DRAFT — pending counsel review. This document is a placeholder and is not yet legally binding. Final policy will be published after legal review.
Privacy Policy
Last updated: July 3, 2026
1. Overview
This Privacy Policy explains how Finvo Inc. ("Finvo", "we", "us") collects, uses, and protects personal information when you use OhMyPayroll. We handle personal information in accordance with Canadian privacy law, including PIPEDA and applicable provincial legislation.
2. Information we collect
We collect information you provide directly — such as your name, email, company details, and payroll inputs — and information generated through use of the service, such as log and device data. To run payroll, employers submit employee information including names, addresses, and Social Insurance Numbers.
3. How we use information
We use personal information to provide and operate the service: processing payroll, generating tax documents, delivering pay statements to employees, verifying accounts, providing support, and keeping the platform secure. We do not sell personal information.
4. Sensitive data and security
Social Insurance Numbers are encrypted at rest using AES-256-GCM and are only ever shown masked. Access to tenant data is scoped so one organization cannot see another organization’s records. We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information.
5. The PII firewall
Where OhMyPayroll integrates with our sister accounting product, only aggregate payroll amounts flow to the general ledger. Employee personal information — such as Social Insurance Numbers and banking details — never leaves the payroll side.
6. Sharing and service providers
We share personal information with service providers that help us operate (for example, authentication, hosting, email delivery, and payment processing), bound by confidentiality and data-protection obligations. We may disclose information when required by law or to protect our rights and users.
7. Data retention
We retain personal information for as long as needed to provide the service and to meet legal, tax, and record-keeping obligations. Payroll and tax records are often subject to multi-year retention requirements under Canadian law.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information. Employers act as the controller for their employees’ information; employee requests are generally directed to the employer, and we assist as processor.
9. Data location
OhMyPayroll data is hosted in Canada. Some service providers may process limited operational data elsewhere; where that occurs we take steps to ensure comparable protection.
10. Changes to this policy
We may update this Privacy Policy as our practices evolve. Material changes will be communicated through the application or by email, and the "last updated" date above will change.
11. Contact
Privacy questions or requests can be sent to privacy@finvo.ca.