Privacy Policy

Version 2026-10 · Effective 8 October 2026

This policy explains how The IT Dept Pty Ltd (ABN 12 665 405 505) ("we") handles personal information in connection with serverless.au, in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

Account details: your email address; and, when you complete your account, your name, mobile number and country. For business accounts: legal name, ABN, billing address, intended use and expected spend.
Account activity: the accounts you belong to and your role, invitations, API keys (we store only a one-way hash) and SSH public keys.
Usage and billing: pods you run (image name, command, resources, timestamps, region and state), credit and charges, and volume names and sizes.
Technical data: IP addresses and request logs for our website, API and login; the last 1 MB of a pod's output after it exits, so you can read its logs.
We do not inspect the contents of your containers or volumes as a matter of course (see the Terms).

Why we collect it

To create and secure your account, verify who our customers are, run and bill your pods, prevent fraud and abuse (including enforcing the Acceptable Use Policy), provide support, meet our legal obligations, and improve serverless.au. We don't sell personal information and we don't use it for third-party advertising.

Only with service providers who help us run serverless.au, under appropriate protections:

Microsoft 365 — sending email (login codes, invites and account notices).
Cloudflare — DNS and network services, and storage for network volumes (Cloudflare R2).
Our hosting facilities in Sydney, Australia, where serverless.au's servers and database run.

Some providers may process data outside Australia. We may also disclose information where required by law or to protect our rights or the safety of others.

Keeping it safe

Secrets such as registry passwords and environment variables are encrypted at rest; API keys and login codes are stored only as hashes. Pods on shared hardware run in sandboxes. No system is perfectly secure, so please tell us at gc@theitdept.au if you suspect a problem.

How long we keep it

We keep account and billing records while your account is open and for as long afterwards as we need to for legal, tax and accounting purposes (generally seven years for financial records). Pod logs and usage details are kept with your account's records.

Access and correction

You can see and update most of your details with svl profile and svl account show. To ask for a copy of the personal information we hold about you, to correct it, or to make a complaint, email gc@theitdept.au. We'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Contact