Legal

Privacy Policy

Last updated:

Introduction

WorkSignals ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use this website, our mobile application and our services.

By using WorkSignals, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Authentication Information

When you sign in to WorkSignals using OAuth providers (such as Google, Microsoft, or Apple), we collect:

  • Your email address
  • Your name
  • Profile picture (if provided by the OAuth provider)

Business Information

We ask you to provide your company name to help organize your workspace. This is the only additional information we request beyond your OAuth authentication details.

Usage Data

We automatically collect certain information when you use our app, including:

  • Device information (device type, operating system)
  • App usage data (features used, time spent in app)
  • Log data (IP address, access times, error logs)

Using this website

You do not need an account to use the free checklists and SWMS templates on this website. This section covers what is recorded when you visit.

What we record now

  • Google Analytics 4. This website uses Google Analytics, a service from Google. It sets cookies (names starting with _ga) and records the pages you view and general information about your device, browser and approximate location. Google processes this data and may store it outside Australia. You can block it with Google's opt-out browser add-on or by blocking cookies in your browser.
  • Hosting records. Our website is served through Amazon Web Services. Like most web servers, it can keep technical records of each request, including your IP address, the page requested, the time and your browser type.

What we are adding

We are adding our own simple measurement, so we can see which templates people use and keep the site fast. When it is switched on, it will record:

  • A random anonymous id, kept in your browser. It is not your name or email, and it is not linked to you.
  • The template you viewed.
  • The action you took, for example a download or print.
  • Your device type, for example phone or desktop.
  • Page performance timings.

Our hosting provider may keep technical server logs (IP address, page requested, time, browser type) for up to 90 days. Logs are stored in Australia (Sydney) where available. We do not store your IP address with the measurement events.

Why: to see which templates are used and to keep the site fast. Who sees it: WorkSignals. We do not sell it.

How long we keep it

  • Measurement events: 13 months.
  • Server logs: up to 90 days.
  • Google Analytics: held under Google's settings for our account.

Where it is stored

Our API and the files it holds run in Amazon Web Services in Sydney, Australia. Server logs are stored in Australia (Sydney) where available. Google Analytics data is held by Google.

Your choices

  • Clear this site's data in your browser settings. This removes the anonymous id, and a new one is made on your next visit.
  • Turn on Global Privacy Control in your browser. Our own measurement will respect it.
  • To ask for access to, correction of, or deletion of information we hold, email support@worksignals.net.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Authenticate your identity and manage your account
  • Organize your workspace by company
  • Communicate with you about updates, security alerts, and support
  • Detect, prevent, and address technical issues
  • Comply with legal obligations

Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We may share your information only in the following circumstances:

  • Service Providers: We may share data with trusted service providers who assist us in operating our app (e.g., cloud hosting, authentication services). These providers are bound by confidentiality obligations.
  • Legal Requirements: We may disclose your information if required by law or in response to valid legal requests.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Restricted access to personal information on a need-to-know basis
  • Secure OAuth authentication through trusted providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

When you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Website measurement events and server logs are kept for the periods set out in "Using this website" above.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Data Portability: Request a copy of your data in a structured, machine-readable format
  • Withdraw Consent: Withdraw consent for data processing where we rely on consent

To exercise any of these rights, please contact us using the methods below.

Data Deletion Request

You have the right to request deletion of your personal information at any time. To request data deletion:

  1. Visit our data deletion request form
  2. Provide your email address and account details
  3. Submit your request

We will process your deletion request within 30 days. You will receive a confirmation email once your data has been deleted.

Note: Some information may be retained as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

Children's Privacy

WorkSignals is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country or jurisdiction where data protection laws may differ. By using WorkSignals, you consent to the transfer of your information to these locations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

About this policy

This policy is a plain-language summary of our practices. It is general information and is not legal advice. If it and the law differ, the law applies.

Australian Privacy Principles

WorkSignals is committed to complying with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). If you have concerns about how we handle your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).