Privacy Policy
Last updated: September 23, 2026
CarpoolWork is a service operated by North American Technologies and AI Solutions Inc. ("we"), headquartered at 151 Alma Street, Oshawa, Ontario L1G 2C3, Canada. This policy explains what personal information we collect, why, where it is hosted, and what your rights are. It is written to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, voluntarily, Quebec's Law 25.
1. Privacy officer
Magloire Pondi Simb, President of North American Technologies and AI Solutions Inc.. For any question or request: support@carpoolwork.ca.
2. What we collect
We only collect what the service needs:
- Account: name, email address, preferred language, password (hashed), phone number if you choose to provide it.
- Employer membership: employer, work site, membership status, code, link or QR code used.
- Commute profile (optional, entered by you): home postal area (first 3 characters of the postal code), approximate home location, usual arrival and departure times, commute days, driver or passenger preference.
- Carpool activity: carpool groups, trips logged (date, group, estimated distance).
- Technical data: IP address at consent, session cookie, security logs.
- Employers: manager contact details, organization name and region, invoices.
3. Why we use it
- To create and secure your account and link you to your employer's program.
- To suggest colleagues who live nearby and arrive at the same time. Your exact location is never shown to others: only an approximate distance band and postal area are displayed.
- To measure participation. Your employer sees aggregate figures (active participants, carpools, kilometres and CO₂ avoided) and the list of members of its program with their status; it does not see your address or home coordinates.
- To invoice the employer on the number of active participants in the month. No payment data is collected from employees.
- To send you the emails the service needs (address confirmation, invitation, weekly reminder). You can ask to stop reminders at any time.
- To prevent abuse and meet our legal obligations.
4. What we do not do
- We do not sell or rent your information.
- We use no advertising cookies or third-party trackers; only essential cookies (session, security, language).
- We do not verify members' identity, driver's licence or insurance, and we keep no identity documents.
- We do not track your location in real time during trips.
- No payment goes through the platform between coworkers.
5. Where your data is hosted
We rely on infrastructure providers whose servers are located in the United States: Vercel (application hosting), Neon (database, AWS US region) and Resend (email delivery). Your information is therefore stored and processed outside Canada and may be subject to the laws of that country. We keep a register of these transfers and use these providers only to operate the service, under contract.
6. Retention
Your data is kept as long as your account exists. On a deletion request, your account is closed immediately and your personal information is anonymized within 30 days: name, email and phone replaced by anonymous values, commute profile and home coordinates erased, group memberships removed. Aggregate participation statistics (without names) and consent records are kept for accountability. Employer invoices are kept as required by tax law.
7. Your rights
You may at any time access your information, obtain a copy, correct it, withdraw consent or request deletion of your account. Write to support@carpoolwork.ca from your account's email address; we reply within 30 days. You may also file a complaint with the Office of the Privacy Commissioner of Canada.
8. Security
Encrypted connections (HTTPS), hashed passwords, lockout after repeated attempts, restricted and logged administrative access. No system is infallible: report any incident to the address above.
9. Changes
Material changes are announced on the site and, where needed, by email. The date at the top of the page indicates the version in force.