Privacy Policy

• Profile information you provide: your name, headline, suburb, contact details, photo, and @handle.
• Credentials: your qualifications, licences, tickets and insurances — including type, issuer, number, expiry date, and any card or certificate images you upload.
• Work history you choose to add.
• Business information, if you create a business: business name, ABN, industry, location, logo and website.
• Account and technical data: your email address and information needed to keep your account secure.

We ask you to provide only what is needed. Location is collected at suburb level, not your full street address.

We use your information to build and display your WRK profile, to let businesses whose team you join view and manage your credential compliance, to track credential expiry, and to operate and secure the platform. We do not sell your personal information.

Access to your data is earned by a real relationship — not by browsing. There are four levels:

• Public card — anyone with your profile link can see a limited card: your name, trade, area, photo, @handle and workforce-ready status. It never shows your contact details, credential numbers or document images.
• A team you have worked with — a business you have previously been on a team with may see whether your credentials are current (valid, expiring or expired), but not your documents or contact details.
• A team you are currently on — while you are an active member of a business's team, that business can see your full compliance view: your contact details, credential entries and expiries, and your uploaded documents (via a secure, expiring link). This access ends automatically when you leave the team.
• You — you can always see everything on your own profile.

• Businesses can present a team to a client. A business you are on a team with can generate a shareable "Team View" of their crew for a tender or mobilisation. This shows your name, trade, credential status and a work-history snapshot — but never your contact details, credential numbers or document files.
• Businesses can export team data. A business you are on a team with can export the data (not documents) of workers on their teams — your name, trade, tickets and expiry dates.
• Search indexing. By default your limited public card can be found by search engines such as Google. You can turn this off at any time in your settings, which removes your card from search indexing. Only the limited card is ever exposed — never your contacts, numbers or documents.

WRK does not collect criminal history or police-check information in its current form. If we introduce this in future, it will have its own stricter handling and we will ask for your explicit, separate consent before collecting it.

Your data is stored on Supabase infrastructure hosted in Australia (Sydney region). Access is controlled at the database level, so the visibility rules above are enforced even where a screen has a bug. Uploaded documents are kept in a private store and are never on a public link. Data is encrypted in transit.

Your profile is yours and is portable between employers. You can edit or remove entries at any time, and you can delete your account, which removes your personal profile data. Leaving a team immediately ends that business's access to your compliance view and documents.

You can request access to the personal information we hold about you, and ask us to correct it. Contact us using the details below. If you have a concern about how we have handled your information, you can also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy as WRK develops. We will change the "last updated" date above, and for significant changes we will let you know in the app.

For any privacy question or request, contact WRK at admin@wrk.com.au.