Data export and privacy

Go to your Profile > Account tab and select Export my data. Your current email address must be verified. Sessional builds a JSON file containing account records, including:

• Account details (name, email, decrypted phone number) and your profile
• Profession, AHPRA registration, business structure, super fund and billing details
• Every shift and booking request, with the workplace on each
• Invoices with line items, payment status and recorded chase details
• Every expense, including kilometres logged for cents-per-km claims
• Tax planner settings, subscription history and promo redemptions
• Document metadata, availability, referrals, support tickets and disputes
• Your in-app inbox, two-way messages, and an audit log of account actions

The file includes a manifest listing exported categories, row counts and exclusions. It excludes passwords, access tokens, internal messages and file contents. Document metadata is included, but download document files, invoice PDFs and receipts separately. Exports are limited to five requests per hour and recorded in the audit log.

For accounting and spreadsheet work you usually want a single table rather than the full JSON bundle. Dashboard CSV exports contain rows for spreadsheet review. Check the columns before importing them into another tool:

• Shifts: date, workplace, start and end times, rate, rate type, gross amount, status and notes
• Invoices: invoice number, workplace, issued and due dates, subtotal, total, status, sent and settled dates
• Expenses: date, category, description, amount, GST details, kilometres and notes; available on Plus and Pro
• Earnings: shift rows and paid cancellation fee rows; available on Plus and Pro

Shift times use the workplace time zone, with a profile-state fallback. Shift, invoice and expense CSV downloads include up to 500 rows and a notice if the results are truncated. Narrow the date range and export again for the rest. The expense export uses date filters, but does not carry over the log's search, category or GST filters. For programmatic access, see the REST API guide.

Before sharing an export, check which details the recipient needs. The JSON file can include personal contact, registration and bank details. Keep it somewhere private and use a suitable transfer method agreed with the recipient.

• Review: open the manifest to check the scope of your download
• Correct: review editable details in Profile before downloading a fresh copy
• Share selectively: use a dataset CSV if the recipient only needs that table
• Ask for help: contact support if you cannot find a record you expected

For deletion or a privacy query, email [email protected]. Our full privacy policy sets out who we share data with, including our sub-processors.

• Download the account JSON and any dataset CSV files you need
• Save invoice PDFs, documents and receipts separately
• Check that the files open and that the date ranges cover the records you need
• Read any truncation notices and download the remaining rows before proceeding

Sessional uses field encryption when saving sensitive profile details. Your downloaded export needs its own care:

• Profile updates encrypt ABN, registration number, bank BSB and account number, invoice address fields and phone number using AES-256-GCM
• The account export decrypts these details into readable values in the downloaded JSON
• Passwords and connection access tokens are excluded from the account export
• Review the file before sending it, and avoid putting it in a publicly shared folder

Read the full privacy policy and cookie policy for the complete picture.