Timesheets+ Join the waitlist

Privacy Policy

Last updated: October 13, 2026

1. Introduction

Igloosoft Technology Solutions ("Igloosoft," "we," "us," or "our") is building Timesheets Plus, a cloud-based time tracking, job costing, and Canadian payroll platform (the "Service"). The Service has not launched yet. This Privacy Policy describes how we collect, use, disclose, and protect personal information on this website today, including when you join the waitlist, and how the Service will handle personal information once it launches. We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

2. Information We Collect

Waitlist Email Address

This website collects personal information only when you join the waitlist, or if you accept analytics (see below). On the waitlist form we ask for your email address and nothing else. We also record the language of the page you signed up from, so the launch announcement reaches you in that language, and the date and time you signed up.

Protecting the Waitlist from Abuse

When you submit the waitlist form, two safeguards keep automated sign-ups out:

  • Cloudflare Turnstile checks that the form is being used by a person. It loads only when you submit the form, runs in your browser, and sends Cloudflare technical signals, such as your IP address and browser characteristics, which Cloudflare uses for this check. Our server then passes your IP address to Cloudflare to confirm the result.
  • A limit on sign-up attempts per network per hour. Attempts are counted against a salted hash of your IP address — never the address itself. The count expires after about two hours and is then deleted automatically, typically within a few days.

Analytics, Only If You Accept

When you first visit, we ask whether we can use Google Analytics. Until you accept, Google Analytics is not loaded and no analytics cookies are set.

If you accept, Google Analytics records how this website is used, such as:

  • the pages you view and how far you scroll;
  • links you click, including email links and links to other websites, and whether you joined the waitlist (never your email address);
  • the website that referred you, and your approximate location (city or region);
  • your device type, browser and screen size.

It does this with two cookies whose names begin with _ga, which last up to two years. Google receives your IP address to estimate your approximate location, but Google Analytics 4 does not log or store it. Google keeps the detailed, event-level data for 14 months; after that, only aggregated reports remain. We use it only to understand and improve this website; its advertising features and Google signals are turned off.

Your choice is saved in your browser so we don't ask on every visit. We ask again after a year, and until you answer, analytics stays off and any earlier analytics cookies are removed. You can change your choice at any time with Cookie settings at the bottom of every page; if you withdraw consent, analytics stops right away and its cookies are removed.

The rest of this section describes the information the Service will collect once it launches.

Account Information

When you register for Timesheets Plus, we collect your name, email address, and company name.

Employee Information

Employers enter employee data into the Service, which may include names, Social Insurance Numbers (SINs), mailing addresses, banking details for direct deposit, and pay rates. The employer acts as the data controller for this information; Igloosoft processes it on the employer's behalf.

Time and Location Data

The Service may collect clock-in and clock-out timestamps. If the employer enables optional features, the Service may also collect GPS coordinates at the time of clock-in and clock-out, IP addresses, and device identifiers. See Section 4 for details.

Payroll Data

The Service generates and stores payroll data including earnings, deductions, tax calculations, and statutory filing data such as T4 and RL-1 records.

Usage Data

We collect information about how you interact with the Service, such as login times and feature usage. We do not collect or analyse the content of your personal data for this purpose.

3. How We Use Your Information

We use your waitlist email address for one purpose: to tell you when Timesheets Plus launches. We don't add it to any other mailing list.

Once the Service launches, we will use personal information solely to provide and operate it, including:

  • Time tracking and attendance management;
  • Job costing and project tracking;
  • Payroll processing and tax calculations;
  • Generating compliance reports and statutory filings (T4s, RL-1s, ROEs);
  • Providing customer support.

We never sell your data. We do not use your data for advertising or marketing to third parties.

4. GPS and Location Data

GPS tracking is disabled by default. An employer administrator must explicitly enable it for their organisation. When enabled:

  • Location is captured only at the moment of clock-in and clock-out — not continuously.
  • IP address tracking and device identifier tracking are separate opt-in toggles, each disabled by default.
  • Geofencing functionality is informational only and does not prevent employees from clocking in or out.

