Last Updated: November 13, 2019
When we refer to “you” in this policy we do not just mean your firm; rather, the “you” refers to your firm and each of your employees and other personnel who are authorized to access and use our Platform (as defined below) on behalf of or in performing work for your firm.
Who we are and what we do
Acceptance and Changes
2. Children's Privacy
We do not knowingly collect information of persons who are under the minimum required ages specified herein. Residents of the European Union must be at least 16. Persons outside of the EU must be at least 13. Persons who are under 18 must obtain parental consent to use our services.
3. Data We Collect About You
We collect information about you when you use our Services. In addition, third parties may collect information about you when you use our Services. Collected information may include or reflect personal information that could identify you, as well as non-personal information. We refer to your information as “your data” for short.
To create an account with us, you must provide certain basic information such as a valid email address and password, office address, name, phone number, job title and time zone. Likewise, if you access our Platform through a web browser single sign-on (known as an SSO) we will receive a portion or all of the foregoing information in a standard single sign-on format such as SAML (Security Assertion Markup Language) from your identity provider.
To use our Platform and/or order Services (e.g., by engaging a vendor through our Services Marketplace to perform work at your office) you may need to provide a valid payment method (e.g., credit card or ACH data) along with applicable credit or debit card account numbers and related account details. Your payment information will be collected and processed by our authorized payment vendors (we currently use Stripe). We do not store credit or debit card or account numbers ourselves.
Depending on how you use our Platform there’s a wide variety of information regarding your business that you may provide to us so that we may effectively deliver the Services. Examples include without limitation the following:
Service request details, including relevant documents and answers to questions regarding your office space and the Services you are requesting and the vendors you have used in the past (and your opinions of them);
The applicable office address and the specific requestor’s name and other identifying details such as his or her email address;
Certificates of Insurance and/or sample Certificates of Insurance;
Back-and-forth messaging and documentation (including document metadata) between us regarding the status and/or progress of the Services and related notes;
Reviews of vendors and private notes regarding vendors;
Employee requests and related task generation and other details relating to workload management;
Your point of contact;
Contracts relating to the Services;
Union status of your business and/or building; building hours of operation; building access information;
Space information (e.g., WiFi details, visitor policy, fire safety, nearby restaurants and attractions); space related documents (e.g., lease, seating chart, blueprints); miscellaneous other documents, materials and information relating to your space; and, pictures of your space;
Inventory information (including related pictures); and
Information regarding physical items in your office space (e.g., microwaves, refrigerators, related warranties and service histories).
Other Information You May Submit
You may submit data to us for limited purposes such as requesting customer support; answering a questionnaire; participating in a study; entering contests or sweepstakes; or signing up to receive communications from us or another user.
We automatically collect certain types of data when you use our Services. This data includes your IP address, technical information about your device (e.g., browser type, operating system, basic device information), the web page you visited or search query you entered before reaching us, and your navigation around our Site.. We may track your activities using cookies and similar technologies. By using our Platform, you agree to our use of these methods.
Your Social Media Interactions
We receive personal information about you when you interact with us using our social media pages and channels, or on other channels and content. The personal information includes profile name, profile identifier, and the content of your submissions. Please review the privacy policies and settings of any websites, mobile applications, or social networks should you have any questions about their privacy practices.
Events, Contests and Sweepstakes
We request personal information, such as your name, email address, and date of birth when you choose to participate in an event, contest, or sweepstakes. We use this information to determine eligibility, process your registration or entry, enforce the terms of the event, contest, or sweepstakes, and contact you about the event, contests, and sweepstakes you are participating in. We may also disclose the personal information to third-parties or the public in connection with the event, contest, or sweepstakes, such as for winner selection and announcements and prize fulfillment, as stated in the official rules, and as otherwise required by law.
Information Collected by Third Parties
Some third parties may collect data about you when you use our Services. This may include data you submit (such as payment information) or automatically-collected information (in the case of third-party analytics providers (e.g., Google Analytics) and advertisers).
We may obtain data from third parties about you. We may combine that data with information that we have collected. For example, some advertisers or advertising platforms may allow us to determine what other online services you might use so that we may place relevant ads on those services.
Other Sources of Information
We collect information through various other means, including participation at conferences and events, individual introductions, from employers that enroll their employees in our Services, and from selected third-party business partners, including third party vendors you may engage from time to time through our Services Marketplace. From time to time, we may also acquire from third parties certain lists containing the names and contact information of individuals who may be interested in our products and services.
