Your privacy matters.

GoTidy is operated by DREAMHOUSE TECHNOLOGIES LTD., British Columbia, Canada, which is responsible for your data under this policy.

We only collect what GoTidy needs to run your team's workspace:

• Account info: name, email, password (hashed), profile photo, role (Admin, Manager, Staff).
• Organization info: company name, logo, branding, team structure, manager permissions.
• Work data: tasks, subtasks, schedules, clock-in / clock-out times, lunch breaks, time-off requests, reward points and activity history you create in the app.
• Payment info: billing contact and seat count. Card details are collected and stored by Stripe, never by GoTidy.
• Technical data: IP address, browser, device type and basic logs needed to keep the service running and secure.
• Waiting list: if you join our "Launching soon" waiting list, we keep your email address only to tell you when GoTidy launches. Ask us any time and we'll remove it.

• Provide the GoTidy service — tasks, schedules, payroll exports, rewards, notifications.
• Send transactional emails (sign-up, password reset, overdue task reminders, billing receipts).
• Process subscription payments through Stripe.
• Investigate bugs, prevent abuse, and protect accounts.
• Improve the product based on aggregate, non-identifying usage signals.

We do not sell your data. We do not use it to train AI models. We do not share it for advertising.

Your data lives in our managed Postgres database, hosted on enterprise cloud infrastructure with encryption at rest and in transit (TLS 1.2+).

• Every table is protected by row-level security so one organization's data can never be read by another.
• Passwords are hashed using industry-standard algorithms — we cannot see your password.
• Backups are encrypted and deleted within 30 days.
• Access to production data is limited to a small number of engineers and audited.

GoTidy relies on a small number of trusted providers:

• Stripe — payment processing and subscription billing.
• Cloud database & auth provider — hosted Postgres, authentication and file storage.
• Email delivery provider — transactional emails only (no marketing lists).

Each provider is bound by its own privacy commitments and only receives the data needed for its role.

We use a small number of strictly necessary cookies to keep you signed in and to remember your theme preference. We do not run third-party advertising or cross-site tracking pixels.

You can, at any time:

• Access your data.
• Correct any inaccurate profile or work data.
• Delete your account and your organization's data by contacting support.

If you're in a region covered by GDPR, PIPEDA or CCPA, those laws give you these rights by default — we honour them for every user, regardless of location.

We keep your data while you have access. 30 days after access to a product ends, we permanently delete that product's data, and the whole workspace if no product is left. We email your admins on the day access ends and again before deletion. We keep a small record of your business name, dates, billing records and your agreement to our terms, as required by tax and accounting law. Backups are deleted within 30 days.

GoTidy is a workplace tool intended for users 16 and older. We don't knowingly collect data from children under 16. If you believe a child has created an account, contact us and we'll remove it.

If we make material changes to this policy, we'll notify account admins by email and update the "Last updated" date at the top of this page. Continued use of GoTidy after a change means you accept the updated policy.

Questions about privacy or your data? Email info@gotidy.ca and we'll respond within 5 business days.