This Privacy Policy explains what information Motivosity, Inc collects about you and why, what we do with that information, how we share it, and how we handle the content you place in our products and services.
This Privacy Policy explains what information Motivosity, Inc collects about you and why, what we do with that information, how we share it, and how we handle the content you place in our products and services.
This privacy policy applies to all users of the Motivosity platform, including employees of companies that use our service for social appreciation. As a data processor, Motivosity handles certain personal information in accordance with this policy, even though your employer may have its own privacy policy governing their data use.
While your employer controls specific aspects of your data, Motivosity is responsible for the security, processing, and protection of personal information collected during your use of the platform. For any requests regarding the correction, amendment, or deletion of inaccurate data, you may contact either your employer or Motivosity directly. Both parties will collaborate to address your data privacy concerns in accordance with applicable laws.
"Motivosity Service" includes our website and SaaS application, but does not include:
Motivosity products or services for which a separate privacy policy is provided.
Third party products. These are third party products or services that you may choose to integrate with Motivosity.
A "Device" is any computer used to access the Motivosity Service, including without limitation a desktop, laptop, mobile phone, tablet, or other consumer electronic device.
Motivosity: Motivosity’s website and SaaS Products
Content: any information or data that you upload, submit, post, create, transmit, store or display in Motivosity.
Information: all the different forms of data, content, and information collected by us as described in this Privacy Policy.
Personal Information: information that may be used to readily identify or contact you as an individual person, such as: name, address, email address, title, department, hire date, and birth date.
Aggregate Information: information that may be used to help Motivosity and its customers understand product usage. This information is not connected with a specific user.
SaaS Products: Motivosity’s online hosted solution as well as other Motivosity hosted solutions that display a link to this Privacy Policy. For the avoidance of doubt, if a Motivosity hosted solution displays a link to a different privacy policy, then that other privacy policy shall apply.
By registering for or using Motivosity you consent to the collection, transfer, processing, storage, disclosure, and other uses described in this Privacy Policy.
Account and Profile Information: We collect Personal Information about each person for whom a Motivosity account exists as requested by such person's employer. You may provide this information directly when you enter it in Motivosity, or in some cases another user (such as a system administrator) creating an account on your behalf may provide it (most commonly when your company requests that you use the service). If you are providing information (including Personal Information) about someone else, you confirm that you have the authority to act for them and to consent to the collection and use of their Personal Information as described in this Privacy Policy.
Content: We collect and store Content that you create, input, submit, post, upload, transmit, store or display in the process of using Motivosity. Such Content includes any Personal Information or other sensitive information that you choose to include (“passively-collected Personal Information”).
Personal Information can be updated when you modify your profile. Additional information will be collected about you as you interact with Motivosity.
Other submissions: We collect other data that you submit to our Website or as you participate in any interactive features of the Motivosity website or customer support experience.
We may change this Privacy Policy from time to time. If we make any changes, we will notify you by revising the "Last Updated" date at the top of this Privacy Policy and, in some cases, where appropriate we may provide you with additional notice (such as adding a statement to the login screen or sending you an email notification). We encourage you to review our Privacy Policy whenever you use Motivosity Service to stay informed about our information practices and the ways you can help protect your privacy.
If you disagree with any changes to this Privacy Policy, you will need to stop using Motivosity Service and deactivate your account(s).
Motivosity will not disclose Personal Information to any third party without express consent to do so. Personal Information exists in Motivosity at the request of the person's employer and is considered by Motivosity to belong to the employer who has contracted to use the Motivosity service. Motivosity takes all reasonable efforts to secure and maintain privacy for the Personal Information.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Motivosity may transfer Personal Information to countries other than the country in which the data was originally collected, including to the United States. Personal Information of customers based in the United States will not be transferred to other countries. While the United States may not have the same data protection laws as the country in which you initially provided the information, we ensure that adequate safeguards are in place to protect your information as described in this Privacy Policy. These safeguards may include standard contractual clauses approved by the European Commission or other appropriate legal mechanisms. By using Motivosity and consenting to this Privacy Policy, you acknowledge and agree to the transfer of your Personal Information to be processed within the United States as described herein, and if applicable, you agree to abide by standard contractual clauses or other legal mechanisms for the transfer of data to countries outside the European Economic Area.
