OfficeSpace

Client Privacy Policy

The Client Privacy Policy of OfficeSpace Software Inc. details how it collects, uses, and protects personal data from clients who use its Subscription Services, specifying that OfficeSpace collects necessary contact information and client-uploaded data to provide services per client instructions, processes additional data from client communications for service support and administration, gathers technical data from devices for optimization, and commits to processing client data solely to fulfill contracted services under strict data protection obligations.

This Client Privacy Policy applies to clients of OfficeSpace Software Inc. (“OfficeSpace”) that have signed an agreement (“OfficeSpace Clients”) to use our Subscription Services (the “Services”). It outlines how OfficeSpace collects, uses, processes and protects personal data provided by OfficeSpace Clients who use our Services.

Information We Collect and How We Use It

OfficeSpace collects only the information needed to provide our Services. This includes names, email addresses, and other contact information to provision accounts and provide the Services. OfficeSpace Clients upload their information to our service (“Client Data”) for purposes of receiving the Services. Clients control their own instances and choose what Client Data to submit. Client Data might include information about employees (e.g., names, email addresses, titles).

OfficeSpace uses Client Data to provide the Services in accordance with Clients’ instructions pursuant to their signed agreements.

OfficeSpace also receives personal data when Clients communicate with us directly, for example by email or when a support request is made (“Other Data”). Other Data is used in furtherance of our legitimate interests in providing Services, including responding to support requests, sending communications, billing, account management, and administrative matters.

OfficeSpace also collects information that web browsers, mobile devices, and servers make available, such as IP addresses, browser types, language preferences, time zones, referring URLs, dates and times of access, operating systems, mobile device manufacturers, and mobile network information. These are included in log files to understand more about visitors and to optimize experiences.

Data Processing Commitments and Our DPA

OfficeSpace undertakes certain obligations regarding the protection of Client Data, including:

  • Processing Client Data only for the purpose of providing the contracted Services.
  • Ensuring that anyone with access to Client Data is committed to maintaining its confidentiality.
  • Implementing appropriate technical, organizational, and security measures to protect Client Data.
  • Promptly notifying Clients in case of any event that might compromise the security of Client Data.
  • Complying with requests to correct, transfer, or remove Client Data to comply with applicable data protection law.
  • Removing all Client Data from OfficeSpace systems once Services are completed.

This statement illustrates OfficeSpace’s commitment but does not constitute a binding agreement. To enter into a Data Processing Addendum, contact OfficeSpace via email.

Data Retention

OfficeSpace retains Client Data as long as required to provide the Services and otherwise in accordance with applicable law. Client Data is deleted when Services are terminated, following standard data deletion practices.

Other Data is retained as long as necessary for the purposes described in this Privacy Policy or as needed for legitimate business interests, audits, legal obligations, dispute resolution, and enforcement of agreements.

Communication

OfficeSpace may occasionally send notification emails to Clients containing product updates, legal documents, support offers, or marketing emails. Except where required by law, Clients can unsubscribe from these messages.

OfficeSpace will never sell, exchange, or distribute clients’ information and never uses it to send unsolicited commercial electronic mail or spam.

Legal Bases for Processing (for Individuals in the European Economic Area)

For individuals in the EEA, OfficeSpace collects and processes information only where there is a legal basis under applicable EU laws, including GDPR. OfficeSpace will process information if:

  • It is necessary to provide Subscription Services;
  • It satisfies a legitimate interest (e.g., research, development, marketing) not overridden by data protection interests;
  • Consent is given for a specific purpose;
  • It is needed to comply with a legal obligation.

If consent is given, it can be withdrawn at any time.

Information Sharing and Disclosure

OfficeSpace does not sell personal information. Information is shared only as described in this Privacy Policy and only with parties who adopt appropriate confidentiality and security measures. Information is shared as follows:

  • Client Instructions: Client Data is shared and disclosed only in accordance with Clients’ instructions and applicable agreements and law.
  • Consent: Other Data may be shared with third parties if consent is given.
  • Legal Compliance: Other Data may be disclosed to legal authorities or regulatory agencies if required by law.

Changes and Contact Information

This Privacy Policy may be updated periodically. Clients will be notified of significant updates at the provided email address. For questions, contact OfficeSpace via email. Continued use of the Services after changes constitutes agreement to the changes.

Our Subprocessors

OfficeSpace Software uses certain subprocessors to assist in providing Services. A subprocessor is a third-party data processor that may have access to Client Data. OfficeSpace evaluates the security, privacy, and confidentiality practices of all subprocessors and requires them to commit to contractual obligations equivalent to those OfficeSpace upholds.

How We Protect and Transfer Your Information

OfficeSpace requests an email address from all clients for privacy-related notifications.

Clients worldwide subscribe to OfficeSpace’s services. Information is collected and stored in the United States by default, but clients may elect to have data stored in other regions, including the EU, Canada, or Australia. Information may be shared with affiliates to better serve clients. Transfers of information originating in the EU are conducted in accordance with EU data protection laws, using mechanisms such as adequacy decisions, EU Model Contract Clauses, binding corporate rules, or other appropriate legal means.

Controlling Your Information

If OfficeSpace holds your personal data, you have the right to:

  • Review the information you provided;
  • Request corrections to errors or omissions;
  • Request not to be contacted using your information;
  • Request omission from mailing lists;
  • Request deletion from records.

To exercise these rights, contact OfficeSpace via email. If OfficeSpace is acting as a controller, requests will be responded to within a reasonable timeframe. If acting as a processor on behalf of a Client, requests will be forwarded to the data controller.

Children

OfficeSpace’s services are not directed towards children, and no personal information is knowingly collected from children under sixteen. If such information is discovered, it will be deleted.

Business Transactions

If OfficeSpace is sold, acquired, or merged, the acquiring entity will be legally bound to honor commitments in this Privacy Policy. Clients will be notified of any change in ownership or use of personal information and service data, as well as any choices regarding personal information.

Contact Us

Your information is controlled by OfficeSpace Software Inc. For questions or concerns about information handling, contact:

OfficeSpace Software Inc.

2810 N Church St.

PMB 39903

Wilmington, DE 19802

Email: Contact OfficeSpace

OfficeSpace Subprocessors

  • BugSnag (United States): Quality Assurance – Faulty function calls and stack traces
  • Google, Inc. (United States): Cloud hosting, email, and productivity tools – Floor plans, seat locations, name, email, and other data as defined by client
  • HubSpot (United States): Communication for marketing and product updates – Contact information, company, title
  • Mailgun (United States): Cloud-based email notification services – Email generated by the application
  • OfficeSpace Software Canada (Canada): Customer Support – Application data supplied by client
  • OfficeSpace Software CR SRL (Costa Rica): Customer support – Application data supplied by client
  • Salesforce (United States): Customer Support – Contact information
  • Heroku (OfficeSpace Greetly) (United States): Infrastructure and cloud hosting – Name, email, and other data as defined by client