Privacy Policy

At 5PM ("we", "us", or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workplace management platform and services (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

We collect several types of information for various purposes to provide and improve our Service:

2.1 Information You Provide

• Account information: name, email address, password, profile photo
• Organization details: company name, team structures, member roles
• Payment information: billing address, payment method details (processed by secure third-party providers)
• Communications: messages, feedback, and support requests you send us

2.2 Information Collected Automatically

• Usage data: features accessed, actions taken, time spent on the Service
• Device information: IP address, browser type, operating system, device identifiers
• Cookies and tracking technologies: session data, preferences, analytics
• Log data: server logs, error reports, access times

2.3 Information from Third Parties

• Single Sign-On providers: Google, Microsoft (name, email, profile picture)
• Integration partners: data from connected workplace tools you authorize

We use the collected information for the following purposes:

• To provide, maintain, and improve our Service
• To process transactions and manage your subscription
• To send administrative notifications, updates, and security alerts
• To respond to your comments, questions, and support requests
• To analyze usage patterns and optimize user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms
• To send marketing communications (with your consent)

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Within Your Organization

Information you provide may be visible to other members of your organization based on your role and permissions, as configured by your organization's administrator.

4.2 Service Providers

We engage trusted third-party companies to perform services on our behalf, such as hosting, analytics, payment processing, and customer support. These providers have access to your information only to perform these tasks and are obligated to protect it.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures for potential breaches

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to:

• Provide you with the Service and fulfill the purposes described in this policy
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, unless retention is required by law.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to collect and store information. You can control cookies through your browser settings:

• Essential cookies: Required for the Service to function properly
• Analytics cookies: Help us understand how visitors use our Service
• Preference cookies: Remember your settings and preferences

You may disable cookies in your browser, but this may affect the functionality of the Service.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

For EU residents, you also have the right to lodge a complaint with your local data protection authority.