Privacy Policy

1. Who we are

thezzo is a software service for trade contractors, such as restoration and renovation companies. It helps them run projects, daily sheets, time tracking, payroll reports, estimates, invoices and payments. thezzo is operated by [COMPANY LEGAL NAME], [ADDRESS] ("we", "us").

This policy explains how we handle personal information in the thezzo apps (iOS, Android, macOS, Windows and web), on the pages we send to our customers' clients (estimate, report and payment links), in the emails we send, and on this website. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.

2. Our role and our customers' role

Our customer is the contractor company that signs up for thezzo (the "Customer"). The Customer decides who to add as users (admins, project managers and field workers) and which clients, projects, estimates and invoices to enter.

• For information about the Customer's workers and clients, the Customer is responsible for it, and we process it on the Customer's behalf and under our agreement with them. If you are a worker or client of a Customer, please send questions and requests about that information to the Customer first. We will help the Customer answer them.
• For information about our own account holders and website visitors, and for information we use to run, secure and bill for the service, we are responsible for it.

3. Information we collect

Account and sign-in

• Name and email address.
• Passkeys: we store the public key and an identifier for each passkey. The private key stays on your device or with your passkey provider.
• One-time sign-in codes sent by email, which expire after a few minutes.
• Session records, including the IP address and browser or device type (user agent) used to sign in.
• Your organization memberships and role (admin, project manager or field worker).

Company information the Customer enters

• Company profile and logo, tax settings and registration numbers, invoice and estimate settings.
• Projects, job site addresses, schedules and visits, daily sheets, materials and notes.

Workers

• Name, phone number, employment type, default labour code and pay rate.
• Time logs, time clock punches and breaks, hours on daily sheets, and pay period and payroll reports.
• Location at clock-in and clock-out, if allowed (see Location information).
• Project photos, expense receipts (image, merchant, amount, date, category, notes) and reimbursement status.
• Messages and photos sent in the in-app chat.
• Spreadsheet imports of worker lists, if the Customer uses them.

The Customer's clients

• Name, contact person, email, phone number and billing address.
• Estimates, change orders, invoices, completion reports and their history.
• When a client accepts an estimate or signs a report: the name they enter, a typed or drawn signature, any title they enter, the time, and a record of exactly what they accepted.
• Questions or decline reasons the client sends on an estimate link.
• Payment records: amount, date, method, and status, refunds and disputes. Card and bank details are entered on Stripe's checkout page and are not received or stored by us.

Devices and technical information

• Push notification tokens, the device platform and a short device label, and your notification preferences.
• IP addresses, used to limit abuse (rate limiting) and to secure sign-in.
• Records of emails we send for a Customer (recipient address, type, delivery status).

Integrations

• QuickBooks: access tokens for the Customer's QuickBooks company and the links between thezzo and QuickBooks records (customers, invoices, payments, refunds).
• Stripe: the identifier and status of the Customer's own Stripe account, and the checkout, payment, refund and dispute events Stripe sends us.

This website

This website has no sign-up form, analytics or advertising trackers. It loads fonts from Google Fonts, so your browser sends your IP address to Google when you open it.

4. Location information

• Time clock. When a worker clocks in or out on a device that has location permission, the app records the device's location at that moment and stores it with that clock-in or clock-out punch. Who can see it: [WHO CAN SEE PUNCH LOCATION]. We do not record a continuous location trail.
• Job site reminders. On iOS and Android, the app can ask the phone's operating system to watch for arrival at the Customer's job sites so it can show a reminder to clock in. That check runs on the phone. The app does not send these arrivals or departures to our servers.
• Address search. When someone types a project or client address, the text is sent to Google Places to suggest matching addresses.
• Directions. "Open in maps" hands the address to Google Maps, Apple Maps or Waze. Those apps' own privacy policies apply.

Location permission can be turned off at any time in the device settings. The time clock still works, without a location.

5. How we use information

• To provide thezzo: sign-in, projects, time tracking, payroll reports, estimates, invoices, payment links, receipts, chat and notifications.
• To send the emails and push notifications the service depends on, such as sign-in codes, invitations, estimates, invoices, payment receipts, reminders and alerts.
• To sync records with QuickBooks and to take payments through Stripe when the Customer turns those on.
• To secure the service, prevent fraud and abuse, and fix problems.
• To provide support and to talk to the Customer about their account.
• To meet legal, tax and accounting obligations.

We do not sell personal information, and we do not use the Customer's data for advertising.

