Privacy Policy
How WorkScudo collects, uses, stores, discloses and protects personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1.Who we are
WorkScudo is an independent Australian platform for pay, superannuation and employment records. This policy covers workscudo.com and portal.workscudo.com. In it, "we" and "us" mean WorkScudo.
Questions about this policy or your personal information can be sent to hello@workscudo.com.
2.What we collect
Waitlist details: your first name and email address, and if you choose to give them, what best describes you, the type of work you do, the state you work in and what you would most want help with.
Account details: your name, email address and sign-in information. Employer and professional accounts also provide verification details, such as business details, practising credentials and insurance.
Documents you upload: contracts, letters of offer, payslips, rosters, timesheets, superannuation statements and correspondence.
Information read from those documents: employer names, employment type, pay rates, classifications, hours, amounts, dates and superannuation detail.
Usage information: how the site and portal are used, collected through cookies and similar technologies as described in the Cookie Policy.
3.How we collect it
Directly from you, when you join the waitlist, create an account, upload a document or contact us.
From payroll systems you choose to connect, such as Xero, MYOB or Employment Hero.
WorkScudo does not connect to the Australian Taxation Office or to superannuation funds and does not collect information from them.
4.How we use it
To provide the service: reading your documents, comparing them against award and superannuation rules, identifying apparent discrepancies and helping you organise and communicate about them.
To communicate with you about WorkScudo, including early access, and to understand what Australian workers need from the platform. Joining the waitlist does not give WorkScudo access to your employment or financial records.
To keep the platform secure, prevent misuse and meet our legal obligations.
To improve accuracy, using aggregated, de-identified information that cannot reasonably identify you.
5.Sensitive information
Some documents can contain sensitive information, such as visa status, health-related leave records or details of a workplace dispute. We collect it only when you choose to provide it, and use it only to provide the service to you.
6.When we disclose it
We do not sell, rent or broker personal information, and it is never supplied to advertisers, insurers, employers or marketers.
Worker records are private by default. Disclosure to an employer, legal professional, union or advocate happens only on your instruction or affirmative in-app consent, recorded against the specific recipient and purpose.
We use contracted service providers, such as hosting and AI processing, who are bound to confidentiality and may use your information only to deliver the service to you.
We may disclose information where the law requires it.
7.Overseas disclosure
Production data is stored and processed in Australian infrastructure. Where a service provider operates outside Australia, we apply contractual safeguards, and a current list of providers and their locations is available from hello@workscudo.com.
8.AI and your information
Your documents and personal information are not used to train third-party foundation models. AI features process your content to produce answers and drafts for you. The AI Disclaimer explains how the AI layer works and its limits.
9.How we protect it
Documents and database contents are encrypted with AES-256 at rest and TLS 1.3 in transit. Access is role based with least privilege, multi-factor authentication is available on every account, and every access, consent and share is written to an audit log you can read.
No one at WorkScudo reads the contents of your vault without an explicit, time-limited and logged grant from you. The Security page sets out the detail.
10.How long we keep it
We keep your information while your account is open and as needed to provide the service. Documents you delete are removed from active systems and purged from backups on a defined cycle.
You can export your documents and your record, and delete your account, from within the app at any time.
11.Access and correction
You can ask to see the personal information we hold about you and ask us to correct it. Most of it can be viewed and corrected in the app. For anything else, email hello@workscudo.com and we will respond within a reasonable period.
12.Data breaches
We follow a documented incident response procedure. Where a breach is likely to result in serious harm, affected individuals and the Office of the Australian Information Commissioner are notified in accordance with the Notifiable Data Breaches scheme.
13.Cookies
The Cookie Policy explains the cookies and similar technologies we use, why we use them and how you can control them.
14.Complaints
If you have a concern about how we handle your personal information, email hello@workscudo.com and we will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.
15.Changes to this policy
We will update this policy if the way we handle personal information changes, and the effective date above will be updated.