Security

For IT and facilities teams · Updated October 9, 2026

OfficeSwap is built to know as little as possible. It holds your office schedule and nothing else, and only people in your organization can see it. Here's how it works, for anyone reviewing it. Our Privacy Policy has the full details.

1. What we store

Only what your team enters: people's names, office names, locations and addresses, the days people request or offer an office, optional notes, and any office or people photos someone adds. There are no user accounts, so we never hold email addresses or passwords for your team. The person who sets up a paid organization gives a billing email, which Stripe keeps with the subscription.

2. Where it's stored

Schedules are stored in Google Cloud Firestore, part of Google's Firebase platform. Data is encrypted in transit (HTTPS) between every phone or browser and Google, and encrypted at rest by Google. Our website is served by Cloudflare over HTTPS.

3. Who can see it

• One organization, one schedule. Each organization has its own access code and its own schedule. Offices are only ever shared among people in that organization.
• Access codes. Anyone with your organization's access code can see and change its schedule, so share it only with your colleagues, as you would a door code.
• Master code. An administrator can set a master code. Once set, it's needed to remove offices or people, reset the schedule, or delete the organization. We only store a salted hash of it (PBKDF2 with SHA-256), never the code itself.

4. Payments

Subscriptions are handled by Stripe. Card details go straight from the sign-up page to Stripe and never touch our servers.

5. What the app doesn't do

• No ads, and nothing is ever sold.
• No analytics or tracking inside the app.
• No access to your contacts, location or calendar. The camera and photo library are used only when someone chooses to scan a staff list or add a photo.

6. Getting your data out, or deleting it

Anyone can export the schedule as a CSV spreadsheet from the Plans tab. People can cancel their own requests and offers anytime. An administrator can delete the whole organization in Settings, which removes its offices, schedule, waitlist and photos for everyone. You can also email us to have it deleted.

7. Reporting a problem

If you think you've found a security issue, email [email protected]. We'll look into it right away.