Privacy Policy
Privacy Policy
Last Updated on 2026-09-01
This Privacy Policy describes the information we collect about you as a visitor to ouroffice.io, gotrivvy.com, or other OurOffice websites that link to this Privacy Policy, or as a user of our Services, how OurOffice, Inc. will use the information provided, and with whom we may share the information. The Policy describes your choices and rights related to the information that is provided to or collected by OurOffice, Inc.
Updates to the Privacy Policy reflect changes in applicable data protection laws, including the European Union General Data Protection Regulation (“GDPR”). Additionally, We have made this Privacy Policy more clear, concise, and accessible by organizing it into the sections listed in the Table of Contents below.
Corporate Relationship. OurOffice, Inc. is the registered business entity and the owner of all Services described in this Policy. Trivvy (accessible at gotrivvy.com) is a product operated under OurOffice, Inc. The Company’s corporate domain is ouroffice.io, which is used for company and administrative communications. All references in this Policy to “Company,” “Us,” “We,” or “Our” apply equally to Trivvy as a product offering of OurOffice, Inc., and this Policy applies to all Services and platforms operated by OurOffice, Inc.
Topics Covered by This Data Privacy
1. Applicability of this Privacy Policy
2. Legal Disclaimer
3. Information We Collect and Receive About You and How We Use It
4. Data Retention
5. Data Security
6. International Transfer of Personal Information
7. Marketing
8. Your Rights
9. Changes to this Policy
10. Contacting Us If You Have Questions or Concerns.
1. APPLICABILITY OF THIS DATA PRIVACY
This Privacy Policy describes the policies and procedures of OurOffice, Inc. regarding the collection, use, access, correction, and disclosure of your personal information on OurOffice.io, gotrivvy.com, or other OurOffice websites that link to this policy (the “Platforms”) or in delivery of our other products and services (the “Services”). Your personal information will include any information which, either alone or with other data, is reasonably available to us and relates to you (“Personal Information”).
This Privacy Policy also covers any of your Personal Information which is provided to us and which is used in connection with the marketing of the services, features or content we offer to our Customers and/or the support that we may give you in connection with the provision of our Services.
Finally, this Privacy Policy also describes the choices available to you regarding the use of, your access to, and your rights in relation to your Personal Information.
This Privacy Policy does not apply to any third party applications, software or services that can be accessed from the OurOffice Platforms or Services, such as applicant tracking systems, social media websites or partner websites (“Third Party Services”).
In this Policy, "Customer" means the organization that has contracted with OurOffice to use the Services, typically your employer or a business you interact with; "Administrator" means an individual authorized by a Customer to manage its account, surveys, and results; “End Users” means individuals who receive messages or surveys through the Services on a Customer's behalf, including the Customer's employees and contractors and the Customer's own customers or business contacts; "Websites" means our marketing websites, including ouroffice.io and gotrivvy.com; "Visitor" means anyone who visits our Websites; and "Customer Data" has the meaning given in the Customer's agreement with us.
The Services are not directed to children under 13, and we do not knowingly collect Personal Information from them. If you believe we have collected such information, please contact privacy@ouroffice.io and we will delete it.
2. LEGAL DISCLAIMER
OurOffice may disclose Personal Information when required by law or in the good faith belief that such action is necessary in order to conform to the edicts of the law, comply with legal mandates, enforce the terms of use on our websites, enforce agreement between OurOffice, Inc. and its Customers or to protect the rights, property, or personal safety of OurOffice, its users and the public.
For Customer Data, such disclosures are limited to those required by law or permitted by the Customer's agreement with us.
3. INFORMATION WE COLLECT AND RECEIVE ABOUT YOU AND HOW WE USE IT
Information You Provide Us
Personal Information. When using the Services, you, or an organization that you work for or do business with, may provide us with Personal Information such as your name, job title and other employment details, email address, phone number, and demographic information your organization chooses to provide (such as gender). This information is used to (i) communicate with you by responding to your requests, comments and questions, (ii) improve the Platforms and (iii) perform the Services provided by OurOffice. The GDPR legal basis for processing this information is (i) the legitimate interest in communicating with you and improving our Services and (ii) the contractual obligation to perform the Services.
Contact Information. When you express an interest in obtaining additional information about the Services or the Platforms, OurOffice may ask you to provide your personal contact information, such as your name, email address, and phone number. This information is used to communicate with you by responding to your requests, comments and questions. The GDPR legal basis for processing this information is the legitimate interest in communicating with you and answering your questions.
Device Information. When you access the Platforms through a web browser, we automatically collect device information such as operating system, browser type, and device type. The GDPR legal basis for processing this information is the legitimate interest in operating and securing the Platforms and, for End Users, the contractual obligation to the Customer to perform the Services.
Location Information. We do not request or track precise location information from your device. Your IP address, collected as described under Log Data, may indicate your general geographic region.
Log Data. As is true of most websites and products, we gather certain information automatically. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on OurOffice Platforms (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the Platforms. The GDPR legal basis for processing this information is the legitimate interest in improving the relevance of OurOffice Platforms.
Tracking Technologies. OurOffice and its partners use cookies or similar technologies on our marketing Websites (such as gotrivvy.com and ouroffice.io) to analyze trends, administer the Websites, and understand how Visitors use them. These technologies are not used to track End Users who respond to surveys or messages through the Services. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on OurOffice Platforms or Services. We may partner with third parties to either display advertising on OurOffice Platforms or to manage our advertising on other sites. Our third party partners may use technologies such as cookies to gather information about your activities on our Websites and other sites in order to provide you with advertising based upon your browsing activities and interests. The GDPR legal basis for processing this information is the legitimate interest in improving the relevance of OurOffice Platforms.
Other Information
Social Media Features. OurOffice Platforms may include social media features, such as the Facebook “Like” button and widgets, such as the “Share This” button or interactive mini-programs that run on OurOffice Platforms. These features may collect your IP address, which page you are visiting on OurOffice Platforms, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on OurOffice Platforms. Your interactions with these features are governed by the privacy policy of the company providing it.
Blog, Testimonials, and Referrals. Our Platforms offer publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. We display personal testimonials of satisfied customers on our Platforms in addition to other endorsements. With your consent, We may post your testimonial along with your name. In addition to your other rights, if you wish to update or delete your testimonial, you can contact us at privacy@ouroffice.io. The GDPR legal basis for processing this information is your consent.
Information We Process on Behalf of Customers
When a Customer uses Trivvy, the Customer owns and controls the data it provides or collects through the Services, including End Users contact information, and contents such as messages and survey responses. OurOffice processes that data as a service provider (and, under the GDPR, as a processor) on the Customer's behalf, under the Customer's agreement with us, which governs how the data is used, protected, retained, and deleted. If you have questions about how your organization uses Trivvy, please contact the Customer that sent you messages or surveys through the Services.
How it is used. We use Customer Data only to deliver, support, secure, and improve the Services. We may use aggregated or de-identified information that cannot reasonably identify you or the Customer for analytics, service improvement, and research.
AI features. Some features use third-party AI models under terms that prohibit the provider from using Customer Data to train its models. Your name, phone number, and email address, and the Customer's name, are not sent to these providers. The text of your messages and survey responses is sent as written, so please avoid including personal, sensitive, or confidential details you do not want processed.
SMS participation. When you participate by text message, we process your phone number, the content of your messages, and the date and time they were sent, to deliver messages and surveys on behalf of the Customer.
Confidentiality of survey responses. Customers control who can view messages and survey results. When a survey is configured as anonymous, Customer administrators cannot see which individual submitted a response. OurOffice retains the association between a phone number and a response only as needed to deliver the Services.
Sensitive information. Trivvy is not designed to collect government identification numbers, payment card data, health information or other sensitive categories of personal data, or information that is classified or subject to export controls. Please do not include this type of information in messages or survey responses.
How, and With Whom, Your Information Is Shared
Third Party Services. At times, you may be able to access other Third Party Services through the Platforms, for example by clicking on links to those Third Party Services from within the Platforms. We are not responsible for the privacy policies and/or practices of these Third Party Services, and you are responsible for reading and understanding those Third Party Services’ privacy policies.
Information Shared with Our Service Providers. We may share your information with third parties who provide services to us. These third parties are authorized to use your Personal Information only as necessary to provide these services to us. These services include cloud hosting and database services, SMS and email delivery, AI services, and customer support tools. A current list of our Sub-Processors is available at https://trust-center.gotrivvy.com/.
Information Shared with Our Sub-Processors. We employ and contract with people and other entities that perform certain tasks on our behalf and who are under our control such as the service providers listed in our Sub-Processor list. We may need to share Personal Information with our Sub-Processors in order to provide Services to you. Unless We tell you differently, our Sub-Processors do not have any right to use Personal Information or other information we share with them beyond what is necessary to assist us. Transfers to subsequent third parties are covered by onward transfer agreements between OurOffice and each Sub-Processor.
Information Disclosed Pursuant to Business Transfers. In some cases, we may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. Moreover, if We, or substantially all of OurOffice assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of OurOffice, Inc or Our assets may continue to use your Personal Information as set forth in this Privacy Policy. You will be notified via email and/or a prominent notice on OurOffice Platforms of any change in the legal owner or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.
