Privacy Policy

Last updated: October 18, 2026

1. Who we are

JobAssign, the web and Android app, is a product of Softekey, of Hamilton, Ontario, Canada ("Softekey", "we", "us"). This policy explains how we handle personal information collected through JobAssign, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our Terms of Service explain the rules for using JobAssign.

2. What we collect

From the account holder

• Name, email address and password. The password is stored only as a one-way hash, never as the password itself.
• Your plan, trial dates and billing status.
• When you pay: your billing name and address, entered on Stripe's checkout page. Card details go directly to Stripe.

From people added to a company (administrators and staff)

• Full name, username and password (stored as a one-way hash). No email address is needed.
• Which steps they are assigned and when they complete them.
• If they turn on notifications, a device token so we can send them to that phone or browser.

Work you enter

• Work orders and their details: a job number or client name, a quantity, duration or address, due dates, instructions, prices and process steps.
• Settings, house rules for AI checks, AI findings, and a history of changes so that work can be audited and undone.

Collected automatically

• Our web server logs each request: IP address, browser type, the page or address requested and the time. We use these logs for security and troubleshooting.
• Counts of failed sign-in attempts, used to lock out password guessing.

3. How we use it

• To run JobAssign: sign people in, show each person their work, send notifications, and run AI checks when they are asked for.
• To bill paid plans and keep the financial records the law requires.
• To send service emails, such as sign-up codes, password resets and notices about your account or plan.
• To keep JobAssign secure, prevent abuse and fix problems.
• To send occasional news about JobAssign, as described in section 11.

We do not sell or rent personal information, and we do not use it for advertising. We use it only for these purposes, or as the law requires.

4. AI checks

AI checks run only when an administrator starts one, or after an administrator switches on automatic checks; they are off by default. For each work order checked, we send Anthropic:

• the job number or client name;
• the second field (such as a quantity, duration or address);
• the due date, rush flag and price;
• the instructions and step names;
• the company's house rules.

We do not send staff names or account details. Anthropic processes this data to return the result. Under its commercial terms it may not use it to train its models.

5. Service providers

These companies process personal information for us, only to provide their service:

• DigitalOcean (United States): hosts our servers and database, in New York.
• Stripe (United States and other countries): processes payments and calculates sales tax. Card details are collected by Stripe directly. See Stripe's privacy policy.
• Brevo (France): sends our emails.
• Google Firebase Cloud Messaging (United States): delivers notifications to phones and browsers. A notification includes the job number and step name.
• Anthropic (United States): runs AI checks, as described in section 4.
• Cloudflare (United States): runs our domain's DNS and forwards email sent to our support address.

Tapping an address on a work order opens Google Maps, which sends that address to Google. We may also disclose information if the law requires it, or to a buyer if Softekey or the JobAssign business is ever sold, in which case this policy would continue to protect it.

6. Data stored outside Canada

Our servers are in the United States, and some of the providers above process information in the United States or Europe. While it is there, it is protected by our contracts with those providers but is subject to local laws, and may be accessible to courts and authorities there.

7. Data about your staff and clients

When a business enters information about its own staff or clients, the business decides what to enter and is responsible for having the right to do so; we process it on the business's behalf. If you are a staff member or client of a business that uses JobAssign, contact that business first about your information. We will help it respond.

8. How long we keep it

• While your account is open, we keep its data so the service works. Only the account holder can delete a company, which permanently deletes its people, work orders and history. Administrators can delete work orders and remove people. A removed person can no longer sign in, but their record is kept so past work still shows who did it, and finished jobs stay in the company's history.
• When you delete your account, it can be restored for 30 days. After that, every company, person, work order and its history is permanently deleted.
• Backups are taken daily and deleted after 14 days, so deleted data is gone from them within that time.
• Server logs are rotated by size, and the oldest entries are deleted as new ones arrive.

A few records are kept after an account is deleted, because the law requires them or because they protect you:

• Billing records: Stripe keeps paid invoices and payments as tax records. We also keep a log of the payment notifications Stripe sent us, which can include a billing name, email and address, as part of our financial records.
• Email preferences: a record of promotional emails we sent to an address, and of any unsubscribe. This is the record Canada's anti-spam law requires, and it means an unsubscribe still holds if the same person signs up again.

9. Security

• All connections use HTTPS.
• Passwords are stored only as Argon2 hashes, and sign-in tokens are stored hashed.
• Accounts lock after repeated wrong passwords, and sign-ins are rate-limited.
• Each company's data is kept separate from every other company's.
• Access to our servers is restricted to us.

No system is perfectly secure. If a breach of security creates a real risk of significant harm to you, we will tell you and report it to the Privacy Commissioner of Canada, as the law requires.

10. Cookies and browser storage

JobAssign does not use cookies, advertising trackers or analytics. The web app saves a few items in your browser's local storage:

• your sign-in tokens, so you stay signed in;
• your name, role and user ID, so the right screens appear;
• a note that this browser has signed in before, so it opens on the sign-in page instead of the welcome page.

If you turn on notifications, Firebase stores a notification token in the browser. Signing out removes your sign-in details from the browser.

11. Emails we send

Service emails, such as sign-up codes, password resets and notices about your account or billing, are needed to run your account and are sent whenever they apply.

Promotional emails about JobAssign are sent only where Canada's anti-spam law (CASL) allows. Each one identifies us, includes our mailing address, and has an unsubscribe link that works straight away. You can also unsubscribe by emailing us.

12. Your rights

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct information that is wrong;
• delete your account. The account holder can do this from the account page, or ask us to do it.

You can withdraw consent at any time, but some uses are needed to provide JobAssign, so withdrawing consent may mean closing your account. Email support@jobassignapp.com. We may need to confirm who you are, and will reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

13. Children

JobAssign is a service for businesses and is not meant for children. We do not knowingly collect information from anyone under 16.

14. Changes to this policy

We may update this policy. If a change materially affects how we use your information, we will email the account holder before it takes effect. The date at the top shows when it last changed.

15. Contact

For privacy questions and requests, contact the person responsible for privacy at Softekey:

Softekey (JobAssign), Privacy
Hamilton, Ontario, Canada
support@jobassignapp.com · 416-726-0586