4. How We Use Your Data
We may use your data for the following purposes:
Identification and authentication
: We use your data to verify you when you access your account;
Operating our Services
: We use your data to provide our Services, process and fulfill orders (including by sharing your data, but only to the extent necessary, with third party vendors whom you engage through our Services Marketplace to perform Services for your business), provide customer support, and to otherwise comply with our contractual obligations to you. We (and/or our third-party vendors) use your payment information to process purchases made by you;
Communicating with you
: We use your data when we communicate with you (e.g., when we respond to a customer support or other inquiry);
Improving our services
: We use your data to understand how our Services are being used and how we can improve them. In general, we analyze aggregated data, rather than specific user data. We may, however, need to analyze a specific case to address a specific problem (e.g., a bug that affects only a few accounts);
Customizing your experience
: We use your data to personalize the Platform to you. This may include, for example, remembering orders for third party Services previously placed by you through the Platform (and in particular our Services Marketplace) and the vendor who performed them;
Marketing and advertising
: We use your data to display ads and send you offers. We may also use your data in delivering third-party advertisements to you. This may include “targeted ads” based upon your individual interests and/or activities;
Exercising our rights
: Where reasonably necessary, we use your data to exercise our legal rights and prevent abuse of our service. For example, we may use your data to detect and prevent fraud, spam, or content that violates our Terms of Service;
: We use your data where we are legally required to do so. For example, we may need to gather your data to respond to a subpoena or court order; and
Protecting your information: Where appropriate, we may anonymize, backup, and delete certain data.
We may use algorithms and other automated means to implement any of the above.
5. With Whom We Share Your Data
As you instruct
: We may make your data available to others as you instruct in using our Services. We may share your data with persons to whom you have granted account-level access;
With your consent
: We may share your data with third parties where we have obtained your express consent to do so. You may revoke these consents;
Enabling Services on the Platform
: We may share your data with third-party vendors that: perform Services for your business based on the orders (if any) you place through our Services Marketplace; or, otherwise help us provide our Services, process orders, and comply with your instructions and our contractual obligations. The foregoing includes payment processors, content delivery networks (CDNs), cloud-based hosting services, monitoring services, email service providers, quality assurance and testing vendors, fraud and abuse prevention vendors, customer relations management (CRM) vendors, and shipment vendors; each of the foregoing represents a trusted third party engaged to help us provide, improve, protect, and promote our Services (but, we do not ultimately control such third parties);
Strategic Partners and Co-Branded Sites
: From time to time, we may enter into a special relationship with another company that is not owned by or affiliated with us to provide or promote joint products, services, applications, or features (together, “Jointly Offered Items”). These special relationships may include co-branded web sites (“co-branded pages”). Any information, including personal information, that you provide in connection with one of these Jointly Offered Items, and/or on one of these co-branded pages, will be shared with our third-party partners. You should check these third parties’ web sites for information regarding their privacy practices. If you do not want personal information about you shared with such third parties, please do not provide personal information in connection with the Jointly Offered Items and/or co-branded pages.
: We may share your data with advertising companies to display relevant ads to you. Unless you expressly agree, we will not share or sell your name, email address, or physical address with such persons;
: We may share your data with persons who provide analytics showing how customers are using our Services;
Affiliates and advisors
: We may share your data with our affiliates and our auditors and advisors for planning, financial reporting, accounting, auditing, tax filings, and legal compliance. Unless you expressly agree, we will not share your data with any affiliate for other purposes, such as direct marketing;
Certain legal situations
: We may share your data where we believe disclosure is necessary to comply with a legal obligation or in connection with a corporate transaction as discussed in Section 6; and
Aggregated or anonymized information
: We may publicly disclose non-personal aggregated or anonymized information such as our number of visitors and registered users.
We use reasonable efforts to vet vendors for their privacy and data security practices. We require that such vendors agree to protect the data we share. Generally, when we share data with third parties pursuant to this Section 5 we make diligent efforts to not divulge your information to unauthorized individuals, and to limit access to your information to authorized persons.
6. Legal and Safety-Related Disclosures
We may disclose your data in response to official requests (e.g., court orders, subpoenas, search warrants, national security requests, etc.) (“requests”) that we receive from government authorities or parties to legal proceedings. In the event of our bankruptcy, insolvency, reorganization, receivership or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how personal information is treated.
We handle U.S. requests in accordance with U.S. law. If the request originates from a foreign jurisdiction, we will typically disclose information where we in good faith believe that disclosure is permitted by both U.S. law and local law. In all cases, we may raise or waive any legal objection or right available to us, in our sole discretion.