Motivosity Inc. remains accountable for Personal Information that it receives and subsequently transfers to a third party. In particular, Motivosity remains responsible and liable if third-party agents that it engages to process the Personal Information on its behalf do so in a manner inconsistent with this policy, unless Motivosity proves that it is not responsible for the event giving rise to the damage. Motivosity commits to cooperate with the DPAs and comply with the advice given by such authorities with regard to Personal Information transferred from the EU in the context of the providing its Services. Motivosity’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Motivosity will not disclose Personal Information to any third party without express consent unless such request falls under the investigatory and enforcement powers of the US Federal Government.
All individuals with Personal Information in Motivosity have access to that information. That information can be accessed at https://app.motivosity.com with the right username & password.
Some Personal Information may be hidden on an individual basis as allowed in the 'my profile' section of the application. The person's birthday year is never displayed within Motivosity to other users. Except as enumerated in the 'Personal Information' definition, all user-related identifying information in the Motivosity user profile is managed by the person and is 100% voluntary. For more information, see https://help.motivosity.com/support/solutions/folders/9000196259
Personal Information exists in Motivosity at the request of the person's employer and is considered by Motivosity to belong to the employer who has contracted to use the Motivosity service. In cases where an employee wishes for Motivosity to not include the employee's Personal Information within the service, the employee must contact his or her employer to request removal from the system.
Our commitments are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. We may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Under such circumstances, we may be prohibited by law, court order or other legal process from providing notice of disclosure.
If you believe that we maintain copies of your Personal Information, you may direct any inquiries to privacy@motivosity.com or via mail to: Motivosity Trust and Compliance, 1633 W Innovation Way Suite 150, Lehi, UT 84043. We will respond to your inquiry within 45 days of receipt and verification of your identity. If we fail to respond during that time, or if we don’t address your concern, you may engage in binding arbitration.
Motivosity uses reasonable and appropriate measures to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account any inherent risks and the nature of the personal data involved.
Motivosity is a SaaS company that operates within segregated private datacenters as well as the public cloud. Data collected by Motivosity is co-located in secure locations operated by Amazon (AWS) in the United States.
Motivosity utilizes AWS data centers in the following locations: US East (Northern Virginia), US West (Northern California).
For more information regarding our privacy practices and FAQs, please see: https://www.motivosity.com/security/
Data collected by Motivosity is generally nonsensitive, publicly available personally identifiable information (“PII”) of our users. The following list details the PII that is collected and how it is used within Motivosity:
Name (Required: First and Last Name, Optional: Middle Name, Preferred Name)
Work Email (Purpose: Primary identifier of a user account, used for login)
Day and Month of Birthday (Optional) - NOT year (purpose: for elected birthday reminders)
Mailing address & Phone Number (Optional)
Purpose: ThanksMatters Card and, Award fulfillment
Data collected by Motivosity is generally nonsensitive, publicly available personally identifiable information (“PII”) of our users. The following list details the PII that is collected and how it is used within Motivosity:
Employee Hire Date (Optional)
Purpose: elected work anniversary reminders
Employee Title (Optional)
Purpose: Grouping and identifying employee titles for reporting
Employee Country Code (Optional)
Purpose: Identifying the location of an employee for availability of store items within Motivosity
Employee Payroll ID
Purpose: Secondary identifier of a user account. This doesn’t need to be a specific employee payroll id and can be any alphanumeric value that can uniquely identify the user in the platform.
Employee Department (Optional)
All information in Motivosity is encrypted in transit using TLS 1.2 and also encrypted at rest by default within AWS RDS using AES-256 encryption.
No application data is public. Information can only be accessed by authorized users. Each user belongs to a company. No information from one company can be accessed by a user from another company.