Information Disclosed for Our Protection and the Protection of Others. In certain situations, We may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We also reserve the right to access, read, preserve, and disclose any information as we reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request (ii) enforce this Policy, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security, or technical issues; (iv) respond to user support requests; or (v) protect OurOffice rights, property, or safety. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention. For Customer Data, disclosures under this paragraph are limited to those required by law or permitted by the Customer's agreement with us.
We require all third parties to respect the security of your Personal Information and to treat it in accordance with applicable laws. We do not allow third party service providers and Sub Processors we share your Personal Information with to use it for their own purposes and only permit them to process your Personal Information for specified purposes in accordance with OurOffice instructions. Unless we otherwise have your consent, we will only share your Personal Information in the ways that are described in this Policy.
Mobile Communications and Consent
Trivvy sends SMS and other mobile messages only to individuals who have enrolled, or been enrolled by a Customer, in the Services. Individuals may enroll themselves using a QR code or enrollment link, in which case we obtain and record their express consent. Where a Customer provides End Users phone numbers, the Customer is responsible for providing any required notice and obtaining any required consent. Every message identifies its purpose and includes opt-out instructions (for example, "Reply STOP to unsubscribe"). You may opt out at any time, and we will honor opt-out requests promptly.
No Sale of Phone Numbers or Personal Data for Marketing
Customer and end-user phone numbers and other personal data collected through our Platforms (including OurOffice or Trivvy platforms) are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Such data is used solely for service delivery (including authentication, notifications, messaging, and survey participation), support, security, and service improvement, or as required by law.
4. DATA RETENTION
Customer Data. We retain Customer Data while the Customer uses the Services and delete it after the Customer's agreement ends, as provided in that agreement.
Other Personal Information. We retain Visitor, contact, and marketing information for as long as needed for the purposes described in this Policy, and as necessary to comply with legal
obligations, resolve disputes, and enforce our agreements. You may request deletion at any time by contacting privacy@ouroffice.io.
Requests from End Users. If you are a member of a Customer's End Users or do business with them and want your information deleted, please contact the Customer’s organization. If you contact us directly, we will forward your request to the Customer.
5. DATA SECURITY
The security of your Personal Information and OurOffice Customers’ information is very important to us. We use administrative, physical and technical measures designed to protect your information from unauthorized access, use, disclosure, alteration or destruction, in accordance with applicable laws and regulations.
Customer Data is hosted in Amazon Web Services data centers in the United States. We encrypt data in transit using Transport Layer Security (TLS) and encrypt data at rest using AES-256. Access to production systems is role-based and requires multi-factor authentication.
Trivvy's security controls have been examined by an independent firm in a SOC 2 Type 2 report covering the Security Trust Services Criteria. The report is available by request to Customers and prospective Customers through our Trust Center. Our security program includes continuous automated vulnerability scanning, periodic penetration testing by independent third parties, intrusion detection and security monitoring, regular backups, and incident response, business continuity, and disaster recovery plans that are tested annually.
Text messages travel over mobile carrier networks, which do not encrypt message content between carriers. For this reason, we do not send highly sensitive information, such as government identifiers or login credentials, by text message. Messages you send are transmitted to our systems over encrypted connections and encrypted at rest.
If we become aware of a security incident affecting Customer Data, we will notify the affected Customer as provided in our agreement with that Customer and as required by applicable law.
Lastly, we depend on you for security and protection of your data, such as safeguarding your login credentials. If you become aware of any breach of security or privacy, or if you have any questions or concerns about OurOffice policies and processes, please contact us at security@ouroffice.io.
6. INTERNATIONAL TRANSFER OF PERSONAL INFORMATION
OurOffice is based in the United States, and the Services are currently hosted in the United States. Some of our service providers may process data in other locations, subject to the contractual protections described in this Policy. If you access the Services from outside the United States, your Personal Information is currently transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
Where applicable law requires safeguards for such transfers, including for Customers subject to the European Union General Data Protection Regulation or similar laws, OurOffice will enter into Standard Contractual Clauses or other appropriate safeguards with the Customer.
7. MARKETING
As part of the Services, you may choose to opt-in to receive occasional email and other communications from us, such as communications relating to promotions. You may opt-out of receiving such communications at any time by using the “Unsubscribe” link found in such emails, or by emailing us at trivvy@ouroffice.io. In the context of us providing you marketing information, we may analyze your preferences to make sure the information we provide you is relevant.
End Users who receive messages or surveys through the Services are not added to OurOffice marketing lists.
8. YOUR RIGHTS
In the event that you have provided Personal Information to us in your use of the Platforms, we will provide you with information about whether we hold any of your Personal Information. You may access, correct, or request deletion of your Personal Information by contacting us at privacy@ouroffice.io. We will respond to your request within 30 days.
When acting as a service provider to our Customers, OurOffice has no direct relationship with End Users. If you are an End User and want to access, correct, object to the processing of, or delete your Personal Information, please contact the Customer that sent you messages or surveys through the Services. If you contact us directly, we will forward your request to the Customer.
