Privacy Policy

WorkMet · Version 1.1 · October 2026

The short version. WorkMet stores the contact details and notes you record about people you meet. We can technically see that information because we run the service. We do not sell it, rent it, or use it to advertise to anyone. You can export everything at any time, and ask us to delete your account and its contents.

1. Who we are

WorkMet is operated by WNMC Holdings Pty Ltd (ABN 55 698 239 502), a company incorporated in Australia. In this policy, "we", "us" and "our" mean that company. "You" means the person who holds an account.

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where the General Data Protection Regulation or the UK GDPR applies to you, section 11 sets out the additional rights you have.

2. The two kinds of information here

This is the most important thing to understand about WorkMet.

Your account information

Your name, email address, a hashed version of your password, and the details you choose to publish on your own contact card — photograph, job titles, phone number, business names, websites and social links. You provide this about yourself.

Information you record about other people

Names, employers, roles, phone numbers, email addresses, photographs of people and of their business cards, where and when you met them, who introduced you, and any notes you write. This is personal information about people who are not our users and who have not dealt with us.

For that second category, you decide what is collected and why. We hold it on your behalf and act on your instructions. You are responsible for collecting it lawfully and for telling those people, where the law requires it, that you hold their details. See clause 4 of the Terms of Use.

3. What else we collect automatically

A sign-in cookie that keeps you signed in. It contains your account identifier and a signature, nothing else.
Standard server logs kept by our hosting provider, which may include IP addresses and request times, used for security and to keep the service running.

We do not use advertising trackers, analytics profiling, or third-party marketing cookies.

4. Why we handle it

To give you the service: storing your contacts, showing your card, sending nothing on your behalf without your action.
To keep accounts secure and prevent misuse.
To contact you about the service itself — outages, changes to these documents, or the end of the free beta.

We do not use your contacts to market to them. We do not contact the people in your list at all.

5. Reading a business card

If you use the card reader, the photograph is sent to an artificial intelligence model operated by Cloudflare to extract the text. The image is processed to produce that text and is not used to train models. If you would rather not use it, type the details in instead — every field can be entered by hand.

The same applies to the question box: your question and a short extract of the matching records are sent to that model to compose an answer.

6. Who can see your information

You. Other account holders cannot see your contacts, and you cannot see theirs. The service enforces this on every request.
Us. Because we operate the underlying database, our personnel can technically access what is stored. We access it only to run the service, fix a fault, respond to your request, or where the law requires it.
Our suppliers, listed in section 7.
Nobody else. We do not sell, rent, licence or trade personal information, and we do not disclose it for anyone else’s marketing.

7. Where it is stored, and overseas disclosure

WorkMet runs on infrastructure provided by:

Cloudflare, Inc. (United States) — application hosting, security, and the AI models used for card reading and questions.
Airtable, Inc. (United States) — the database holding your account, your contacts and uploaded images.

This means personal information you enter, including information about other people, is disclosed to overseas recipients in the United States and may be stored or processed there or in other countries where those providers operate. By using the service you acknowledge this. We take reasonable steps to use reputable providers, but we cannot guarantee that an overseas recipient will handle information in a way that complies with the Australian Privacy Principles, and Australian Privacy Principle 8.1 may not apply.

8. How long we keep it

We keep your information while your account is open. If you close your account, or ask us to delete it, we delete your account and the contacts, events, notes and images belonging to it within 30 days, except where we must keep something to comply with a legal obligation. Backups held by our providers may persist for a short period after that before being overwritten.

If your account is inactive for 24 months we may delete it after giving you notice at your registered email address.

9. Security

Passwords are stored as salted one-way hashes and cannot be read by us or recovered. Traffic is encrypted in transit. Access to the underlying database is limited to personnel who need it to operate the service.

No online service is perfectly secure. We cannot guarantee that information will never be accessed without authorisation, and you should not record anything in WorkMet that would cause serious harm if it were disclosed.

10. If there is a data breach

If we become aware of unauthorised access to, or disclosure or loss of, personal information we hold, we will assess it promptly. Where it is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner and affected individuals as required by the Notifiable Data Breaches scheme, and where another applicable law requires notification, within the time that law allows.

Because much of the information here is recorded by you about people who are not our users, we will notify you so that you can meet any obligation you have to those people, and we will co-operate with you in doing so.

11. Your rights

You can, at any time and without asking us:

See everything held about your account, inside the app.
Correct it, by editing it.
Export your contacts as a spreadsheet file, from the Account screen.

You can also ask us to delete your account and its contents, or to restrict what we do with it, by emailing [email protected]. We will respond within 30 days.

If the GDPR or UK GDPR applies to you, you additionally have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. Where we handle information you record about other people, we do so as a processor acting on your instructions; you are the controller of that information.

If you are in California, we do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we do not offer financial incentives in exchange for it.

12. Complaints

Email [email protected] and we will respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to your local privacy regulator.

13. Children

WorkMet is a tool for business networking and is not intended for anyone under 16. Do not create an account if you are under 16.

14. The signup form on our website

Separately from the app, our website has a form for people who want to be told when WorkMet opens, or who want to be considered as beta testers. You do not need an account to use it.

If you fill it in we collect your name and email address, which of the two things you asked for, the date and time, the website address you came from, whether you ticked the box agreeing to these documents and which version you agreed to, and whether you also agreed to marketing. We collect this so that we can reply to you, decide who to invite into the beta, and show, if we are ever asked, that you agreed.

Marketing is a separate, optional tick. Leaving it unticked does not affect your place on the list: you will still get the messages that are about your own signup, such as an invitation or a note that we have opened. Ticking it means we may also send occasional news and tips. Either way you can change your mind at any time by replying to any message, or by writing to [email protected], and we will act on it.

These entries sit in the same Airtable base as the rest of the service, so sections 6 to 10 apply to them as well. We keep them until you ask us to remove you, or until two years after we last heard from you, whichever comes first, after which we delete them. We do not sell or rent this list, and we do not pass it to anyone to advertise with.

15. Changes

We may update this policy. If a change materially affects how we handle your information, we will tell you in the app and ask you to accept the new version before you continue.