Motivosity does not store, transfer, or sell any data related to the following categories:
Sensitive PII (e.g. driver’s license, Social Security number, full legal name, bank account number(s), passport, birth certificate, etc.)
PCI (i.e. payment cards; all credit card payments paid to Motivosity go directly through Stripe, our payment processing partner. Details about their security posture and PCI compliance can be found at Stripe’s Security page.)
HIPAA (i.e. health and medical information)
FedRAMP (i.e. government data)
SOX (i.e. financial reporting & integrity)
Firewall: AWS Web Application Firewall (WAF) in front of Cloudfront distributions.
Load Balancer: AWS autoscaling and provisioning. Multi-region redundancy and recovery.
Application: Containerized application deployed using AWS Codepipeline for Continuous Delivery to AWS Elastic Beanstalk (EBS).
Database: AWS Relational Database Service (RDS). Encrypted at rest with redundancy and scaling built in.
Motivosity conducts a load test simulating a load of five times the current max traffic load of the system. This simulation is based on the typical user interaction with the platform, the typical company size, and typical session duration.
Motivosity makes a daily backup of the data. These backup snapshots are stored for three days.
The data recovery process happens in an automated way every day as the staging environment self-rebuilds from the previous day’s backup snapshot. Actual production recovery would follow a similar process and data loss would be limited to a maximum of 24 hours.
AWS Infrastructure and admin console access is restricted by role and group based credentials based on least privileged and MFA authentication protections.
Encrypted data is backed up daily and is stored for up to two months. These are tested yearly and can be restored at an exact point in time - when needed.
Motivosity runs an AWS-managed infrastructure and all data is stored within the United States. All data is owned by the company itself and can be accessed, edited, or deleted by the company. If any individual wishes to do any of the actions previously mentioned, they can and should do so through their company.
Personal Information: We use the information we collect about you for a variety of purposes, including to:
Provide, operate, support, maintain, and improve Motivosity Service;
Enable you to access and use Motivosity Service;
Communicate with you regarding the Motivosity Service, including messages related to employee recognition and appreciation events related to your organization;
Individual product support activities.
Aggregate Information: Motivosity may compile aggregated usage profiles to help its subscribers better understand best practices concerning particular activities and their impact on company culture and employee satisfaction. This aggregated information is based on general trends across an entire population of companies and is in no way tied to a specific individual or organization. This compiled aggregate information may appear in the Motivosity application to provide guidance to Service Subscribers. It may also appear in sales and promotional materials detailing the impact the Motivosity Service can have on companies.
Motivosity agrees to cooperate with EU data protection authorities (DPAs) and comply with the advice given by such authorities with regard to human resources data transferred from the EU in the context of the employment relationship. Motivosity also commits to cooperate with the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from Switzerland in the context of the employment relationship.
Account and Profile Information: We collect Personal Information about each person for whom a Motivosity account exists as requested by such person's employer. You may provide this information directly when you enter it in Motivosity, or in some cases another user (such as a system administrator) creating an account on your behalf may provide it (most commonly when your company requests that you use the service). If you are providing information (including Personal Information) about someone else, you confirm that you have the authority to act for them and to consent to the collection and use of their Personal Information as described in this Privacy Policy.
Content: We collect and store Content that you create, input, submit, post, upload, transmit, store or display in the process of using Motivosity. Such Content includes any Personal Information or other sensitive information that you choose to include (“passively-collected Personal Information”).
Personal Information can be updated when you modify your profile. Additional information will be collected about you as you interact with Motivosity.
Other submissions: We collect other data that you submit to our Website or as you participate in any interactive features of the Motivosity website or customer support experience.
We may change this Privacy Policy from time to time. If we make any changes, we will notify you by revising the "Last Updated" date at the top of this Privacy Policy and, in some cases, where appropriate we may provide you with additional notice (such as adding a statement to the login screen or sending you an email notification). We encourage you to review our Privacy Policy whenever you use Motivosity Service to stay informed about our information practices and the ways you can help protect your privacy.