If located in the European Economic Area (“EEA”), you have the following rights regarding your Personal Information We control:
Right of Access. You can request details of your Personal Information we hold. We will confirm whether we are processing your Personal Information and we will disclose additional information including the types of Personal Information, the sources it originated from, the purpose and legal basis for the processing, the expected retention period and the safeguards regarding data transfers to non-EEA countries, subject to the limitations set out in applicable laws and regulations. We will provide you free of charge with a copy of your Personal Information, but We may charge you a fee to cover our administrative costs if you request further information or copies of the same information.
Right of correction. At your request, we will correct incomplete or inaccurate parts of your Personal Information, although We may need to verify the accuracy of the new information you provide to us.
Right to be forgotten. At your request, We will delete your Personal Information if:
- It is no longer necessary for us to retain your Personal Information;
- You withdraw the consent which formed the legal basis for the processing of your Personal Information;
- You object to the processing of your Personal Information (see below) and there are no overriding legitimate grounds for such processing;
- The Personal Information was processed illegally;
- The Personal Information must be deleted for us to comply with OurOffice legal obligations.
We will decline your request for deletion if processing of your Personal Information is necessary:
- For us to comply with Our legal obligations;
- For the establishment, exercise or defense of legal claims; or
- For the performance of a task in the public interest.
Right to restrict processing. At your request, We will restrict the processing of your Personal Information if:
- You dispute the accuracy of your Personal Information;
- Your Personal Information was processed illegally and you request a limitation on processing rather than the deletion of your Personal Information;
- We no longer need to process your Personal Information, but you need your Personal Information in connection with the establishment, exercise or defense of a legal claim; or
- You object to the processing of your Personal Information (see below) pending verification as to whether an overriding legitimate ground for such processing exists.
We may continue to store your Personal Information to the extent required to ensure that your request to restrict processing is respected in the future.
Right to data portability. At your request, We will provide you free of charge with the Personal Information you provided to us in a structured, commonly used and machine-readable format, where the processing is based on your consent or on a contract and is carried out by automated means.
Right to object. Where we rely on OurOffice legitimate interests (or that of a third party) to process your Personal Information, you have the right to object to this processing on grounds relating to your particular situation if you feel it impacts on your fundamental rights and freedoms. We will comply with your request unless we have compelling legitimate grounds for the processing which override your rights and freedoms, or where the processing is in connection with the establishment, exercise or defense of legal claims. We will always comply with your objection to processing your Personal Information for direct marketing purposes.
Right not to be subject to decisions based solely on automated processing. You will not be subject to decisions with a legal or similarly significant effect (including profiling) that are based solely on the automated processing of your Personal Information, unless you have given Us your explicit consent or where they are necessary for the performance of a contract with Us.
Right to withdraw consent. You have the right to withdraw any consent you may have previously given us at any time. In order to exercise your rights in this section we may ask you for certain identifying information to ensure the security of your Personal Information. To request to exercise any of the above rights, please contact us at privacy@ouroffice.io. We will respond to your request within 30 days or provide you with reasons for the delay.
Usually, We will not charge you any fees in connection with the exercise of your rights. If your request is manifestly unfounded or excessive, for example, because of its repetitive character, We may charge a reasonable fee, taking into account the administrative costs of dealing with your request. If we refuse your request we will notify you of the relevant reasons.
In so far as practicable, we will notify OurOffice Customers and third parties we have disclosed your Personal Information with any correction, deletion, and/or restriction to the processing of your Personal Information. Please note that we cannot guarantee our Customers or other third parties will comply with your requests and we encourage you to contact them directly.
Please note that if you decide to exercise some of your rights, we may be unable to perform the actions necessary to achieve the purposes set out above or you may not be able to use or take full advantage of the Platforms and Services.
Right to complain to a supervisory authority. If you are not satisfied with OurOffice response, you have the right to complain or seek advice from a supervisory authority and/or bring a claim against us in any court of competent jurisdiction.
9. CHANGES TO THIS POLICY
We may amend this Privacy Policy from time to time to reflect changes to OurOffice information practices. OurOffice use of Personal Information we collect is subject to the Privacy Policy in effect at the time such information is used. If we make material changes in the way we collect or use information, we will notify you by posting an announcement on OurOffice Platforms or sending you an email. We encourage you to periodically review this page for the latest information on our privacy practices.
10. CONTACTING US IF YOU HAVE QUESTIONS OR CONCERNS
If you have any questions or concerns regarding this Privacy Policy, please send us a detailed message to privacy@ouroffice.io. We will make every effort to resolve your concerns. You may also raise any concerns or complaints with your local Data Protection Authority.