Privacy Policy

WorkUp Pty Ltd (ABN 76 669 680 675, ACN 669 680 675) ("WorkUp", "we", "our" or "us") respects your privacy and is committed to protecting personal information. WorkUp handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how WorkUp collects, uses, stores and protects information when businesses use the WorkUp platform, website and related services.

WorkUp is a finance automation software platform. Regulated payment and card services are provided by Airwallex Pty Ltd (AFSL 487221), our licensed financial services partner. WorkUp is not a bank or authorised deposit-taking institution.

WorkUp may collect business, financial, operational and technical information required to provide and support platform functionality.

We may collect information including:

• Business details
• Contact information
• Identity verification information
• Financial and transaction data
• Xero integration data
• Payment and account information
• Device and usage information
• Customer support communications

WorkUp does not generally collect sensitive information. Where any sensitive information is collected, WorkUp will do so only with your consent or as otherwise permitted by law.

Information may be collected when:

• You create an account
• You connect Xero or other integrations
• You use WorkUp products and services
• You contact support
• You visit our website

Information is used to operate, secure and improve the WorkUp platform and related services.

We use information to:

• Provide and operate WorkUp services
• Power cashflow visibility and automation features
• Support Business Accounts and automation rules
• Improve platform reliability and security
• Communicate important updates
• Provide customer support
• Comply with legal and regulatory obligations
• Prevent fraud, misuse or unauthorised activity

Where we use your information to send marketing communications, you may opt out at any time using the unsubscribe function in the message or by contacting support.

When you connect Xero, WorkUp uses reconciled accounting data to provide operational cashflow visibility, obligation visibility and automation features.

Xero remains the accounting source of truth.

WorkUp does not modify accounting records within Xero unless explicitly authorised through supported integrations or workflows.

WorkUp uses encrypted infrastructure, access controls and security monitoring designed to protect customer data and platform integrity.

Security measures may include:

• Encryption in transit and at rest
• Role-based access controls
• Two-factor authentication (2FA)
• Infrastructure monitoring
• Secure cloud hosting providers
• Internal access restrictions

No system can guarantee absolute security, however WorkUp takes reasonable steps to protect information from misuse, interference, loss and unauthorised access.

WorkUp does not sell customer data.

Information may be shared with trusted service providers, infrastructure partners and regulated financial partners (including Airwallex Pty Ltd and other members of the Airwallex group, as our licensed financial services partner) where required to operate the platform.

Information may also be disclosed where required by law, regulation or legal process.

By using the payment services, you agree to Airwallex's Terms & Conditions.

Some of the service providers and financial partners we use, including members of the Airwallex group, are located outside Australia. As a result, your information may be disclosed to, and stored or processed in, overseas jurisdictions. Where we disclose information overseas, we take reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles.

WorkUp may use cookies, analytics and similar technologies to improve website functionality, platform performance and customer experience.

Users may control certain browser cookie settings directly through their browser preferences.

Users may request access to personal information held by WorkUp and request corrections where information is inaccurate.

Requests can be made by contacting WorkUp support. If you are not satisfied with how we handle a request or a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. See our Complaints & Feedback page for details.

If WorkUp becomes aware of a data breach that is likely to result in serious harm, we will assess and respond to the breach and, where the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth) applies, notify affected individuals and the Office of the Australian Information Commissioner.

WorkUp retains information for as long as reasonably necessary to provide services, comply with legal obligations, resolve disputes and enforce agreements. Where WorkUp arranges access to regulated financial services as an authorised representative, certain records will be retained for at least seven (7) years, as required by law and our arrangements with Airwallex.

WorkUp may integrate with third-party providers including accounting platforms, payment infrastructure providers and cloud infrastructure services.

Use of third-party services may also be subject to those providers' own terms and privacy policies.

WorkUp may update this Privacy Policy from time to time.

Updated versions will be published on the WorkUp website.

For privacy-related questions, please contact support@letsworkup.com (attention: Privacy Officer).