1. Introduction

Welcome to Candesce (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our Workable platform and related services.

This policy applies to:

• Our website at https://work-able.app
• Our application at https://go.work-able.app
• Our documentation at https://docs.work-able.app
• Any related services, sales, marketing, or events

Please read this privacy policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Who We Are

Candesce Pty Limited
ABN: 85 481 672 933

For the purposes of applicable data protection laws, we are the “data controller” of your personal information.

3. Information We Collect

3.1 Information You Provide

Account Information When you create an account, we collect:

• Name
• Email address
• Company/organisation name (if applicable)
• Payment information (processed by Stripe, Inc.)

Profile Information You may choose to provide:

• Preferences and settings

Content You Create When you use our service, we store:

• Data you upload and generate
• Messages and communications within the platform, and on our Support platforms

Communications When you contact us, we collect:

• Email correspondence
• Support tickets
• Feedback and survey responses

3.2 Information We Collect Automatically

Usage Data We automatically collect:

• Pages and features you access
• Time spent on pages
• Actions taken within the application
• Error logs and performance data

Device Information

• Browser type and version
• Operating system
• Device identifiers
• Screen resolution

Location Data

• IP address
• Approximate geographic location (city/country level)

Cookies and Similar Technologies We use cookies to:

• Keep you signed in
• Remember your preferences
• Analyze usage patterns
• Improve our service

See our Cookie Policy for details.

3.3 Information From Third Parties

Single Sign-On (SSO) We do not offer third-party SSO.

Integrations If you connect third-party services, we may receive data as described in those integration settings.

4. How We Use Your Information

We use your personal data for the following purposes:

4.1 To Provide Our Service

4.2 To Improve Our Service

4.3 To Communicate With You

4.4 To Protect Our Service

5. How We Share Your Information

We do not sell your personal data. We share your information only as follows:

5.1 Service Providers

We use third-party companies to help provide our service:

These providers are bound by data processing agreements and may only use your data as instructed by us.

5.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our terms of service

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including Germany and the USA.

7. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this policy:

When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

8. Your Rights

Under GDPR and other applicable laws, you have the following rights:

8.1 Right of Access

You can request a copy of the personal data we hold about you.

8.2 Right to Rectification

You can ask us to correct inaccurate or incomplete data. You can also update most information directly in your account settings.

8.3 Right to Erasure

You can request deletion of your personal data. We will comply unless we have a legal obligation or legitimate reason to retain it.

8.4 Right to Restrict Processing

You can ask us to temporarily stop processing your data while we address your concerns.

8.5 Right to Data Portability

You can request your data in a structured, machine-readable format.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

8.7 Rights Related to Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights:

• Send us a message
• Use the data export/delete features in your account settings

We will respond to requests within 30 days. We may ask for verification of your identity before processing requests.

9. Security

We implement appropriate technical and organizational measures to protect your data:

Technical Measures

• Encryption in transit (TLS 1.3)
• Encryption at rest (AES-256)
• Regular security testing
• Access controls and authentication

Organizational Measures

• Access limited to those who need it
• Security assessments
• Incident response procedures

While we strive to protect your personal data, no method of transmission or storage is 100% secure. If you have concerns about security, please contact us.

10. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the “Last updated” date
• Sending an email notification (for material changes)

We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this privacy policy or our data practices:

Send us a message

Post:
Candesce Pty Limited
(care of) A Hallam Chartered Accountant
115 Haig Road, Auchenflower, QLD 4066
Australia

13. Additional Information for Specific Jurisdictions

For California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your rights

To exercise these rights, send us a message.