We may disclose user data where we reasonably believe that someone’s life is at risk. For example, if we become aware of a person threatening to commit suicide, we may share that person’s data with appropriate entities that may have the ability to help.
We may disclose user data to report suspected crimes. We report content suspected of exploiting minors to the National Center for Missing and Exploited Children (NCMEC) along with the data identifying the uploading user.
We may disclose user data in situations involving legal claims against us or one of our users. If you submit a Digital Millennium Copyright Act (DMCA) or other takedown notice, we may share that notice with the affected user. If you challenge such a notice, we may share your response with the complainant.
7. Data Retention
We retain your data for as long as you have an account. We may retain logs of automatically collected information (for internal analytics); your email address; your tax information; communications with you; and your transactional information (for auditing, tax, and financial purposes). If we receive legal process pertaining to your account, we will retain your data for as long as we in good faith believe is necessary to comply with the legal process. Similarly, if we believe that your account has been involved in wrongdoing, we may preserve your data to defend or assert our rights.
8. Your Privacy Choices
We enable you to make numerous choices about your data:
You may choose not to provide us with certain information. For example, you may choose not to create an account or not to provide optional account information.
You may change or correct information voluntarily submitted to us. We encourage you to keep your data current by viewing your settings page.
You may opt out of receiving commercial emails from us. See Section 9 for more details.
Users from certain countries may have additional rights.
9. Communications from Us
By creating an account, you consent to receive commercial emails from us. This includes newsletters and offers. All users may decline to receive commercial messages using the links at the bottom of commercial emails. Please note that you will continue to receive transactional emails from us (e.g., emails confirming transactions and/or providing information about your account).
Mobile Device Communications
We may, with your consent, send push notifications in our apps. You may disable these by declining them or changing the app’s settings.
10. Protecting Your Information
We use physical, technical, and organizational security measures to safeguard your data from unauthorized or accidental disclosure. Additionally, we take reasonable steps to ensure that our third-party business partners – including the third party vendors whom you may engage from time to time pursuant to our Services Marketplace – provide sufficient protection for personal information. Despite these efforts, no information system can be 100% secure, so we cannot guarantee the absolute security of your information. Users also have a role to play in keeping their data safe. We encourage you to use a unique and hard-to-guess password for your account and to not share it with others. You should only grant access rights to people who you know and trust, and, even then, you should be careful in granting all access rights. You should monitor your account regularly. If you believe that someone has gained access to your account without your permission, please contact us immediately so that we can investigate.
11. Your Responsibilities
You may receive other people’s data in using our service. If you receive information from other users, you must comply with all laws, including those concerning privacy, data security, and online marketing.
12. Third-Party Services
13. Where Personal Information is Used and Stored
We operate the Platform and the Services in the United States. Therefore, if you provide us with personal information during your use of the Services, we collect, process, and store that information in the United States. We may also transfer that information to our affiliates and subsidiaries or to other third-parties, across borders to other countries or jurisdictions around the world. If you are accessing our Platform from the European Economic Area or other regions with laws governing data collection and use that may differ from U.S. law, please note that you may be transferring your personal information to the United States, which does not have the same data protection laws as the European Union (“EU”) or other countries.
We maintain appropriate safeguards to properly protect personal information concerning you when it is transferred to the United States.
14. California Privacy Rights
California residents have the right to opt out of disclosing information to third parties for the purpose of allowing such third parties to directly market their products and services. At this time, we do not engage in this type of disclosure. If you have questions, please contact us.
15. Accuracy of Personal Data and your Individual Rights
While we take various steps to ensure the accuracy and completeness of your personal information, we rely upon you to provide accurate and complete personal information when interacting with us. You may also have the legal right, for example if you are using the Platform and/or Services from the EU, to request:
confirmation as to whether or not we process personal information from you and, where that is the case, access to your personal information;
Rectification of inaccurate personal information;
Erasure of personal information;
Objection to the processing of personal information;
Restriction of processing of personal information; and
Portability of personal information – i.e., to receive the personal information you have provided to us in a structured, commonly used and machine-readable form and transmit that data to another entity.
Also, where our processing of your personal information is based on your consent, you may withdraw consent at any time for the future. Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal.
Any such requests should be submitted by email to [insert email address].
If you are using the Services from the EU, you also have the right to lodge a complaint with an EU supervisory authority if you do not think we are handling your personal information in compliance with applicable law. However, if you have a complaint regarding the processing of your personal information we kindly request that you first contact us directly by sending us an email at [insert email address], and we will reply promptly.
16. How to Contact Us
For any questions, inquiries, or complaints relating to your privacy, please contact us at email@example.com