Privacy Policy
Last updated September 2026. What each feature stores, who receives it, and for how long.
Reading
You do not need an account to read anything on OfficeBooks, and reading creates no account or profile of you with us.
Signing in
Decision rooms need you to sign in with a link we email you. We store your email address. Each link works once, for 15 minutes, and is deleted an hour after it was sent; a cookie named ob_session then keeps you signed in for up to 30 days. We store only a one-way hash of each link and each session, never the link or session itself.
Decision rooms
A room holds its name, the tools in it, the seats and budget you set, and its members' notes and votes. Notes, votes, the room name and who is in the room are shown only to its members, and your email address is shown to the members of rooms you join. An invitation stores the invited address and sends it the inviter's address and the room name.
New rooms start public. A public room's page shows the tools, their facts, the seats and budget, and how far the team has got (shortlist, demos selected, decision) — nothing else. A public room with two or more tools is listed for search engines. Members can make a room private at any time, which takes its page down.
Price alerts
If you ask to watch a tool's price, we store your email address and the tool, and send one confirmation email. Nothing more is sent until you confirm. After that we email you when we record a change to that tool's listed price. Every email has a link to stop. When you stop, you get no more alerts; if someone later asks for alerts for that address again, it receives one confirmation email and nothing more unless it is confirmed.
Reports of a wrong number
A report stores the tool, what looked wrong and your note. Your email address is optional and kept only so an editor can ask a follow-up question.
Demo requests
A demo request sends exactly three things to the vendors named on the form: your work email, your team size, and the tools on your shortlist. Never room notes, votes or who else is in a room. We send it only after you confirm from your inbox, or when you are signed in with that same address. Each vendor receives it by email and, if the vendor has set one up, by a signed message to its own system (a webhook), with the same three details; a vendor's account on OfficeBooks also lists the requests sent to it and can export them. Unconfirmed requests are deleted after 24 hours; sent requests, with the record of how each vendor received them, are kept for 12 months so vendors' bookings can be reconciled, then deleted. Once a vendor has your request, their own privacy policy applies to it.
Creator stacks and referrals
A creator profile stores your handle, the name you show and, if you give it, a link to your channel; all three are public on your stacks, with the stacks themselves. When a reader arrives from a creator's stack or embed and then leaves for a vendor or books a demo, we record the tool, where the reader started and when, and credit it to the creator's referral id — nothing about the reader. A demo request that arrives this way keeps that id so the booking can be credited.
Vendor accounts
A vendor account is a signed-in account an editor has linked to the tools it may act for. We store which tools, the corrections it proposes (with the evidence link and any note), where its demo requests go, and the sponsored slots it books. Editors see the account's email address beside each of these. If the account is deleted, its corrections and bookings are kept without it, as part of our editorial and billing record.
Limits on misuse
To stop the forms being used to flood someone's inbox, each form submission stores a keyed hash of your network address — not the address — for up to a day.
Who processes data for us
Email is delivered by our email provider, Resend. The data above is stored in our database. Pages may load logos and screenshots from third-party services to illustrate tools; those providers see standard request data, such as your IP address, when serving the images.
Cookies & analytics
We use Google Analytics 4 to count which pages are read. It sets its own cookies. It is not loaded on pages whose web address carries a one-time link (signing in, confirming an alert, confirming a demo request), on a room's team view, inside embedded cards, or on the creator, vendor and editor dashboards. The ob_session cookie above is set only when you sign in. We do not sell personal data.
Affiliate links
Some outbound links are affiliate links; the page says so next to each one. If you buy through them, we may earn a commission at no extra cost to you. This never affects our editorial ratings or rankings — see our affiliate disclosure.
Your rights
Stop price alerts with the link in any alert email. Delete your account, with your notes, votes, room memberships, creator profile and stacks, from your account page.