Privacy Policy
Version 2.0 – Last updated: May 2026
Privacy Policy
At Goodjob Corporation Inc. (hereinafter "Goodjob," "we," "our"), information security and privacy protection are priorities.
Scope
This Privacy Policy applies to Personal Information (as defined below) collected from freelancers and clients using the Goodjob platform ("Users" or "you"). It aims to describe our practices regarding Personal Information.
By "platform," we refer to both our website and the Goodjob App mobile application, downloadable from the Apple Store or Google Play.
Collected Personal Information and Purposes
Personal Information refers to any information about an individual that directly or indirectly identifies them ("Personal Information"). Collection is generally limited to the following categories of Personal Information:
- Name, First Name;
- Date of Birth;
- Social Insurance Number (sensitive information – heightened protection);
- Employment experience information;
- Email address, mailing address, phone numbers, and transportation information;
- Banking information, if applicable (sensitive information – heightened protection).
The Social Insurance Number and banking information constitute sensitive personal information under the Act respecting the protection of personal information in the private sector (Bill 25). As such, they are subject to heightened protection: encryption at rest, strict access controls, and audit logging of all access.
We distinguish two categories of use for your Personal Information:
Primary use – required to provide the service:
- Provide the platform to Users and ensure its security and optimal operation. The platform identifies job opportunities, refers freelancers to employers, and facilitates the transfer of amounts between employers and freelancers.
- Identify a User and ensure the authenticity of this identification.
- Provide technical support to Users.
Secondary use – with separate, optional consent that can be refused without affecting access to the primary service:
- Send newsletters and other promotional communications regarding our products, services, updates, news, tips & tricks, and special offers;
- Analyze platform usage behaviour to improve the service (using anonymized or aggregated data).
We only use Personal Information for the purposes stated above, unless authorized by law in very limited cases without your consent.
We may collect Personal Information through registration forms or more broadly during your email, telephone, or in-person exchanges with our employees or representatives.
Your Consent
Your consent to the collection, use, or disclosure of your Personal Information must be explicit, free, and informed. It must be given for specific purposes.
In the context of Goodjob's services, we seek your consent in the following situations:
- At registration: collection of your identity, Social Insurance Number, and contact details – required to create your account and verify your eligibility;
- When completing your profile: work experience and banking information for payment transfers – required for the placement service;
- For marketing communications (optional consent): sending newsletters and promotional offers – refusable without consequence to your platform access;
- For behavioural analytics (optional consent): anonymized tracking of your navigation on the platform to improve the service – refusable at any time.
Depending on the nature and sensitivity of your Personal Information, your consent may be explicit (given verbally, in writing, or electronically) or implicit (when you voluntarily provide Personal Information, for example).
Generally, we will seek your consent at the time of collection, unless otherwise required or permitted by law.
Security and Governance
We have implemented administrative, physical, and technological security measures proportionate to the sensitivity of the Personal Information we process, including:
- Encryption at rest: all sensitive information (including SIN and banking data) is encrypted on our servers;
- Encryption in transit: all communications between your device and our platform are secured using TLS/HTTPS;
- Role-based access control (RBAC): only expressly authorized personnel, according to their responsibilities, may access Personal Information;
- Audit logs: all access to sensitive data is logged and retained for traceability and incident detection purposes;
- Anonymization: data used for analytical or statistical purposes is anonymized or aggregated in an irreversible manner before any secondary processing;
- Privacy by default: platform settings apply the highest level of privacy without any action on your part;
- Privacy Impact Assessments (PIA): any new feature or processing activity involving Personal Information is subject to a prior assessment whose results guide the protective measures to be implemented.
In the event of a privacy incident presenting a risk of serious harm, we commit to notifying affected individuals and the Commission d'accès à l'information within the legally prescribed timeframe.
Communication of Your Personal Information
To whom?
We may communicate Personal Information to third parties in specific circumstances authorized by law. The table below summarizes these circumstances and the measures we take to protect the information.
