Your work deserves a secure and transparent home.

Work Kone runs on Amazon Web Services. Australian production workloads use the AWS Asia Pacific (Sydney) region, helping keep primary Australian customer data in its local region.

Some carefully selected service providers may process limited information in other regions. These include authentication, payments and integrations chosen by a customer. See the Privacy section for more detail.

• Connections to Work Kone use HTTPS encryption in transit.
• Work Kone uses the encryption capabilities provided by its AWS hosting services for stored data.
• Microsoft 365 authentication material is encrypted using envelope encryption backed by AWS Key Management Service.
• Payment card details are handled by Stripe and are not stored in Work Kone application databases.

Work Kone uses authenticated identities and permission checks to limit access to workplaces, products, work containers and individual resources. Administrators control membership and sharing, while automatic product hierarchy permissions prevent a child resource from exceeding its parent's access.

Microsoft 365 connections use Microsoft's OAuth and administrator-consent processes. Work Kone does not receive a Microsoft administrator's password.

• Environment secrets are kept outside source code and access is limited to the services that require them.
• Webhooks are authenticated and background jobs use scoped credentials, idempotency controls and retry limits.
• Application firewall checks, audit records and deployment version controls help detect and contain unexpected activity.
• Backups and recovery procedures are maintained for production services according to operational requirements.

Please report suspected vulnerabilities or security incidents privately to support@workkone.com. Include enough detail for us to reproduce the issue, but do not access other people's data, disrupt the service or publicly disclose the issue before we have had a reasonable opportunity to investigate.

• Account and profile information: name, contact details, profile preferences, workplace relationships and identity-provider identifiers.
• Content you provide: work items, messages, files, calendar information, meeting content, comments and other information you choose to store.
• Connected-service information: information authorised through services such as Microsoft 365, including selected mailboxes, calendars and related metadata.
• Usage and device information: request logs, browser and device details, security events, feature use and diagnostic information.
• Billing information: plan, transaction and invoice information. Stripe processes card details on our behalf.

• Provide, secure, support and improve Work Kone.
• Authenticate users, apply permissions and maintain workplace boundaries.
• Synchronise services and perform actions you request through connected providers.
• Process subscriptions, communicate service information and respond to support requests.
• Prevent misuse, investigate incidents and comply with legal obligations.

We do not sell personal information or use customer work content to sell third-party advertising.

Information may be shared with people and workplaces according to the permissions you or an authorised administrator select. We also use service providers that help operate Work Kone, including AWS for hosting, Clerk for authentication, Stripe for payments, Microsoft when you connect Microsoft 365, and communications providers for email or SMS delivery.

We may disclose information where required by law, to protect people or the service, during a corporate transaction, or with your direction or consent. Service providers receive only the information reasonably necessary for their role and are expected to protect it.

Primary Australian production data is hosted in the AWS Asia Pacific (Sydney) region. Some providers or connected services may process data outside Australia. When this occurs, we take reasonable steps appropriate to the service and information involved to ensure suitable protections are in place.

We retain information while an account is active and for as long as reasonably necessary to provide the service, meet legal and accounting duties, resolve disputes and maintain security. Retention periods vary by data type. Deleted information may remain for a limited period in protected backups, logs or provider systems before routine expiry.

Workspace administrators may control workplace records. Removing an individual account does not necessarily remove records an organisation must retain or content that forms part of another user's or workplace's accountable history.

You may update many profile and sharing settings in Work Kone. You can disconnect integrations and may request access to, correction of or deletion of personal information by contacting us. We will verify requests and respond subject to applicable law, security requirements and the rights of other people or organisations.

We handle personal information in accordance with applicable Australian privacy law, including the Australian Privacy Principles where they apply.

Work Kone and its authentication providers use cookies or similar browser storage needed for sign-in, security, preferences and reliable operation. We do not use customer work content for behavioural advertising.

Contact support@workkone.com. We will investigate privacy complaints and explain our response. If you remain dissatisfied, you may be entitled to contact the Office of the Australian Information Commissioner.

You must provide accurate information, protect your account and promptly tell us about suspected unauthorised access. If you use Work Kone for an organisation, you confirm that you are authorised to accept these Terms and administer the service on its behalf.

You are responsible for people, agents and integrations you authorise and for configuring permissions appropriate to your organisation.

Work Kone grants you a limited, non-exclusive, non-transferable right to use the service during your account or subscription for lawful internal, personal and collaborative purposes. Features may change as the service develops. We may provide previews or early-stage features that are identified as such and may change more frequently.

You retain ownership of content you submit. You grant Work Kone the limited rights needed to host, copy, process, transmit and display that content to operate the service, follow your instructions and meet our legal obligations.

You confirm that you have the rights and permissions needed to submit content and share it with the people, workplaces and integrations you select.

You must not use Work Kone to break the law, infringe rights, distribute malware, harass others, gain unauthorised access, bypass security or usage controls, disrupt the service, scrape it at unreasonable scale, or test vulnerabilities without prior written permission.

Automated agents must operate through approved functionality and remain subject to the permissions, accountability and oversight configured by their owner.

When you connect another service, you authorise Work Kone to exchange information and perform requested actions with that provider. The provider's own terms and privacy practices also apply. We are not responsible for third-party services, but we will take reasonable care in how Work Kone connects to them.

Paid plans, prices, taxes and billing frequency are shown before purchase and on our pricing page. Payments are processed through Stripe. Subscriptions continue for the selected billing period until cancelled unless stated otherwise at purchase.

You may cancel through the available Stripe billing controls. Cancellation takes effect at the end of the current billing period and stops future renewal, but does not automatically create a refund for a period already paid, except where required by law or expressly agreed. We may change pricing with reasonable advance notice for future billing periods.

You may stop using Work Kone at any time. We may restrict or suspend access where reasonably necessary to protect the service or another person, respond to unlawful activity, address non-payment or a material breach, or comply with law. Where practical, we will provide notice and an opportunity to resolve the issue.

On termination, access ends and content will be handled under the Privacy notice and applicable workplace retention controls. Provisions that by their nature should continue will survive termination.

Work Kone and its licensors own the service, software, branding, documentation and related intellectual property, excluding your content. These Terms do not transfer ownership. Feedback may be used to improve the service without restriction or payment, provided we do not identify you publicly without permission.

We aim to provide a reliable and secure service, but no online service is uninterrupted or error-free. Except for rights and guarantees that cannot legally be excluded, the service is provided on an "as available" basis and we do not promise that every feature will always be available or suitable for every purpose.

Nothing in these Terms excludes, restricts or modifies rights or remedies you may have under the Australian Consumer Law or other law that cannot be excluded.

To the maximum extent permitted by law, neither party is liable to the other for indirect, incidental, special or consequential loss that was not reasonably foreseeable. Each party must take reasonable steps to reduce avoidable loss.

Where our liability for a service cannot be excluded but can lawfully be limited, it is limited, at our option, to supplying the service again or paying the reasonable cost of having it supplied again. This limitation does not apply where the law prohibits it.

We may update these Terms, the Privacy notice or security information to reflect service, legal or operational changes. We will publish the revised date and provide additional notice where a change materially affects existing users. Continued use after the change takes effect means the updated Terms apply.

These Terms are governed by the laws of Victoria, Australia. The parties submit to the courts of Victoria and courts entitled to hear appeals from them, without limiting any mandatory rights available under applicable consumer law.