Privacy Policy

parkshare.work (“we”, “us”, “our”) is a workplace parking allocation service operated in Australia. You can contact us at contact@parkshare.work.

We collect the following personal information when you use parkshare.work:

• Account information: your name and email address, used to create and identify your account.
• Organisation information: the name and details of the organisation you belong to.
• Work schedule and leave: the office days you set, and any leave you record. This is necessary to run parking allocation.
• Parking preferences: space type preferences (e.g. EV charging, accessible) that you set voluntarily.
• Allocation history: records of which parking spaces were allocated to you, used to calculate fairness scores.
• Usage data: standard server logs including IP addresses, browser type, and pages visited.

We do not collect sensitive information as defined in the Privacy Act, such as health, financial, or biometric data.

We collect personal information:

• Directly from you when you register, log in, set preferences, or record leave.
• From your organisation's administrator when they invite you to parkshare.work.
• Automatically via server logs when you use the service.

We use your personal information to:

• Operate the parking allocation service — knowing who is eligible to park on a given day is core to the product.
• Send magic-link login emails to authenticate you.
• Send weekly parking allocation notifications (if enabled by your admin).
• Calculate fairness scores to ensure equitable allocation over time.
• Provide administrators with usage insights and allocation history for their organisation.
• Respond to support enquiries.
• Improve and maintain the service.

We do not use your information for advertising and do not sell it to third parties.

We share personal information only as necessary to operate the service:

• Cloudflare, Inc.: our infrastructure provider. Data is stored in Cloudflare D1 (Sydney, Australia region) and served via Cloudflare Workers. See Cloudflare's privacy policy.
• Your organisation's administrator: admins can see your name, email, preferences, leave records, and allocation history as part of managing the car park.

We do not share personal information with any other third parties.

Your data is stored in Australia. We use Cloudflare D1 in the Oceania (Sydney) region. Cloudflare Workers may route requests through Cloudflare's global network, but your data at rest remains in Australia.

We take reasonable steps to protect personal information. These include:

• Passwordless authentication via magic links — no passwords stored.
• Optional two-factor authentication (TOTP) for added account security.
• All data transmitted over HTTPS.
• Organisation data is strictly isolated — users cannot access data from other organisations.
• JWT tokens with short expiry stored in HttpOnly cookies, inaccessible to JavaScript.

We use a single session cookie (“token”) to maintain your logged-in state. This is an HttpOnly, Secure cookie and is essential for the service to function. We do not use advertising or tracking cookies.

We retain your personal information for as long as your account is active. If you want your account and associated data deleted, contact us at contact@parkshare.work and we will action it within 30 days.

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate, out of date, or incomplete.
• Request deletion of your personal information.
• Make a complaint about how we have handled your personal information.

To exercise any of these rights, email contact@parkshare.work. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

We may update this policy from time to time. We will notify users of material changes via email or a notice within the service. The current version is always available at parkshare.work/privacy.

For any privacy-related questions or complaints: