Privacy Policy

Overview

This Privacy Policy explains how personal information may be collected, used, stored, protected, and shared when you access or use Offpista.

The service is used for internal business operations, including employee management, contractor administration, candidate tracking, contracts, device tracking, salary and hour reporting, training, communications, and compliance workflows.

Information We Collect

We may collect account details such as name, email address, role, permissions, login activity, and authentication status.

Depending on your role and the organization’s use of the service, records may include employee details, contact information, work history, compensation records, bank or payment details, documents, contracts, device assignments, hour reports, vacation requests, training progress, candidate information, communications, and uploaded files.

The service may also collect technical information such as device data, browser information, IP address, log events, timestamps, usage actions, and security-related activity.

How Information Is Used

Information is used to operate the workspace, verify identity, manage access permissions, process internal workflows, maintain records, communicate with users, enforce policies, protect security, investigate misuse, support compliance, and improve reliability.

Personal information must only be used for authorized business purposes and must not be accessed, copied, exported, or shared unless necessary and permitted by the organization.

Legal and Business Basis

Information may be processed because it is necessary for employment or contractor administration, business operations, compliance obligations, legitimate organizational interests, security protection, or because you provided information for a specific purpose.

Where local law requires consent for a specific processing activity, the organization is responsible for obtaining and managing that consent.

Sharing and Disclosure

Information may be visible to authorized administrators, managers, staff, service providers, auditors, legal advisors, or other parties where access is necessary for business, security, legal, payroll, operational, or compliance purposes.

Information may be disclosed if required by law, regulation, court order, governmental request, security investigation, dispute resolution, enforcement of agreements, or protection of rights and safety.

Data Security

Reasonable administrative, technical, and organizational measures are used to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

No system is completely secure. Users must protect their accounts, use only authorized devices and networks where appropriate, and report suspected security issues immediately.

Retention

Information may be retained for as long as needed for business operations, employment or contractor records, legal obligations, accounting, dispute resolution, audit requirements, security, and legitimate organizational purposes.

When information is no longer required, it may be deleted, archived, anonymized, or restricted according to applicable policy and law.

Your Responsibilities and Rights

You must provide accurate information and keep required records current. You must not submit information that is false, unlawful, unauthorized, or infringes another person’s rights.

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, or portability of certain personal information. Requests should be submitted to the organization’s authorized administrator or privacy contact.

International Processing

Information may be processed or stored in countries other than your location. Where required, appropriate safeguards should be used for cross-border transfers.

By using the service as an authorized user, you understand that business systems may involve service providers and infrastructure in multiple jurisdictions.

Policy Updates

This Privacy Policy may be updated from time to time to reflect operational, legal, or security changes.

Continued use of the service after an update means the revised policy applies to future use and processing.