Privacy policy

1. Who we are

Work This Way is a desk and meeting room booking platform for coworking spaces, shared offices and teams. It is operated from Australia, and we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

When an organisation (such as a coworking space) uses Work This Way, that organisation decides why and how its members’ information is used. We hold and process that information on its behalf.

2. Information we collect

• Account details: name, email address, phone number and password (stored only as a secure hash).
• Membership details: the organisation you belong to, your role and access status.
• Bookings: desks, rooms, dates, times, guests you invite and meeting links you add.
• Payments: amounts, dates and payment method type. Card details are handled by Stripe and never reach our servers.
• Support requests: what you send us through the support form or by email.
• Technical data: IP address, browser type and pages visited, used to keep the service secure and working.

3. How we use it

• To run bookings, approvals, calendar invites and payment records.
• To send service emails such as confirmations, invitations and password resets.
• To answer support requests.
• To protect the service against misuse, fraud and security threats.
• To improve the product, using aggregated information that does not identify you.

We do not sell personal information, and we do not use it for third-party advertising.

4. Who we share it with

We share information only with service providers that help us run Work This Way, under agreements that require them to protect it:

• Supabase (database and authentication)
• Vercel (hosting)
• Stripe (card payments, where your organisation uses them)
• Resend (email delivery)

Some of these providers store or process data outside Australia, including in the United States and Asia-Pacific regions. We take reasonable steps under APP 8 to make sure overseas recipients handle information consistently with the APPs.

We may also disclose information where the law requires it.

5. Keeping it secure

Each organisation’s data is separated at the database level, so one organisation can never see another’s. Data is encrypted in transit and at rest, access is limited to people who need it, and administrative actions are logged. See our Security page for more detail.

6. How long we keep it

We keep information for as long as your organisation uses Work This Way, and as long as needed afterwards for legal, tax and accounting obligations. Payment records may be kept for up to seven years. When a member is permanently deleted, their personal details are removed and payment history is kept without identifying them.

7. Access, correction and deletion

You can see and update most of your details in the app. To ask for a copy of your information, a correction, or deletion, contact the organisation you book with or email us at privacy@workthisway.app. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.

9. Data breaches

If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

10. Complaints

If you have a concern about how we handle your information, email privacy@workthisway.app and we will respond within 30 days. If you are not satisfied with our response, you can contact the OAIC at oaic.gov.au or on 1300 363 992.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here and tell organisations about significant changes.