Privacy Policy

E3.INFO ("we," "our," or "us") operates a multi-organization employee workplace platform available on the web and as a mobile app (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the App.

E3.INFO serves multiple organizations. Each organization (a "Customer") has an isolated workspace. You access the App with credentials issued by your employer or another authorized Customer. We do not offer public self-registration.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

2.1 Personal information

We may collect the following types of personal information:

• Employee identification (name, employee ID, work email)
• Contact information (phone number, address) when provided by your organization
• Employment details (position, department, start date)
• Professional information (skills, certifications, performance data)
• Authentication credentials (email, encrypted passwords, one-time codes)
• Profile photos and digital signatures

2.2 Usage information

We automatically collect certain information when you use the App:

• Device information (device type, operating system, app version)
• App usage data (features accessed, interactions)
• Log information (IP address, access times, error logs)
• Push notification tokens for message and alert delivery

2.3 Workplace content

As a workplace application used by your organization, the App may store content you create or that is assigned to you, including:

• Internal messages, files, and voice notes
• Peer recognition, loyalty points, and reward activity
• Company news acknowledgements and policy reads
• Inspection reports, photos, and related field data (when enabled)
• CRM or sales activity (when enabled for your role)
• Performance metrics such as KPI, objectives, and SLA items

2.4 Business bank and payment information

When your organization enables Accounting bank feeds, authorized employees may connect business bank accounts through Plaid. In that case we may receive and store:

• Bank account identifiers needed for reconciliation (for example account name, mask, type, and currency)
• Transaction details returned by Plaid (dates, amounts, descriptions, and related metadata)
• Connection tokens required to refresh the feed until your organization disconnects the account

Plaid Link is shown only after workplace authentication and only to users with Accounting permission for the relevant company entity. Connection consent is completed inside Plaid Link (including the financial institution's login or OAuth flow). We use this data to reconcile payments and support your organization's accounting records—not for consumer lending or personal finance products.

We use collected information to:

• Provide and maintain App functionality for your organization
• Authenticate users and enforce role-based access
• Process employee workflows and workplace communications
• Deliver notifications related to messages, recognition, news, and tasks
• Generate operational reports for authorized Customer administrators
• Reconcile business bank transactions and payment records when bank feeds are enabled
• Secure the App and prevent unauthorized access
• Comply with legal and regulatory requirements
• Improve reliability and user experience

4.1 Within your organization

Information in your Customer workspace may be visible to other authorized users in that same organization on a need-to-know basis, for example:

• Supervisors and managers for performance and team coordination
• HR administrators for employee administration
• IT or security roles for support and access control
• Colleagues who receive messages, recognition, or shared documents from you

Data belonging to one Customer organization is not shared with other Customer organizations.

4.2 External disclosure

We do not sell personal information. We may disclose information only when:

• You give explicit consent
• Required to comply with law, regulation, or legal process
• Needed to protect rights, property, or safety
• Provided to service providers under confidentiality obligations (for example hosting, messaging, or email delivery)
• Related to a business transfer, with appropriate notice where required

We implement technical and organizational measures appropriate to the nature of workplace data, including:

• Encryption of data in transit (HTTPS/TLS)
• Per-organization tenant isolation
• Role-based access controls
• Secure cloud infrastructure and access logging
• Incident response procedures

We retain information as needed to provide the App to your organization and to meet legal obligations. Retention is primarily controlled by your employer's policies and configuration. Typical categories include:

• Active employee records: while employment (or authorized access) continues
• Former employee records: according to Customer policy and applicable law
• Operational logs: retained for security and audit purposes for a limited period
• Bank-feed / Plaid data: while the connection is active and as needed for accounting, tax, audit, or legal holds; access tokens are revoked on disconnect

Depending on your location and applicable law, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information.

Because E3.INFO processes workplace data on behalf of your organization, many requests should be directed first to your employer's HR or IT team. You may also contact us using the details below; we may need to coordinate with your organization to fulfill the request.

Information may be processed in countries where we or our service providers operate, including Canada and other jurisdictions where Customer infrastructure is hosted. We use appropriate safeguards consistent with applicable data protection laws.

The App is intended for workplace use by adults. It is not directed to individuals under 18. We do not knowingly collect personal information from children under 18.

The App may rely on third-party infrastructure for hosting, authentication, messaging, notifications, analytics, and financial data connectivity. Those providers process data under contracts that limit use to providing their services. When bank feeds are enabled, Plaid Inc. processes connection and account data according to Plaid's terms and privacy notices presented in Link.

We may update this Privacy Policy to reflect product, legal, or operational changes. Material updates will be reflected by revising the "Last updated" date on this page. Continued use of the App after an update constitutes acceptance of the revised policy where permitted by law.

For privacy questions or requests, contact:

We aim to respond within 30 days of receipt.

This Privacy Policy is intended to align with applicable privacy frameworks, including principles reflected in GDPR, CCPA/CPRA, and Canadian privacy law, as relevant to Customer use of the platform.