Privacy Policy

Effective October 24, 2026 · Version 1.0

This policy explains how Janitrak, operated by 1001376582 Ontario Inc. ("Janitrak", "we"), handles personal information. It follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles.

1. Accountability

Our Privacy Officer is responsible for compliance with this policy: Pratik, Privacy Officer, [email protected], Brampton, Ontario.

2. Two roles

Information about our subscribers (business contact names, emails, phone numbers, billing details): we are responsible for it.

Information our subscribers enter about their employees, customers and suppliers (for example names, contact details, hours, location at punch in and out, and, if they use HR, SIN, date of birth and work authorization): the subscriber controls it and decides why it is collected. We process it on their behalf, only to provide the service.

3. What we collect and why

• Account and contact details: to create and secure accounts and to communicate about the service.
• Billing details: to charge subscription fees and meet tax record-keeping rules. Card and bank numbers are held by our payment processor, Stripe, not by us.
• Usage and security logs: sign-ins, audit logs and error logs, to keep accounts secure and fix problems.
• Location from the janitor web app: only at punch in, punch out and periodically while an employee is punched in, to confirm attendance at the work site. We do not collect location when an employee is off shift.

4. Consent

We collect, use and disclose personal information with consent, except where the law allows otherwise. Subscribers are responsible for obtaining any consent and giving any notice required for information about their employees, customers and suppliers, including Ontario's written electronic monitoring policy rules where they apply.

5. Limiting collection, use, disclosure and retention

We collect only what the service needs. We do not sell personal information and do not use it for advertising. We keep subscriber data while the subscription is active and for 90 days after it ends so it can be exported, then delete it. We keep our own billing and tax records for the periods the law requires, generally six years.

6. Service providers

We use these providers to run Janitrak, under contracts that require them to protect the information:

• Supabase: database and file storage, hosted in Canada.
• Cloudflare: website hosting and network security.
• Stripe: card and pre-authorized debit payments.
• Google (Google Workspace) and Resend: sending the emails the service generates.

Some providers may process limited information outside Canada, where it may be subject to the laws of that country.

7. Accuracy

Account owners can correct their information in the workspace. Employees, customers and suppliers can update their own contact details in their portal or ask the business that invited them.

8. Safeguards

• Encryption in transit.
• SINs, bank account numbers and alarm codes stored encrypted in a separate vault, with every view logged.
• Access controlled by role, with each company's data kept separate.
• Two-step sign-in available.
• Janitrak staff access a subscriber's workspace only when the subscriber grants time-limited support access.

If a breach of security safeguards creates a real risk of significant harm, we will notify affected subscribers and individuals and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

9. Cookies and browser storage

Janitrak uses browser storage only to keep you signed in and remember settings such as your dashboard layout. We do not use advertising or tracking cookies.

10. Your access to your information

You can ask for access to, or correction of, personal information we hold about you by emailing [email protected]. We will respond within 30 days, as PIPEDA requires. If your information was entered by a business that uses Janitrak, we will refer your request to that business and help it respond.

11. Questions and complaints

Contact our Privacy Officer at [email protected]. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.