If you disagree with any changes to this Privacy Policy, you will need to stop using Motivosity Service and deactivate your account(s).
Motivosity will not disclose Personal Information to any third party without express consent to do so. Personal Information exists in Motivosity at the request of the person's employer and is considered by Motivosity to belong to the employer who has contracted to use the Motivosity service. Motivosity takes all reasonable efforts to secure and maintain privacy for the Personal Information.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Motivosity may transfer Personal Information to countries other than the country in which the data was originally collected, including to the United States. Personal Information of customers based in the United States will not be transferred to other countries. While the United States may not have the same data protection laws as the country in which you initially provided the information, we ensure that adequate safeguards are in place to protect your information as described in this Privacy Policy. These safeguards may include standard contractual clauses approved by the European Commission or other appropriate legal mechanisms. By using Motivosity and consenting to this Privacy Policy, you acknowledge and agree to the transfer of your Personal Information to be processed within the United States as described herein, and if applicable, you agree to abide by standard contractual clauses or other legal mechanisms for the transfer of data to countries outside the European Economic Area.
Motivosity Inc. remains accountable for Personal Information that it receives and subsequently transfers to a third party. In particular, Motivosity remains responsible and liable if third-party agents that it engages to process the Personal Information on its behalf do so in a manner inconsistent with this policy, unless Motivosity proves that it is not responsible for the event giving rise to the damage. Motivosity commits to cooperate with the DPAs and comply with the advice given by such authorities with regard to Personal Information transferred from the EU in the context of the providing its Services.
Motivosity will not disclose Personal Information to any third party without express consent unless such request falls under the investigatory and enforcement powers of the US Federal Government.
All individuals with Personal Information in Motivosity have access to that information. That information can be accessed at https://app.motivosity.com with the right username & password.
Some Personal Information may be hidden on an individual basis as allowed in the 'my profile' section of the application. The person's birthday year is never displayed within Motivosity to other users. Except as enumerated in the 'Personal Information' definition, all user-related identifying information in the Motivosity user profile is managed by the person and is 100% voluntary. For more information, see https://help.motivosity.com/support/solutions/folders/9000188780
Personal Information exists in Motivosity at the request of the person's employer and is considered by Motivosity to belong to the employer who has contracted to use the Motivosity service. In cases where an employee wishes for Motivosity to not include the employee's Personal Information within the service, the employee must contact his or her employer to request removal from the system.
Our commitments are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. We may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Under such circumstances, we may be prohibited by law, court order or other legal process from providing notice of disclosure.
If you believe that we maintain copies of your Personal Information, you may direct any inquiries to privacy@motivosity.com or via mail to: Motivosity Trust and Compliance, 1633 W Innovation Way Suite 150, Lehi, UT 84043. We will respond to your inquiry within 45 days of receipt and verification of your identity. If we fail to respond during that time, or if we don’t address your concern, you may engage in binding arbitration.
Motivosity uses reasonable and appropriate measures to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account any inherent risks and the nature of the personal data involved.
Motivosity is a SaaS company that operates within segregated private datacenters as well as the public cloud. Data collected by Motivosity is co-located in secure locations operated by Amazon (AWS) in the United States.
Motivosity utilizes AWS data centers in the following locations: US East (Northern Virginia), US West (Northern California).
Personal Information: We use the information we collect about you for a variety of purposes, including to:
Provide, operate, support, maintain, and improve Motivosity Service;
Enable you to access and use Motivosity Service;
Communicate with you regarding the Motivosity Service, including messages related to employee recognition and appreciation events related to your organization;
Individual product support activities.
Aggregate Information: Motivosity may compile aggregated usage profiles to help its subscribers better understand best practices concerning particular activities and their impact on company culture and employee satisfaction. This aggregated information is based on general trends across an entire population of companies and is in no way tied to a specific individual or organization. This compiled aggregate information may appear in the Motivosity application to provide guidance to Service Subscribers. It may also appear in sales and promotional materials detailing the impact the Motivosity Service can have on companies.