetitive, to the extent the law allows.
Limits. Rights are not absolute. We may decline a request where an exemption applies, where honouring it would adversely affect the rights of others, or where we are required or permitted by law to retain the information.

If your information is Customer Content

If you are an individual whose personal information was uploaded to the Services by one of our customers, your request should be directed to that customer, who is the controller of that information and who determines how it is used. We will refer such requests to the relevant customer and assist them as our contract with them requires. We are generally not in a position to identify, access, or act on individual records within Customer Content, and attempting to do so without the customer's instruction would be inappropriate.

12. Marketing Choices

Where we send marketing communications, every message includes an unsubscribe link, and you may also email [email protected] to opt out. We will action opt-outs promptly. Opting out of marketing does not stop service, security, maintenance, billing, legal, or other transactional communications relating to an account you hold, which we need to be able to send you.

13. Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Automated systems do contribute to operational decisions such as rate limiting, abuse scoring, DDoS mitigation, and fraud screening. Where such a system results in the suspension or restriction of a service, a member of our team reviews the matter on request, and you may contact us to ask for that review.

14. Third-Party Websites and Services

Our websites link to third-party sites and services, including our billing portal, status page, and social media profiles, which we do not control and which have their own privacy practices. This Policy does not apply to them, and we are not responsible for their content or privacy practices. Review their policies before providing information to them.

15. Children's Privacy

The Services are offered to businesses and to adults acting in a professional capacity. They are not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us with personal information, contact [email protected] and we will take appropriate steps to delete it. You must not use the Services to collect information from children in violation of applicable law, including the Children's Online Privacy Protection Act.

16. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, our Services, or applicable law. When we do, we will revise the "last updated" date. If we make a change that materially reduces your rights, we will provide additional notice appropriate to the circumstances, which may include emailing the address on your account or posting a notice on our website or in the billing portal. Your continued use of the Services after a change takes effect constitutes acceptance of the updated Policy. If you do not agree to a change, you must stop using the Services and may terminate in accordance with the Terms of Service.

17. How to Contact Us

Parallax Services LLC Dallas, Texas, United States

Privacy enquiries, rights requests, legal notices, and general support: [email protected]
Network operations and suspected compromise: [email protected]
Abuse reports and copyright notices: [email protected]

If you would like our full postal address for the purpose of serving a formal notice, or wish to make a request in writing, email [email protected] and we will provide it.