| Recipient | Description and Purpose | Measures |
|---|---|---|
| Service providers, agents, subcontractors ("Subcontractors") | We may contract with Subcontractors to provide services to our Clients, such as a platform feature. | The contract obliges Subcontractors to: • Use only the Personal Information necessary to provide the service. • Refrain from disclosing Personal Information without our consent. • Implement rigorous security measures. • Allow us to audit these measures. • Notify us immediately in the event of a privacy incident. • Destroy Personal Information at the end of the contract. |
| Client companies using our services | We transmit your name, age, mode of transportation, work experience, and usage statistics to companies seeking to fill shifts on Goodjob. | Our terms of use require the other party to: • Use Personal Information solely for the purpose of the placement transaction. • Refrain from disclosing Personal Information without our consent. • Notify us immediately in the event of a privacy incident. |
| Another party in a Commercial Transaction | We may contract with a third party for a Commercial Transaction (sale or lease of business assets, merger, financing, or security to guarantee one of our obligations). | The contract obliges the other party to: • Use Personal Information solely for the purpose of concluding the Transaction. • Implement rigorous security measures. • Refrain from disclosing Personal Information without our consent. • Notify us immediately in the event of an incident. • Destroy Personal Information if the Transaction is not concluded. |
| Legitimate authorities | To comply with a court order, valid search warrant, or regulatory authority decision. | The applicable laws require these authorities to implement measures to respect and preserve the confidentiality of your Personal Information. We inform affected individuals of any access request to the extent permitted by law. |
| Our lawyers or attorneys | To ensure our defense or assert our rights. | Both applicable law and the engagement letters we sign require our lawyers to protect the confidentiality of all communications with them. |
| Google LLC (Google Tag Manager, Google Analytics) | Collection of anonymized navigation data and usage behaviour for analytical purposes (secondary use), with your prior consent. | IP address anonymization; data processed in accordance with Google's privacy policy; you may withdraw your analytical consent at any time via cookie preferences. |
| Google LLC (reCAPTCHA v3) | Anti-spam protection for forms: a behavioural score is calculated and transmitted to Google to distinguish humans from bots. | No personally identifiable information is transmitted for this purpose; subject to Google's privacy policy and terms of use. |
| OVH Servers Inc. (hosting) | Hosting of all platform data. | Hosting, storage, and processing exclusively within Quebec/Canada; OVH Servers Inc. is a Canadian legal entity; subcontracting agreement includes Bill 25 compliance clauses. |
Where?
In providing our services, we may disclose Personal Information outside Quebec, notably to developers supporting the platform. When doing so, we conduct a privacy impact assessment. Information is only disclosed if this assessment demonstrates adequate protection in accordance with generally recognized principles of personal information protection.
Important: No real data (including SIN and banking information) is accessible in development or testing environments. These environments operate exclusively with synthetic data and are isolated from production data.
Primary hosting
The Subcontractor hosting our data is OVH Servers Inc. Hosting, storage, and processing of our platform data takes place exclusively in Quebec, within the Canadian national zone.
Links to other services
Our platform includes links to third-party services, including for background checks. These services are not integrated into our platform. Their use is subject to the privacy policies and terms and conditions of their respective providers. We disclaim any responsibility in this regard.
Retention
We retain your Personal Information for the duration necessary to achieve the purposes for which it was collected, in compliance with applicable legal retention obligations, including:
- Tax and payroll data (including SIN): minimum 7 years (Tax Administration Act, MRQ; Employment Insurance Act);
- Contractual data with freelancers: duration of the relationship + 3 years (Civil Code of Quebec);
- Employment records: duration of the relationship + 2 years (Act respecting labour standards);
- Connection logs and technical data: 12 months;
- Deleted user accounts: deletion within 5 days of the request; residual technical traces (logs, backups) may remain for up to 12 months.
Upon expiration of applicable retention periods, Personal Information is securely destroyed or irreversibly anonymized.
Behavioural Analysis and Profiling
In providing our platform, we analyze certain usage behaviours (login frequency, types of shifts viewed, etc.) to improve our recommendations and the quality of the user experience. These analyses are performed on anonymized data and do not constitute profiling for the purpose of automated decisions having a legal or significant effect on you.
You may at any time object to this secondary use without affecting your access to the platform's services, by contacting our Privacy Officer at [email protected].
Your Rights
In accordance with the Act respecting the protection of personal information in the private sector (Bill 25), you have the following rights with respect to your Personal Information:
- Right of access: obtain confirmation that we hold Personal Information about you and receive a copy;
- Right of rectification: have inaccurate, ambiguous, or incomplete information corrected;
- Right to withdraw consent: withdraw your consent to the collection, use, or disclosure of your Personal Information by sending reasonable notice;
- Right to erasure / Right to be forgotten: request deletion of your Personal Information, subject to applicable legal retention obligations;
- Right to restriction of processing: request limitation of the use of your information, notably while its accuracy is being verified;
- Right to object: object to the processing of your Personal Information, particularly for secondary use for analytical or commercial purposes.
To exercise any of these rights, please contact our Privacy Officer at [email protected]. We will respond to any request within 30 days of its receipt, unless the law allows an extension of this period. In case of refusal, we will communicate the reasons, applicable legal provisions, and information about your remedies.
Privacy Officer
In accordance with the requirements of Bill 25, the Privacy Officer at Goodjob Corporation Inc. is the Vice-President, Technology.
For any questions, requests, or complaints regarding this Policy, please contact us at:
Modification
Goodjob reserves the right to modify the content of this Policy at any time. In the event of a material change, you will be notified by email or via the platform. The date of last update is indicated at the top of this document.
Changes will be deemed accepted as long as you continue to use our platform thereafter. We invite you to review this section of our website periodically.