TRWorkHub · Support and policies
Operator: Toomas Rannaste, an individual trading as TRWorkHub. Support: support@trworkhub.com.au. Privacy and account deletion: privacy@trworkhub.com.au. Both addresses are monitored by Toomas Rannaste.
Effective date:
This policy covers TRWorkHub on the web, iOS and Android. Toomas Rannaste operates the service as an individual trading as TRWorkHub. TRWorkHub helps company teams record and manage work. Your company controls the information it enters and the access it gives its people; its own employee privacy notices may also apply.
We process names, email addresses, account identifiers, company membership, roles and permissions to provide access. Supabase Auth handles authentication. Session information can remain in your browser or app until expiry or sign-out. Company administrators normally invite users; account setup and password recovery also involve authentication and email processing.
Records can include employee names and identifiers, classifications, job or site details, dates, start and finish times, breaks, hours, foreman details, notes and configured custom fields. Leave or Sick status can reveal sensitive information. Enter only necessary work information; avoid unnecessary medical details, identity documents or financial information in notes. Custom fields can change what a company collects.
The service generates and stores timesheet PDFs and exports records, including spreadsheets. Company logos and supported documents may be processed. Submitted records and change history can contain names, work details, identifiers and timestamps. Exported, emailed or shared copies may remain with recipients independently of the service.
Information supports authentication, company access, timesheet preparation, submission, reporting, troubleshooting and security. Authorized company users access records according to their roles and permissions. Companies may use records for employment, contractual or compliance purposes. This policy does not expand access permissions.
Cloud infrastructure may process IP addresses, request timestamps, browser or device information and error or security logs. Support correspondence includes the details you provide. TRWorkHub does not use advertising or cross-app tracking SDKs. Infrastructure providers may retain operational and security logs.
Supabase supports authentication, the database and file storage. Vercel hosts the web application and server requests. Resend delivers submitted timesheets by email. Account email delivery uses the configured authentication email service. Apple and Google operate their app distribution services. PDFs may go to company-selected recipients or apps chosen through device sharing. These providers process information to deliver their services; their privacy policies also apply to their own processing.
The application uses HTTPS, authenticated access and company-scoped authorization. These reduce risk but cannot guarantee absolute security. Protect credentials and devices, sign out of shared devices and report suspected unauthorized access. Native sharing uses temporary files with cleanup; copies saved elsewhere remain under your or the recipient’s control.
Cloud hosting, email delivery and support services may process information outside Australia. We do not promise Australia-only storage or processing. Contact privacy@trworkhub.com.au to ask about the arrangements relevant to your company before providing information with particular location requirements.
We retain information for the service and applicable employment, contractual, security or legal purposes. Removing login access does not automatically remove work records. Retention depends on the record and the company’s obligations; information no longer needed is eligible for deletion or anonymization. Backups expire through their backup lifecycle, and exported or emailed copies held by recipients are managed separately. Contact us for the retention arrangements relevant to your records. We do not promise instant erasure or indefinite retention.
Contact privacy@trworkhub.com.au to request access, correction or deletion, or to raise a privacy concern. Your administrator can also help with company records. You can contact us even if you cannot sign in, have left the company or cannot reach an administrator. We verify identity and authority before disclosing or changing information. The Account deletion page explains how to request deletion and which records may need to be retained.
Toomas Rannaste monitors privacy@trworkhub.com.au, which forwards to the monitored support mailbox. Please describe your request or concern without sending passwords, login codes or unnecessary sensitive information. We will respond about next steps and information needed to investigate. Updates to this policy will appear here with a revised effective date; material changes will receive appropriate notice.