Privacy policy

Updated October 30, 2026

This policy covers OnSite Cloud, the repair shop software at app.onsite.cloud, and our website, www.onsite.cloud. OnSite is operated by 2586668 Alberta Inc. in Alberta, Canada ("OnSite", "we", "us"). We follow Canada's privacy laws, including PIPEDA and Alberta's Personal Information Protection Act. Our terms of service cover the rest of how OnSite works.

Shops and their customers

Repair shops use OnSite to keep records about their own customers. For those records, the shop decides what to collect and why, and we look after them on the shop's behalf. If you're a shop's customer, ask the shop about your information. We'll help them answer you.

What OnSite Cloud keeps

• Staff accounts: name, email, role at each store, and a password stored only as a one-way hash. Two-step sign-in, if someone turns it on.
• Security records: sign-ins and account changes, with the time, IP address and browser, kept for a year.
• The shop's records: what staff enter, such as customers' names and contact details, devices, repairs, notes, photos, signatures, appointments, invoices and payments, and the emails and texts the shop sends and receives.
• Billing: each business's plan, subscription status and paid-through dates. Card details stay with Stripe; we never see them.
• Feedback: when staff use the feedback button, their report goes to Ybug with a screenshot and who sent it.

QuickBooks Online

An owner or manager can connect a store to its QuickBooks Online company. We ask Intuit for access to QuickBooks accounting only.

• What we read: the company's name, accounts, tax codes, payment methods and invoice custom fields, so the shop can choose where things go. We also look up existing customers, items and invoices, to match them and check totals.
• What we write: customers, service items, paid invoices, their payments and refunds, and only when someone at the shop chooses to sync. We never change or delete other transactions in QuickBooks.
• How the connection is kept: the connection token is encrypted and stored in the shop's own records, on our servers in Canada. Only owners and managers can connect, sync or disconnect.
• How we use it: only to keep the shop's books in step with OnSite. QuickBooks data is exchanged only with Intuit, never sold or shared, and never used for advertising.
• Disconnecting: the shop can disconnect at any time in Settings. We then revoke our access with Intuit and delete the connection token. The record of what was synced, such as QuickBooks IDs on invoices and the sync log, stays with the shop's records.

How we use information

To run OnSite, send the emails and texts a shop asks for, bill each business, answer questions, and keep OnSite secure and working well. We never sell information or use it for advertising.

Companies that help us

We use a few service providers, each only for its part:

• Cloudflare delivers and protects the website and the app, and counts website visits without cookies.
• Stripe handles our billing, and card payments in a shop's own Stripe account.
• Twilio sends and receives texts, and SendGrid sends email.
• Google Maps Platform suggests addresses and shows maps, when turned on.
• Intuit receives what a shop syncs to QuickBooks Online.
• Ybug receives feedback reports from staff.

Some of these companies process information in the United States or elsewhere, where it's subject to those countries' laws.

Where it's kept and how it's protected

On OnSite's own servers in Canada. Connections are encrypted, and keys and connection tokens are encrypted where they're stored. Each store's records are kept apart from other stores'. Staff see only what their role allows, and anyone can turn on two-step sign-in. Each store is backed up every night, and backups are kept for 14 days.

How long we keep it

A shop's records are kept while its subscription is active. When a subscription ends, we keep them so the shop can export them or come back, and delete them when the shop asks. Deleted records leave our backups within 14 days. Security records are kept for a year.

Our website

The website collects only what you type into its forms. On the launch list, that's your email and, if you add them, your shop's name and how many locations it has. When you send us a message, it's your name, email, shop name, topic and message. Each form is kept on our servers and emailed to our inbox through SendGrid.

We use your launch-list email only to tell you about OnSite's launch, and a message only to answer it. We keep the launch list until launch, and after that for as long as you want to hear from us. The website has no advertising and sets no cookies of its own. Cloudflare may set a security cookie and keeps short-lived records of visits, including IP addresses.

Your choices

Every email we send you has a way to unsubscribe. You can ask to see, correct or delete the information we have about you, or withdraw your consent, by writing to [email protected]. If you're not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada or Alberta's Information and Privacy Commissioner.

Changes

We'll post any change to this policy here with its date, and email account owners about a significant change before it takes effect.

Contact

2586668 Alberta Inc., operating as OnSite. [email protected]