Privacy Policy

Registruum Technologies Inc. is responsible for personal information under its control, including when service providers process it on our behalf. Our Privacy Officer handles privacy questions, requests and complaints.

When an employer or other organization uses TapJob to manage its team, it determines important aspects of the information entered, workspace permissions and how work records are used. TapJob provides the technology and processes information for that service, while also handling account administration, security and other purposes described here. Responsibilities depend on the actual circumstances and applicable law; neither party can transfer away its legal obligations simply through a contract.

If a request concerns your employer’s work records, we may coordinate with the organization while protecting your rights. You may still contact us directly about TapJob’s own practices.

We receive information from you, people you interact with, organization administrators and authorized integrations. Some technical information is generated when you use the Service. We seek to collect only what is reasonably needed for identified purposes.

Not every feature collects every category. Where a particular feature requires additional sensitive information, we explain the purpose and seek the appropriate authorization before collection. Do not upload unnecessary health records, government identification, financial details or other sensitive material merely because a file-upload tool exists.

An organization or user uploading another person’s information must have appropriate authority. That responsibility does not remove TapJob’s own duties to use reasonable purposes, safeguards and lawful processing practices.

Email confirmation and no provider screening. TapJob confirms access to the email address associated with an account. It does not currently issue provider-verification badges or conduct provider criminal background checks, identity screening or independent checks of qualifications, licences, insurance, references, portfolios or past work. Account confirmation does not establish that a provider is trustworthy or qualified. Separate proportionate checks for privacy requests, account security or fraud reports are not provider screening or endorsements.

Clients should request and independently check any credentials appropriate to their project. TapJob does not require a provider to submit credential documents merely to create a portfolio. If a user chooses to upload or share such documents, their handling follows the destination's audience and access permissions. Share only necessary details and obscure unrelated sensitive identifiers. Clients receiving these records must use and protect them for appropriate, disclosed purposes.

We use information to provide requested marketplace and workspace functions; authenticate users; administer Memberships; deliver messages; maintain documents and Archive; respond to support requests; protect users and systems; investigate fraud or misuse; diagnose problems; and comply with legal obligations or address legal claims where authorized.

We use personal information for product improvement only consistently with identified purposes and applicable law. This Policy does not authorize unrelated advertising, disclosure or AI model training. If we propose a materially different use requiring consent, we explain it and obtain that consent before proceeding.

Profiles and listings. Information deliberately included in a marketplace profile or listing is shared with the audience indicated in the interface. Private workspace records are not made public merely because you have a marketplace profile.

Project addresses. Browsing Contractors see the general area. The exact project address becomes available to a Contractor after they agree to use an opportunity to access the bid or project details. This may occur before you select that Contractor or award the project. The address-sharing notice identifies this disclosure before you submit the address.

Bids and documents. Proposal information is shared with the relevant Client and authorized participants. Private bids and project documents are not intended for unrelated users. Participant and organization permissions determine access. A Contractor who has seen or downloaded information may retain a copy outside TapJob; removing access does not erase copies already lawfully obtained.

Subcontracting. A Contractor posting a subcontract opportunity must have authority to share client details, photographs and documents. A subcontractor does not automatically receive access to every original project record. Share only what is relevant through authorized permissions.

Public portfolios and reviews. Publishing a review, portfolio or other public content has different consequences from storing a private job record. Do not include another person’s address or private details in public material without an appropriate basis. Public information can be copied or indexed by others.

Portfolio photographs and permissions. Users are responsible for having authority to upload or publish another person's information. A private work record is not automatically permission to publish a photograph in a portfolio. Before sharing, remove unnecessary faces, children's details, house numbers, location clues, vehicle plates, documents, keys, access codes and security-system details. Photographs and files may contain embedded location or other metadata; do not assume TapJob removes it automatically. Review files before uploading.

Sharing credentials and communicating directly. Information sent to another participant may be saved or used outside TapJob. Information shared through a separate call, email, messaging service or payment service is also subject to the recipient's and that service's practices. This does not remove TapJob's responsibilities for disclosures it makes. Do not use project contact details for unrelated marketing or public disclosure without an appropriate legal basis.

Reporting privacy concerns. Contact support@registruum.ca with a link or record identifier if a portfolio or listing exposes your personal information without authority. Send only details necessary to assess the concern. We assess applicable access, removal and correction rights and explain relevant limits, including copies outside our control. We do not promise that removal from TapJob erases copies already held by others or cached by search engines.

Administrators and authorized managers may access team and job information according to their permissions. A homeowner does not automatically receive every internal crew record.

The organization should explain its monitoring and employment-record practices to workers. It should remove obsolete access and avoid collecting unnecessary information. Leaving a workspace generally ends access granted by that workspace but does not automatically delete the organization’s lawful business records or remove a worker’s statutory access rights.

Saved site locations and geofence settings may be entered by an organization. Device location, when collected, is personal information and is used for the purpose explained when the feature is enabled.

For clock-in, TapJob checks proximity to the geolocation or geofence set for the designated job site. The proximity check stops once clock-in is completed. TapJob does not continuously track the worker’s GPS location or monitor their movements throughout the shift through this feature.

This is a limited location check, not live movement tracking. The device may use available location services to determine proximity. The saved site geofence identifies the work location; it is not a record of a worker’s route.

Location-related attendance information is available to the organization’s authorized users according to their workspace permissions. Contact the Privacy Officer with questions about location records or access. Declining a required location permission may prevent the proximity check from working; unrelated features do not thereby require continuous location access.

Location signals can be inaccurate. Individuals can report incorrect records to the organization and to TapJob where appropriate. An employer’s obligations concerning monitoring, pay and corrections remain applicable.

Worky is TapJob’s AI assistant for scheduling and calendar tasks, checklists, and creating job orders. When you use it, your request and the relevant schedule, checklist or job-order context may be processed by TapJob and the AI service providers used for that feature. Worky processes context within the requesting user’s authorized workspace access. Private information is not made available to unrelated organizations simply because they also use Worky.

Contact the Privacy Officer for information about the service providers supporting Worky, their processing locations and applicable data-handling arrangements. Worky may rely on third-party AI services to process requests.

Avoid unnecessary personal information in prompts. AI outputs may contain errors or inferences about people. Review them before sharing or making decisions. Worky’s scheduling, checklist and job-order assistance is not intended to determine employment status, discipline, pay entitlement or other significant decisions about individuals without appropriate human review.

Payments for marketplace work currently take place directly between Clients and Contractors. TapJob does not collect project-payment card information merely because a project is posted or awarded.

Membership payments are handled through a third-party payment processor. The processor receives payment information necessary for the transaction; TapJob receives the subscription, transaction and billing information needed to manage your account. The payment interface identifies the processor used for your purchase.

Do not send full payment-card numbers through messages, project uploads or support email. Integrated project payments or dispatch payments will require updated notices before activation.

Necessary cookies or similar storage support sign-in, security, preferences and remembering cookie choices. With your permission, we load Google Analytics to understand how TapJob is used. Declining optional analytics does not prevent use of unrelated core features.

Google Analytics may process usage events and device or network information according to the configured implementation.

You can change optional cookie choices through Cookie settings. Withdrawal stops future optional collection governed by that choice; it does not automatically erase earlier records. Contact us for applicable deletion or access requests. Before introducing advertising pixels or a new non-essential tracking purpose, we will explain the change and obtain required consent.

We seek consent appropriate to the information’s sensitivity, reasonable expectations and applicable law, unless a lawful exception applies. We explain material purposes and disclosures at relevant collection points, not only in this Policy.

You may request withdrawal of consent, subject to lawful limits, and we will explain relevant effects on the requested service. We will not require agreement to unnecessary processing as a condition of an unrelated feature. A contractual statement alone does not eliminate privacy rights.

Marketing choices, optional analytics and device permissions can be managed separately. Organization administrators cannot consent to every use of a worker’s information merely by accepting platform Terms.

Providers may support hosting, databases, authentication, storage, maps, email, diagnostics, security, AI, analytics, payments and support. They receive only information needed for their role under appropriate arrangements. Some providers, such as payment processors, also have independent legal obligations and their own privacy practices.

Some processing may occur outside your province or Canada. Information in another country may be subject to lawful access by courts, regulators or other authorities there. TapJob remains responsible for appropriate safeguards and oversight for information under its control.

You may contact our Privacy Officer for information about the providers handling your information, their functions and processing locations, including processing outside Canada.

We disclose information where authorized or required by law, including for lawful requests, protection against a genuine security threat, fraud investigation or legal claims. We assess the request and share only information reasonably needed. A dispute report does not automatically entitle a user to another person’s private records.

Information may be disclosed in a proposed or completed financing, reorganization, merger, acquisition or business sale only as permitted by applicable law and under appropriate protections. We use aggregated or appropriately de-identified information where feasible, limit identifiable disclosures to what is necessary and authorized, and apply appropriate confidentiality and limited-use conditions. Where required, we provide notice or obtain consent.

Reports and supporting evidence. When you submit a fraud, safety, impersonation, credential or content complaint, we may receive the report, relevant communications and supporting records. We use this information to assess and address the report, protect the Service and meet applicable obligations. We limit disclosures to what is appropriate for those purposes. We cannot promise absolute anonymity where responding fairly or complying with law requires disclosure; we do not automatically share a complainant's full submission with the reported user. Send only relevant evidence and avoid unnecessary criminal-record, identity or financial documents.

We use administrative, technical and organizational safeguards appropriate to the sensitivity and risks of the information. These include access management and measures to protect supported transmissions and stored records.

Access controls are designed to limit private records to authorized users and administrative access to legitimate needs. No service can guarantee complete security; that limitation does not remove our legal security obligations.

We investigate suspected privacy breaches, contain and remediate incidents, assess harm, and keep records and give notices or regulatory reports as required by applicable law. Report a suspected problem to support@registruum.ca without unnecessarily sending exposed personal information.

We retain information only as long as needed for the identified purpose or a lawful requirement. Archive is an organization feature, not a promise of permanent retention. Account closure, a workspace removal, Membership cancellation and a request to delete information have different effects.

Closing an account does not automatically delete records that another party may lawfully need, such as a signed agreement or invoice. Nor does a general business preference justify retaining every record indefinitely. We assess requests and explain relevant retention exceptions.

We delete ordinary account data from active systems 30 days after confirmed account closure, subject to the limited exceptions below. During that period, contact support to request retrieval of your records. This applies to information retained solely to provide the closed account, including its private files and job records. A request concerning organization-owned or shared records is assessed separately so that closing one person’s account does not improperly erase another user’s lawful records.

Limited billing and accounting records, required breach records, and information necessary for a specific legal claim or other legal obligation may be retained for the applicable period, with restricted access. We explain relevant exceptions when responding to a deletion request. We do not use a general preference for keeping data to retain the whole account indefinitely.

Specific records may be preserved for a justified legal hold or investigation, with restricted access. When no longer required, information is securely deleted or effectively anonymized. Residual backup copies may remain until overwritten through the applicable backup cycle. They are restricted to recovery or legal needs rather than routine use; deletion instructions must be reapplied if data is restored. Contact the Privacy Officer for information about backup retention. The 30-day active-system deletion period does not promise immediate erasure from every backup or from another user’s lawful records.

Storage-based deletion after a downgrade includes notice and a 30-day retrieval opportunity under the Terms. Users should retain their own legally required documents, but that does not relieve TapJob of its duties.

Contact support@registruum.ca to request access to your personal information, information about its use and disclosure, correction, withdrawal of consent or deletion where applicable. We verify identity proportionately and do not request excessive identification.

Where PIPEDA applies, access requests are generally answered within 30 days, subject to permitted extensions and exceptions. If an extension, refusal or restriction applies, we explain it as required, including available complaint options. Other applicable laws may provide different rights or deadlines.

We protect other people’s information when responding. Where appropriate, corrections are communicated to recipients of incorrect information. If a factual dispute cannot be resolved, applicable law may require recording the disagreement rather than silently changing a historical record. Deletion is not absolute where a valid retention obligation applies; we explain the reason and relevant period or criteria.

Marketing messages are sent on an appropriate legal basis and include required sender identification and unsubscribe controls. You can withdraw marketing consent without cancelling your account. Unsubscribe requests are implemented within the applicable legal deadline.

Necessary account, security, billing and requested project messages may continue where permitted. We do not use that distinction to disguise promotional content as a service notice.

Client and Contractor account holders and Membership purchasers must be at least 18 under the Terms. Where an organization lawfully invites a younger worker to a crew account, it must provide appropriate notices and obtain required authorizations; TapJob must also meet its own responsibilities. We do not assume that parental permission alone resolves all workplace privacy requirements.

Contact the Privacy Officer if information about a child has been submitted without an appropriate basis.

We identify the effective date and provide appropriate notice of material changes. A new privacy policy does not retroactively authorize a materially different use of previously collected information. We obtain additional consent where required before implementing the change.

Raise questions or complaints with our Privacy Officer at support@registruum.ca. We will investigate and explain the outcome or next steps within applicable requirements. You may also contact the Office of the Privacy Commissioner of Canada or the relevant provincial privacy regulator; you are not required to waive that right or accept private arbitration.

Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/en/report-a-concern/

Registruum Technologies Inc., operating as TapJob

Website: https://tapjob.org

Privacy Officer: support@registruum.ca

Mailing address: 2440 Kingston Road, Scarborough, ON M1N 1V3, Canada