Stepworks is job-management software for cleaning businesses, operated by IMA Software Group (“we”, “us”). This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Who is responsible for your information
Cleaning businesses (our customers) use Stepworks to run their operations. When a business enters information about its staff, contractors, clients or job sites, that business decides why and how the information is used; we store and process it on their instructions. If you are a worker or a client of a business that uses Stepworks, ask that business first about your information. This policy covers what we do as the platform operator.
What we collect
- Account details: name, email address, password (stored as a hash) or sign-in provider, role, and your organisation.
- Worker profiles entered by a business: contact details, ABN and GST registration, insurance details, skills, uploaded documents such as ID or police checks.
- Job records: clients, sites and addresses, checklists, notes, photos taken on site, materials, quotes, timesheets and statements.
- Location: when a worker clocks on or off a job, the time and their device location at that moment, if they allow it. Photos may carry the location where they were taken. Location is not tracked continuously.
- Technical data: IP address, browser and device type, and logs needed to run and secure the service.
How we use it
- To provide the service: scheduling, checklists, evidence of work, timesheets, contractor statements and quotes.
- To send service email and, if you opt in, push notifications about jobs assigned to you.
- To keep the service secure, prevent abuse and meet our legal obligations.
- To support customers and improve the product. We do not sell personal information or use it for third-party advertising.
Where it is stored and who can see it
Data is hosted in Australia (Amazon Web Services, Sydney region). Uploaded photos and documents are stored privately and served through short-lived signed links. Within a business, owners and office staff can see the records of their organisation; workers see their own assignments, time and statements. Stepworks staff access customer data only to provide support or resolve incidents, and access is logged. Service providers we rely on include Amazon Web Services (hosting, storage, email delivery), Google (optional sign-in and address lookup) and the Australian Business Register (ABN lookup). We do not otherwise disclose personal information overseas.
Retention
Job, time and financial records are kept for as long as the business needs them and for the periods required by Australian tax and employment law (generally at least seven years). A business may delete clients, sites and profiles it no longer needs; account and location records are removed when the related job records are removed.
Your rights
You may ask to access or correct personal information we hold about you. If a business entered the information, we will refer the request to that business unless it is about your own account. Contact us at support@stepworks.com.au. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Cookies and notifications
We use only the cookies needed to keep you signed in and secure. Push notifications are optional and can be turned off in your browser or on your My jobs page at any time.
Changes
We will post updates to this policy here and note the date above. Material changes to how location is used are shown to workers again before they next clock on.