Employees are notified when location-based features are active on their account.

5. Data Storage and Security

All the data we store is stored exclusively in Canada (for information handled by third parties outside Canada, such as website analytics, see Section 12). We employ multiple layers of security to protect your information:

  • AES-256 field-level encryption for sensitive fields — SINs, banking details, pay rates, and other sensitive values are individually encrypted at rest;
  • Automatic API masking to prevent accidental exposure of sensitive values in API responses;
  • Multi-tenant isolation ensuring that each organisation's data is logically separated and inaccessible to other tenants;
  • HTTPS enforced for all connections to the Service.

6. Data Retention

We keep your waitlist email address until we have sent the launch announcement, or until you ask us to remove it, whichever comes first. You can ask us to remove it at any time by contacting us at our email address.

Once the Service launches, we will retain your data for the duration of your active subscription. Upon cancellation, your data is retained for 30 days to allow for export, after which it is permanently deleted. Payroll records may be retained for longer periods as required by law — at least six (6) years for Canada Revenue Agency (CRA) requirements, or longer where Revenu Québec requires it.

7. Third-Party Services

We use a limited number of third-party services to operate Timesheets Plus:

  • Amazon Web Services hosts this website and stores waitlist sign-ups in its Canada (Central) region;
  • Cloudflare Turnstile protects the waitlist form from automated sign-ups (see Section 2);
  • Google Analytics measures how this website is used, only if you accept analytics (see Section 2);
  • Google Fonts supplies the typefaces this website uses. Your browser fetches them from Google's servers, which receive your IP address and browser information; Google Fonts does not set cookies;
  • Enterprise identity provider for user authentication — we never store passwords directly;
  • Email delivery service for transactional notifications (e.g., pay stub delivery);
  • Payment processor for subscription billing.

We do not share personal information with third parties for their own marketing or commercial purposes. All third-party processors are contractually bound to handle data in accordance with PIPEDA.

8. Cookies

This website uses Google Analytics cookies only if you accept them (see Section 2), and you can change your choice at any time with Cookie settings. Apart from that and the Cloudflare Turnstile check on the waitlist form, it uses no cookies, analytics or other tracking technology. Once the Service launches, the Timesheets Plus application will use session cookies for authentication. No third-party advertising cookies are used. See our Cookie Policy for full details.

9. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

  • Access your personal information held by Igloosoft;
  • Request correction of inaccurate or incomplete personal information;
  • Withdraw consent for the collection, use, or disclosure of your personal information, subject to legal or contractual obligations;
  • Change your analytics choice at any time with Cookie settings, also linked at the bottom of every page;
  • File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, contact us at our email address.

10. Québec Residents (Law 25)

If you reside in Québec, you benefit from additional protections under Québec's privacy legislation, including:

  • The right to data portability in a commonly used technological format;
  • The right to be informed of automated decision-making and to request human review;
  • Privacy impact assessments conducted for any project involving the collection, use, or disclosure of personal information;
  • Privacy by default — only the minimum amount of personal information is collected;
  • Québec data residency is available upon request for organisations requiring data to remain within the province;
  • The right to file a complaint with the Commission d'accès à l'information du Québec.

11. Children's Privacy

Timesheets Plus is a business application not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take steps to delete it promptly.

12. International Transfers

Personal information we store, including waitlist sign-ups, stays in Canada. All data storage and backup infrastructure is located within Canadian borders.

Three services process information outside Canada when you visit this website: Cloudflare handles the signals sent by the Turnstile check (Section 2); Google serves the website's fonts (Section 7), receiving your IP address and browser information, and, if you accept analytics, receives the usage data described in Section 2; and this website is delivered through Amazon CloudFront, whose servers in North America, Europe and Israel handle your connection, including your IP address, to serve its pages. None of them keeps your waitlist email address.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page. Once the Service launches, material changes will also be communicated via email to account holders at least 30 days before they take effect. The "Last updated" date at the top of this page will be revised accordingly.

14. Contact

If you have questions about this Privacy Policy or our data practices, please contact:

Privacy Officer
Igloosoft Technology Solutions
our email address