Privacy Policy

Shaded Solutions Pty Ltd (ACN 676 265 624)

Last updated: 8 November 2026

This policy explains how Shaded Solutions Pty Ltd ("Shaded Solutions", "we", "us") handles personal information:
on this website, when you book training with us, and when you use our products, including the Magenta monitoring
service and its mobile app. We handle personal information in line with the Australian Privacy Principles in the
Privacy Act 1988 (Cth).

1. Our website and enquiries

What we collect. We only collect personal information you choose to give us: for example, your name, email
address, phone number and organisation when you contact us or make an enquiry.

How we use it. To answer your enquiry, provide the service you asked for, and for directly related purposes. We
keep copies of correspondence for our records and backups.

Cookies and analytics. This website uses Google Analytics (through Cloudflare) and Cloudflare Web Analytics to
understand how the site is used. They use cookies, kept for up to 12 months, and collect information such as the pages
you visit, your browser and device, and your approximate location worked out from your IP address. Google and
Cloudflare may process this information overseas. We don't use it to identify you. You can block or delete cookies in
your browser's settings. Our training booking portal may also use cookies to make bookings work.

2. Training bookings

When you book training, we collect the name and contact details of the person booking and of the attendees. We use
them to manage the booking and to send you notices about it. By booking, you agree to receive emails about this
training and future similar training; every such email lets you unsubscribe.

3. Magenta

Magenta watches websites and online services for our customers and alerts the right people on their phones when
something stops working. Magenta is invite-only: you have an account because an administrator at an organisation
using Magenta (or at Shaded Solutions) invited you.

What Magenta collects

What Why
Your email address, and your name if it's provided To sign you in and to identify you to the administrators of your organisation
The organisations and groups you belong to, your role, and your alert settings (which changes alert you, mute, "break through silent mode", repeats) To decide what you can see and which alerts you get
For each phone you use Magenta on: its push notification token, whether it's an iPhone or Android, the app version, its time zone, and when the app last connected To deliver alerts to that phone, showing times in local time. On Android, the phone may report a time-zone change by itself (for example after travelling) so alert times stay correct
A record of alerts sent to each phone and whether they were delivered So you and your administrators can see what was sent, and so we stop sending to phones that can no longer receive alerts
An activity log of changes administrators make (who changed what, and when) Accountability and support

Sign-in uses a one-time link emailed to you. Magenta has no passwords.

What Magenta does not collect: your location, contacts, photos, files, or advertising identifiers. Magenta has no
advertising, no analytics or tracking tools, and we never sell or rent personal information.

Monitored services. Magenta stores the addresses it checks and the results of each check (whether it was up, the
response code and time, and the type of any failure). It reads a service's response only to check it, then discards
it; response content is never stored or sent in alerts. Any access keys an administrator gives Magenta for a check are
stored encrypted.

What alerts contain. An alert says only what changed, a label, the monitor's name and the time (for example,
"Down: Shaded · Website, since 14:32"). Details are shown in the app only after you sign in.

Who can see your information

  • Administrators of your organisation can see your email address, name, role, groups, alert settings, how many
    phones you use, and whether alerts are reaching them.
  • Shaded Solutions' platform administrators (a small number of named Shaded Solutions staff) can see every
    organisation's information to provide and support the service. Their changes are recorded in each organisation's
    activity log.
  • Other users can't see your personal information.

Service providers and overseas disclosure

We use these providers to run Magenta. They handle personal information only to provide their service to us.

Provider What for Where
Google Cloud Magenta's database and servers Sydney, Australia
Google Firebase Sign-in (including sending sign-in emails), hosting the Magenta website, and delivering alerts to phones Australia and overseas, including the United States
Apple (Apple Push Notification service) Delivering alerts to iPhones Overseas, including the United States
Cloudflare An independent "watchdog" that alerts Shaded Solutions' platform administrators if Magenta itself stops working. It holds only those administrators' push tokens Overseas, on Cloudflare's global network

Alerts pass through Google and Apple to reach phones, which is why they contain no more than the details listed
above.

How long we keep it

  • When you are removed from an organisation, your phones stop receiving its alerts immediately. If you no longer
    belong to any organisation, your Magenta account and your phones' push tokens are deleted.
  • When you sign out of the app on a phone, that phone's push token is deleted.
  • Check results are kept for 30 days, status changes and records of alerts for 2 years, and the activity log for
    12 months.

Deleting your Magenta account

You can delete your account yourself, in the Magenta app (Settings → Delete my account) or in the Magenta web app
(click your email address, then Delete my account); see
how to delete your Magenta account. You can also ask an
administrator of your organisation to remove you, or ask us to delete your account and personal information at
[email protected]. We'll confirm and complete a deletion we're asked for
within 30 days. Some records may be kept where the law requires it, and an activity-log entry may keep an email
address recorded with an earlier change until that entry is deleted (after 12 months).

4. How we protect personal information

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including
encryption in transit and access limited to the people who need it. No method of sending data over the internet is
completely secure, so we can't guarantee the security of information you send us.

5. Sharing personal information

We don't sell personal information. We share it only:

  • with service providers who help us provide our services (as described above);
  • where you have agreed, or where it's needed for the purpose you gave it to us;
  • where the law requires or allows it, or to protect our rights, property or safety, or those of others.

6. Links to other websites

Our website may link to other websites. We're not responsible for their content or privacy practices; please read
their privacy policies.

7. Children

Our services are for businesses and their staff. They aren't directed at children, and we don't knowingly collect
children's personal information.

8. Accessing or correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us (below).
We'll respond within 30 days. In Magenta, an administrator of your organisation can also update your details and
settings.

9. Questions and complaints

Contact our privacy officer:

  • Email: [email protected]
  • Phone: 02 9281 0024
  • Post: Shaded Solutions Pty Ltd, Suite 1A1, 410 Elizabeth Street, Surry Hills NSW 2010, Australia

We'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the
Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992.

10. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last
updated.