Legal

Privacy Policy

This Privacy Policy explains how WorkerN Pty Ltd (ABN 21 700 036 684) (Workerⁿ, we, us) handles personal information when you visit our website or use the Workerⁿ platform (the Service). We comply with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, where it applies to you, the UK GDPR and Data Protection Act 2018.

1. The short version

  • We collect what we need to run your books and your account, and nothing more.
  • Your financial data is used to do your bookkeeping. We do not sell it, and we do not use it to train AI models.
  • Nothing is posted to your accounting platform without a person approving it.
  • If you leave, we return your data on request and delete it when you ask, unless the law requires us to keep it.

2. What we collect

  • Account and contact information: names, business names, email addresses, phone numbers, roles and login details of you and your Authorised Users.
  • Accounting data: information we access from your connected accounting platform (such as Xero, or others we support in future) and documents you upload, including transactions, invoices, bills, bank feed data, and contact records. This will often include personal information about other people, such as your customers, suppliers and employees.
  • Billing information: plan, invoices and payment status. Card details are handled by our payment provider; we do not store full card numbers.
  • Usage and device data: log data, IP address, browser type, pages viewed, actions taken in the Service, and cookie data.
  • Communications: emails, support requests, call notes and feedback.

We collect this directly from you, from your connected platforms with your authorisation, and (for accounting firms) from the firm on behalf of its clients. We do not intentionally collect sensitive information, such as health information. If it appears in your accounting data, we handle it only as part of providing the Service.

3. How we use it

We use personal information to:

  • provide the Service, including preparing bookkeeping and receivables work for your review;
  • create and manage accounts, bill you and provide support;
  • keep the Service secure, maintain audit trails and prevent misuse;
  • improve the Service using aggregated or de-identified usage information;
  • send service notices and, if you have not opted out, occasional product updates; and
  • meet our legal obligations.

For UK users, our lawful bases are performance of our contract with you, our legitimate interests in running and securing a business service, compliance with law, and consent for optional marketing.

4. AI and automated processing

The Service uses artificial intelligence, including models provided by third parties, to analyse accounting data and prepare suggested entries. These suggestions are reviewed and approved by a person before anything is posted. We do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing.

Our AI providers process data only to return results to us, and their terms commit them not to use it to train their models. We do not use your accounting data to train AI models either.

5. Accounting firms and their clients

When an accounting firm or bookkeeper uses the Service for its clients, the firm decides what client data is connected and why. In that case we process client data on behalf of the firm, in accordance with its instructions and our Terms (for UK purposes, the firm is the controller and Workerⁿ is the processor). Clients of a firm should direct privacy requests to the firm in the first instance; we will help the firm respond.

6. Who we share it with

We do not sell personal information. We share it only with:

  • Service providers who help us run the Service, such as cloud hosting, sign-in, analytics, AI model providers, email, customer support and payment processing, under contracts requiring them to protect it;
  • Your connected platforms (such as Xero), when you approve an action;
  • Your accounting firm, if a firm manages your file through the Service;
  • Professional advisers, a buyer or successor in a business sale (under confidentiality), and regulators or law enforcement where required by law.

7. Overseas storage and transfers

We primarily store data in Australia. Some service providers, including AI model providers, may process data in other countries, such as the United States and the European Union. When we disclose personal information overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. For UK and EU data, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision.

8. Security

We protect data with encryption in transit and at rest, access controls and least-privilege access for our team, logging of every change made through the Service, and use of accounting platforms’ own authorisation (we never see or store your accounting platform password). No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify affected customers and the Office of the Australian Information Commissioner (and, for UK data, the ICO) as required by law.

9. How long we keep it

We keep accounting data for as long as your subscription is active. When you leave, you can ask us to return your data within 30 days. We may keep it for a reasonable period afterwards for legal, audit, dispute and quality purposes, protected as described in this policy, and we will delete it on request unless we need to keep it by law.

10. Your rights

You can ask to access or correct the personal information we hold about you. If the UK GDPR applies, you can also ask us to delete or restrict it, object to certain processing, or receive a portable copy. We will respond within 30 days and will not charge you for a reasonable request. If we refuse, we will explain why.

You can opt out of marketing emails at any time using the unsubscribe link. Service notices will still be sent while you have an account.

11. Cookies and analytics

We use essential cookies to keep you logged in and secure, and may use various analytics tools to understand how our website and Service are used. You can control cookies in your browser settings. For UK visitors, we ask for consent before setting non-essential cookies. If you have an account, we use analytics as part of providing the Service.

12. Complaints and contact

For any privacy question, request or complaint, contact our office at duncan@workern.io or 8/88 Park Street, South Melbourne VIC 3205. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in the UK, the Information Commissioner’s Office (ico.org.uk).

13. Changes to this policy

We may update this policy. If the changes are material, we will tell you by email or in the Service before they take effect. The current version will always be on our website.