Privacy Policy

1. Who we are

Protiv, Inc. is a Delaware corporation headquartered at 525 Washington Blvd, 3rd Floor, Jersey City, NJ 07310. We provide a performance-pay and production platform for trade businesses. Our platform is used by employers to track work performance, calculate bonus payouts, and share those payouts with their workers.

This policy applies to information collected through our websites (including protiv.com, platform.protiv.com, and related subdomains), our mobile apps for iOS and Android, and any related services or integrations.

2. Information we collect

2.1 Information you provide directly

• Account information: Name, work email, phone number, employer, role, and password when you or your employer create an account.
• Company information: If you are an employer (customer), we collect information about your business — legal name, business address, tax ID, billing details, industry, headcount, and branch structure.
• Payment information: Handled by our payment processor (Stripe). We do not store full credit card or bank account numbers on our servers.
• Content you submit: Support requests, feedback, survey responses, and any files or messages you upload to the platform.

2.2 Information collected automatically

• Usage data: Pages viewed, features used, actions taken, time spent, and referring URLs.
• Device data: IP address, browser type, operating system, device identifiers, and mobile app version.
• Location data: Approximate location based on IP address. Precise location is only collected via our mobile app if you explicitly grant permission (used for on-site time tracking and job geofencing).
• Cookies and similar technologies: See the cookies section.

2.3 Information from your employer

If you are a worker whose employer uses Protiv, your employer provides us with information about you — including your name, work email, employment status, wage rate, job assignments, hours worked, and performance metrics. Your employer is the "controller" of this data; we process it on their behalf.

2.4 Information from integrations

When you or your employer connects a third-party system (such as Aspire, Boss, Procore, QuickBooks Time, Jobber, Salesforce, or a payroll provider), we receive data from that system as authorized. This may include job records, time entries, budget data, cost codes, and payroll identifiers.

2.5 Information we do not collect

We do not knowingly collect Social Security numbers, national ID numbers, health information, biometric identifiers, or immigration status. If a customer needs to store this type of information, we require them to keep it in their own systems.

3. How we use information

We use the information we collect to:

• Operate, maintain, and improve the Services;
• Calculate performance targets, bonus eligibility, and payout amounts;
• Sync data between Protiv and your connected systems (production, time, payroll);
• Authenticate users, prevent fraud, and enforce our Terms of Service;
• Respond to support requests and communicate with you about the Services;
• Send transactional messages (e.g., bonus statements, verification emails);
• Send marketing messages (only to customers and prospects, and only with the ability to unsubscribe);
• Analyze usage patterns to improve product quality and reliability;
• Comply with legal obligations and enforce our rights.

4. How we share information

4.1 With your employer

If you are a worker on the platform, your employer has access to information about your job assignments, hours, performance, and bonus history. This is inherent to how the platform functions.

4.2 With service providers (subprocessors)

We use trusted third-party service providers to run our infrastructure. Each is contractually bound to protect your data and use it only to serve us. Our current subprocessors include:

An up-to-date list is available on request by emailing help@protiv.com.

4.3 With connected integrations

When your employer authorizes an integration (payroll provider, time tracking, project management), we share data with that system as needed to complete the integration's purpose.

4.4 Legal requirements

We may disclose information if required by law, subpoena, court order, or valid government request. We will notify you unless prohibited from doing so.

4.5 Business transfers

If Protiv is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. You will be notified of any change in ownership or a materially different privacy policy.

5. Third-party integrations

Protiv integrates with third-party services including Aspire, Boss, Procore, QuickBooks Time, Jobber, Salesforce, UKG, ADP, Gusto, and others. When your employer authorizes an integration, data flows in both directions as authorized. Each third-party service has its own privacy policy; we recommend reviewing it before authorizing the integration.

We are not responsible for the privacy practices of third-party services once data has been shared with them at the direction of the customer.

6. Data retention

We retain personal information for as long as needed to provide the Services and for a reasonable period afterward to meet legal, tax, and audit requirements. Specifically:

• Active customer data: Retained for the life of the customer account.
• Cancelled customer data: Retained for 90 days after cancellation, then deleted or anonymized (except records required by law).
• Worker data: If a worker is removed from the platform, we retain summary bonus history for record-keeping. Employers can request full deletion by contacting us.
• Support and marketing communications: Retained for up to 3 years after last contact.
• Billing records: Retained for 7 years for tax and audit purposes.

7. Your rights and choices

Depending on where you live, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct information that is inaccurate or incomplete.
• Deletion: Ask us to delete your personal information. If you're a worker whose employer uses Protiv, we'll route this request to your employer, who is the controller of your employment data.
• Portability: Request a machine-readable copy of your data.
• Opt-out of marketing: Unsubscribe from any marketing email. Transactional emails (bonus statements, verification) cannot be opted out of while you are on the platform.

To exercise these rights, email help@protiv.com or visit protiv.com/account-deletion. We'll respond within 30 days.

8. Security

We take reasonable and industry-standard steps to protect personal information from unauthorized access, disclosure, or destruction. These include:

• Encryption in transit (TLS 1.2+) and at rest (AES-256);
• Role-based access controls with least-privilege defaults;
• Multi-factor authentication for staff access to production systems;
• Regular security reviews, penetration testing, and vulnerability scans;
• Employee background checks and annual security training;
• Incident response procedures with customer notification obligations.

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you and applicable regulators as required by law.

9. International transfers

Protiv is based in the United States, and our infrastructure is hosted in the United States. If you access the Services from outside the U.S., your information will be transferred to, processed, and stored in the U.S. We rely on standard contractual clauses and other lawful transfer mechanisms where required.

10. Children's privacy

Our Services are not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and share;
• Right to delete personal information we hold about you;
• Right to correct inaccurate personal information;
• Right to opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under California law);
• Right to limit use of sensitive personal information;
• Right to non-discrimination for exercising any of these rights.

To exercise these rights, email help@protiv.com. We may need to verify your identity before responding.

12. European privacy rights (GDPR/UK GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the rights described above plus:

• Right to restrict processing of your data;
• Right to object to processing based on legitimate interests;
• Right to lodge a complaint with your local data protection authority.

Our legal bases for processing include: (i) performance of a contract (delivering the Services), (ii) legitimate interests (product improvement, fraud prevention), (iii) legal obligation (tax, audit), and (iv) consent (marketing communications and precise location tracking).

For GDPR-related inquiries, email help@protiv.com.

13. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the platform is used, and support marketing on our website. Categories include:

• Strictly necessary: Required for authentication and basic functionality. Cannot be disabled.
• Analytics: Help us understand aggregate usage patterns (e.g., Google Analytics, PostHog).
• Marketing: Used on protiv.com to measure ad performance (e.g., Google Ads, LinkedIn Insight Tag, Facebook Pixel).

You can control cookies in your browser settings. Blocking strictly-necessary cookies will prevent you from signing in.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through a notice on the Services at least 30 days before the change takes effect. The "Last updated" date at the top of this page reflects the current version.

15. Contact us

Questions, requests, or concerns about privacy: