Privacy Policy

Quick summary
We store your account, company profile, software listings, and billing info to run the directory service. All customer data is hosted in Canada on Microsoft Azure. Data is encrypted in transit and at rest. We don't sell personal data, and we don't use your proprietary data for ads or model training.

1) Who we are

TrueNorthSaaS ("we", "us", "our") provides a directory and platform for discovering Canadian software companies and tech jobs. Questions? Email support@truenorthsaas.ca.

2) What this policy covers

This policy explains what we collect, why we collect it, how we use and share it, and the choices you have.

3) The information we collect

a) You provide to us

• Account & company info – name, email, password (or OAuth identifier), company HQ, website, and branding (logos).
• Software profiles & claims – the SaaS products you list (descriptions, categories, screenshots, features), and the verification links you provide to claim ownership.
• Job Postings – job descriptions, requirements, and hiring process details you publish to the job board.
• Billing – invoices and payment status (processed securely by our payment partner).
• Support – messages, attachments, and contact details you send us.

b) Collected automatically

• Usage & device data – app events, search queries, pages viewed, timestamps, and crash/error logs.
• Approximate location – we may record city, state/province, and country inferred from IP address for analytics. We do not store exact addresses or precise GPS location.
• Device type – we may record general device types (e.g., desktop/mobile) to help us understand traffic and optimize the platform.
• Cookies / local storage – to keep you signed in and remember preferences. See Cookies below.

4) How we use your information

• Provide and improve the service – create and verify company profiles, publish software listings, display directory results, host job postings, and maintain reliability.
• Customer support & security – troubleshoot issues; verify software claims; detect abuse, fraud, and unauthorized access.
• Payments – manage job posting fees, invoices, and receipts.
• Product communications – service updates, verification notices, billing alerts, and (if you opt in) newsletter digests.
• Legal – comply with law, enforce terms, and protect rights.

We do not sell personal information. We do not use your private account data for third-party advertising.

5) Where we store and process data

Our production infrastructure and primary databases are located in Canada. We utilize Microsoft Azure's Canada Central (Toronto) and Canada East (Quebec City) regions to ensure data residency and redundancy within Canadian borders.

Data is encrypted in transit (TLS 1.2+) and at rest (e.g., AES-256). Access to production systems is restricted by role, logged, and audited. While our primary storage is in Canada, limited data (such as payment processing via Stripe or CDN delivery) may be processed globally by our service providers as described in Section 6.

6) Who we share data with (service providers)

We use trusted providers to run TrueNorthSaaS. They only process data on our instructions and under contract:

• Microsoft Azure – hosting, databases, storage, logs.
• Authentication providers – Google / Microsoft OAuth (if you choose to sign in with them).
• Payments – Stripe (or equivalent) for card processing and invoicing.
• Email – transactional email (e.g., verification codes, receipts, claim updates).
• Analytics/telemetry – aggregated usage and crash/error reporting.

We may disclose data if required by law, to protect users, or to defend our rights.

7) Profiles, listings & public content

We store the software profiles and job postings you create to provide TrueNorthSaaS functionality. Please note that company details, software features, screenshots, and job postings published to the directory are public-facing by design.

Private verification data (like identity proof links submitted during the claim process) is kept confidential and is only used by our admin team to verify software ownership.

Deletions – when you delete a software listing, job post, or your account, we remove active copies promptly; residual copies may remain in backups for a limited period (see Retention).

8) Retention

• Account data – retained while your account is active.
• Profiles & listings – retained until you delete them, they expire (e.g., job postings), or you close your account.
• Backups – encrypted backups are cycled and typically expire within 30–90 days.

We may keep minimal records (e.g., invoices, security logs) as required by law.

9) Your choices & rights

• Access / export – request a copy of your data.
• Correction – update your company profile or software details.
• Deletion – unlist software, delete job postings, or close your account entirely.
• Opt-out – control email preferences (except essential service emails like login codes).
• Cookies – manage cookies in your browser or via our cookie settings (where available).

Residents of certain regions (e.g., EEA/UK, California) may have additional rights such as data portability and objection/restriction of processing. Contact us to exercise these rights.

10) Cookies

We use strictly necessary cookies (authentication, security), functional cookies (preferences), and limited analytics/performance cookies. You can control cookies via your browser. Blocking some cookies may affect how the site works.

11) Security

We apply layered security: encryption in transit/at rest, access controls, least-privilege roles, monitoring, and vulnerability management. No method is 100% secure; please use a strong password and keep your account details safe.

12) Children's privacy

TrueNorthSaaS is not intended for children under 13 (or the age required by local law). We do not knowingly collect data from children.

13) International transfers

TrueNorthSaaS is headquartered in and hosted in Canada. If you are accessing the service from outside Canada, please be aware that your information will be transferred to, stored, and processed in Canada.

For third-party sub-processors located outside Canada (e.g., payment processors), we ensure appropriate safeguards are in place (such as standard contractual clauses) to protect your data in accordance with applicable laws.

14) Changes to this policy

We may update this policy to reflect changes to our service or legal requirements. We'll update the "Last updated" date and, when changes are material, provide additional notice (e.g., email or in-app).

15) Contact us

Questions or requests: support@truenorthsaas.ca
TrueNorthSaaS — Ontario, Canada