Privacy Policy

This policy explains what personal information THM Fabrication ("THM") collects through the THM Fabrication app (the "App") at app.thmfabrication.com, why, and how it is protected. THM is subject to Alberta's Personal Information Protection Act and Canada's PIPEDA.

1. Who this covers

• THM employees and contractors who use the App to record time, field work and purchases.
• THM office and accounting staff who use it for estimating, billing and payroll.
• Client representatives who review and sign field tickets through an emailed link.
• Vendor contacts whose details appear on purchase orders.

2. What we collect

• Identity and contact: name, work email, phone, job title, trade and employer.
• Employment records: hours worked, travel and living-out allowance, pay rates, worker type, safety certification and orientation expiry dates.
• Field records: field tickets, daily reports, toolbox meeting attendance, site photos, equipment use and purchase orders.
• Signatures: drawn or uploaded signatures on field tickets and toolbox meetings.
• Financial records: estimates, change orders, invoices, vendor bills, payments and account balances relating to THM's projects.
• Technical: login events, actions taken in the App (audit log), device and browser type.

We do not collect payment card numbers, bank account numbers, social insurance numbers or government ID through the App.

3. Why we collect it

• To plan and run THM's field work and record what was done, by whom, and when.
• To bill clients accurately and support those bills with signed records.
• To pay employees and contractors correctly.
• To meet safety, quality and contractual record-keeping obligations.
• To secure the App and investigate misuse.

We use personal information only for these purposes or as required by law.

4. QuickBooks Online

THM keeps its books in Intuit QuickBooks Online. With authorisation from a THM administrator, the App connects to THM's QuickBooks company through Intuit's API to:

• send invoices created in the App to QuickBooks;
• read invoice, customer payment, vendor bill and account balance data so that receivables, payables and cash position in the App match the books.

The App requests accounting scope only. Connection tokens are stored on THM's servers, encrypted at rest, and are never shared with anyone outside THM. A THM administrator can disconnect the App from QuickBooks at any time, which revokes its access. QuickBooks data is used solely for THM's own accounting and is not shared with third parties. Intuit's handling of data inside QuickBooks is governed by Intuit's own privacy policy.

5. Where it is stored and who can see it

• The App runs on Vercel and stores its data with Supabase (PostgreSQL and file storage). Both are contracted service providers with their own security programs.
• Email is sent through Resend. Weather data comes from Open-Meteo using project location only.
• Access inside THM is limited by role. Field staff see their own assigned projects; financial and payroll data is restricted to administrators and accounting staff.
• THM's external accountant may access financial records for bookkeeping and tax purposes.
• Signed field tickets, daily reports and invoices are shared with the client the work was performed for. They contain names and hours of THM personnel on that job but not pay rates.

We do not sell personal information, and we do not share it with anyone else except where the law requires.

6. Security

Data is encrypted in transit and at rest. Access requires an individual login. Files are held in private storage and served only through short-lived signed links. Administrative actions are logged. No system is perfectly secure, and we will notify affected people and regulators as the law requires if a breach creates a real risk of significant harm.

7. Retention

Field, billing and payroll records are business records and are kept for at least seven years to meet tax and contractual obligations. Account credentials are removed when an account is closed. Client signing links expire 30 days after they are sent.

8. Your rights

You may ask what personal information THM holds about you, ask for it to be corrected, or raise a concern about how it has been handled. Write to ap@thmfabrication.com. We will respond within 45 days. If you are not satisfied, you may contact the Office of the Information and Privacy Commissioner of Alberta.

9. Changes

We may update this policy. The date at the top shows the current version. Material changes will be announced in the App.

10. Contact

THM Fabrication, Alberta, Canada. Email: ap@thmfabrication.com.