Privacy Policy

1. Information we collect

When you sign in to WorkFromCafé, we receive basic profile information from your chosen OAuth provider (currently Google) — typically your name and email address. We store this to identify your account and personalise your experience.

We also collect information you submit directly, such as indications of when you plan to visit a Location (a café, restaurant, bookstore, or other listed workspace), optional feedback, or any other content you contribute to the platform.

When you visit WorkFromCafé, a randomly-generated session identifier is stored in your browser's local storage. This happens before you sign in and persists across sessions. If you later sign in, activity recorded under this session identifier — such as which Location pages you viewed — may be linked to your account.

We also record page views (which pages you visit and which Location you're viewing) and interactions with Location listings and features. These are logged against your session identifier.

2. How we use your information

• To authenticate you and maintain your session.
• To display your contributions on the platform.
• To send you transactional emails related to your account.
• To understand how the platform is used — including which Locations attract interest and how users navigate the site — using session-based analytics.
• To send Location owners a daily summary email containing aggregate figures — including how many people indicated they plan to visit that day, page view counts, and unique visitor counts. Individual account details such as your name are not included in these summaries.
• Optional feedback you submit (for example, when indicating you do not plan to visit a Location) may be used in anonymised, aggregated form and may appear in summaries provided to that Location's owner. We do not share feedback in a way that identifies you personally.

We do not sell your personal data to third parties.

3. Data storage

Your data is stored with a cloud database and authentication provider hosted on servers in Australia.

4. Third-party services

We use the following third-party services, each with their own privacy practices:

• Google — for sign-in via OAuth.
• A cloud database and authentication provider — for storing your data and managing sign-in.
• A transactional email service — for sending account-related emails.

5. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you.
• Correct any personal information that is inaccurate or misleading.
• Delete your account and associated data — we will process such requests within 30 days. Note that aggregate data already included in summaries sent to Location owners cannot be recalled, as it does not identify you individually.

We retain your personal information for as long as your account is active. If you request account deletion, your data will be removed within 30 days.

If a privacy breach occurs that poses a serious risk of harm, we will notify the New Zealand Privacy Commissioner and affected individuals as required by law.

To exercise any of these rights, contact us via the email below.

6. Children's privacy

WorkFromCafé is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

7. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by prominent notice on the platform before they take effect. Continued use after that notice constitutes acceptance of the revised policy.

8. Contact

Questions? Reach us at support@workfromcafe.nz