6. Consent

We rely on consent, express or implied as PIPEDA allows. Customers confirm that they have the authority and any notices or consents needed to enter their workers' and clients' information, including worker location. Device permissions such as location, camera, photos and notifications are asked for by the operating system and can be withdrawn in the device settings. You can withdraw consent at any time, subject to legal or contractual limits, though some features may then stop working.

7. Service providers and sharing

We use these providers to run thezzo. They are bound by contract to protect personal information and to use it only to provide their service to us:

• Cloudflare: hosting, databases (D1), file storage (R2) for photos, receipts, signatures and documents, and real-time chat.
• Resend: sending email.
• Stripe: card and bank payments from the Customer's clients, into the Customer's own Stripe account. Stripe also handles the Customer's account onboarding and identity checks under its own terms.
• Intuit QuickBooks: accounting sync, if the Customer connects it.
• Apple (Apple Push Notification service), Google (Firebase Cloud Messaging) and the push services of web browsers: push notifications.
• Google (Places API): address suggestions.
• Google Fonts: fonts on this website.

Information is also shared:

• Within a Customer's organization, according to each user's role.
• With the Customer's clients, when the Customer sends them an estimate, report, invoice or payment link.
• When the law requires it, or to protect rights, property or safety.
• With a buyer or successor if our business is sold or reorganized, under the same protections.

8. Storage and transfers outside Canada

Our service providers may store and process information outside Canada and Quebec, including in the United States, where it may be accessed by courts and authorities under local law. Our data is stored in [DATA STORAGE REGION]. Before sending information outside Quebec, we assess whether it will be adequately protected, as Law 25 requires.

9. Email and CASL

Most of the email thezzo sends is transactional: sign-in codes, invitations, estimates, invoices, payment receipts and reminders. When a Customer sends an estimate or invoice to its client through thezzo, the email is sent on the Customer's behalf, and the Customer is responsible for having a basis to send it.

If we send commercial electronic messages, such as product news, we will do so only with consent as Canada's Anti-Spam Legislation (CASL) requires, identify ourselves, and include a working unsubscribe link. Unsubscribe requests are honoured within 10 business days.

10. Cookies and similar technologies

The thezzo web app uses cookies and browser storage to keep you signed in and remember your settings [CONFIRM]. The mobile and desktop apps keep the session in the device's secure storage. We do not use advertising or cross-site tracking cookies. This website sets no cookies of its own.

11. Retention and deletion

• Sign-in sessions expire after 30 days unless renewed. Sign-in codes expire after a few minutes.
• Customer data is kept while the Customer's account is active, and for [RETENTION PERIOD AFTER CANCELLATION] after the account is closed, unless the Customer asks us to delete it sooner.
• Payment, invoice and tax records may be kept for [FINANCIAL RECORD RETENTION PERIOD] to meet legal requirements.
• Backups are overwritten within [BACKUP RETENTION PERIOD].
• Uploaded files that no longer belong to any record are deleted automatically.

Users can delete their own account in the app, confirmed with a code sent by email. If the user is the only member of an organization, that organization's data is deleted with the account. An owner of an organization that has other members must transfer ownership or delete the organization first.

12. Security

We protect personal information with safeguards suited to its sensitivity, including encryption in transit [CONFIRM], passkey and one-time-code sign-in instead of passwords, role-based access within each organization, separation of each Customer's data [CONFIRM], signed payment webhooks and rate limiting. No system is perfectly secure. If a privacy breach creates a real risk of significant harm, we will notify affected people and the regulators as the law requires, and keep a record of it.

13. Your rights

Subject to legal exceptions, you can ask to:

• access the personal information we hold about you and learn how it has been used and shared;
• correct information that is inaccurate or incomplete;
• withdraw consent;
• have your information deleted.

Send requests to [PRIVACY EMAIL]. We will reply within 30 days [CONFIRM] and may need to confirm your identity. If the information is held for a Customer (see section 2), we will pass your request to that Customer.

14. Quebec residents

• Our person in charge of the protection of personal information is [PRIVACY OFFICER NAME AND TITLE], reachable at [PRIVACY EMAIL].
• You may also ask for computerized personal information you provided to be sent to you or to another organization in a structured, commonly used format.
• We do not make decisions about you based only on automated processing.
• You can complain to the Commission d'accès à l'information du Québec.

15. Children

thezzo is a business service and is not meant for children. We do not knowingly collect information from children under 13 [CONFIRM]. Account holders must be old enough to enter a binding contract where they live.

16. Changes to this policy

We will post changes on this page and update the date at the top. If a change is significant, we will tell account admins by email or in the app before it takes effect.

17. Contact and complaints

[COMPANY LEGAL NAME]
Attn: Privacy Officer
[ADDRESS]
[PRIVACY EMAIL]

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).