Introduction
Welcome to our Employee Recognition Platform ("Service"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information
We collect personal information that you voluntarily provide when you:
- Register for an account (name, email address, password)
- Complete your profile (job title, department, bio, timezone, birthday)
- Give or receive recognition
- Redeem rewards (delivery address, recipient information)
- Contact us for support
Automatically Collected Information
When you use our Service, we automatically collect:
- Device information (browser type, operating system)
- Usage data (pages visited, features used, time spent)
- IP address and approximate location
- Cookies and similar tracking technologies
Information from Third Parties
We may receive information from:
- Your organization's identity provider (SSO authentication)
- Microsoft Teams or Slack integrations (if enabled)
- OAuth providers (if you sign in with Microsoft)
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process recognition and reward transactions
- Send notifications about recognition received, comments, and rewards
- Personalize your experience and content recommendations
- Improve our Service through analytics and usage patterns
- Communicate with you about updates, security alerts, and support
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
Information Sharing and Disclosure
Within Your Organization
Recognitions and certain profile information are visible to other members of your organization. This includes your name, profile photo, job title, department, and recognition activity.
Service Providers
We share information with third-party service providers who perform services on our behalf, including:
- Cloud hosting providers (data storage)
- Email service providers (notifications)
- Reward fulfillment partners (gift card delivery)
- Analytics providers (usage insights)
Legal Requirements
We may disclose your information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information for legitimate business purposes or as required by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required for legal, accounting, or audit purposes.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
Access
Request a copy of the personal information we hold about you.
Correction
Request correction of inaccurate or incomplete information.
Deletion
Request deletion of your personal information, subject to certain exceptions.
Portability
Request a copy of your data in a portable, machine-readable format.
Opt-Out
Opt out of marketing communications and certain data processing.
Withdraw Consent
Withdraw consent where processing is based on your consent.
To exercise these rights, please visit your profile settings or contact your organization administrator.
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Secure password hashing using industry-standard algorithms
- Regular security assessments and monitoring
- Access controls and authentication requirements
- Rate limiting and abuse prevention
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We encourage you to use strong, unique passwords and enable any available security features.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns. For detailed information about our use of cookies, please see our Cookie Policy.
Children's Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and other approved transfer mechanisms.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact your organization administrator or reach out to us through the Help Center.