We process personal data based on:

• Contract: To provide the Service (e.g., early access notifications, account management).
• Consent: For email communications and early access sign-ups.
• Legitimate Interests: For analytics to improve the Service, balanced against your rights.
• Legal Obligation: To comply with applicable laws.

We inform you of data collection via this Privacy Policy, accessible on offimo.com and in-app. Processing is fair, not detrimental, unexpected, or misleading.

We minimize data collection for specific purposes. We collect the following information to provide and improve the Service:

We collect only data necessary for declared purposes. Email addresses are collected solely for early access notifications and Service updates. We do not process data beyond stated purposes (e.g., no advertising use, no sale of personal information).

Accuracy: We ensure data (e.g., email) is accurate via user controls. Contact privacy@offimo.com to correct inaccuracies.

Security: We implement industry-standard technical measures (e.g., encryption, access controls) and organizational measures to protect data. Email data is stored securely via HubSpot CRM. No system is fully secure; you use the Service at your own risk.

We retain personal information (e.g., email addresses) until you request deletion or unsubscribe from early access notifications, unless longer retention is needed for legal compliance, dispute resolution, or Service delivery. Anonymized analytics data may be retained indefinitely.

We embed privacy by design via:

• Minimal data collection (email only for early access).
• User-controlled email preferences and unsubscribe options.
• Consent for non-essential cookies and analytics.
• Anonymized analytics data.

We maintain contracts with processors:

• HubSpot: Processes and stores email addresses for early access management (see HubSpot's privacy policy at legal.hubspot.com/privacy-policy).
• Google: Processes anonymized analytics data via Google Analytics 4 (see Google's privacy policy at policies.google.com/privacy).

Contracts stipulate processor responsibilities, security measures, and data return/deletion upon contract end.

You have the following rights:

• Informed: This Policy details data practices.
• Access: Request a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure: Delete your data (unsubscribe or request deletion).
• Restriction: Limit processing.
• Portability: Export data in a machine-readable format.
• Object: Oppose processing (e.g., analytics).
• Withdraw Consent: Withdraw consent at any time, where applicable.

For California residents (CCPA):

• Right to Know: You can request details about the personal information we collect, use, or disclose.
• Right to Delete: You can request deletion of your personal information, subject to exceptions.
• Right to Opt-Out: Offimo does not sell personal information, so no opt-out is needed.

Exercise rights via email at privacy@offimo.com. We respond within one month, extending if complex. Requests may be denied if legally permitted (e.g., unverifiable identity).

Contact our DPO at privacy@offimo.com for GDPR inquiries or supervisory authority interactions.

When we use third-party services, data may be transferred to countries like the US (e.g., HubSpot, Google Analytics). We ensure such transfers comply with GDPR/UK GDPR (e.g., via Standard Contractual Clauses) and CCPA where applicable.

If a breach risks your rights and freedoms, we notify the relevant supervisory authority within 72 hours and affected users without undue delay. Processors (e.g., HubSpot, Google) must notify us immediately.

We process your information based on the following legal bases: to provide the Service (contract), pursue legitimate interests (e.g., analytics), comply with legal obligations, or with your consent (e.g., email communications). Uses include:

• Service Delivery: Send early access notifications and Service updates.
• Improvement: Analyze usage via Google Analytics to enhance features.
• Communication: Send essential notifications (e.g., Service availability) or optional updates (opt-out available).
• Compliance: Meet legal requirements (e.g., GDPR, CCPA) or prevent harm.

We share information as follows:

The Service is not intended for users under 13. Users aged 13-15 require verifiable parental consent (privacy@offimo.com). Data from children under 13 is deleted immediately if discovered.

We may update this Policy to reflect Service changes or legal requirements. Updates will be posted on offimo.com at least 7 days before taking effect, with email notices for material changes where required. Continued use after updates constitutes consent.

For privacy inquiries, email privacy@offimo.com.

For EU users, you can lodge a complaint with a supervisory authority. For UK users, you can contact the Information Commissioner's Office at www.ico.org.uk. For California residents, you can contact the California Attorney General.

Under the CCPA, California residents have specific rights:

• We collect personal information (e.g., email address, device identifiers, usage data) for the purposes outlined above.
• We do not sell your personal information.
• In the past 12 months, we have disclosed anonymized analytics data to Google Analytics for analytics purposes.
• To exercise your CCPA rights, contact us at privacy@offimo.com.