Who we are#
FrontLine Software Inc. is a Canadian corporation headquartered in Prince Edward Island. We build the FrontLine platform — a multi-tenant workforce management system for Business Process Outsourcing operators. This Privacy Policy applies only to the public marketing site at frontlinehq.io.
Privacy contact: privacy@frontlinehq.io. We answer privacy requests within 30 days, the timeline set by the Personal Information Protection and Electronic Documents Act (PIPEDA).
Scope of this policy#
This policy covers your visit to frontlinehq.io, our subdomains used for marketing (e.g. demo.frontlinehq.io), and information you submit through forms on those sites — including the Early Access application and BPO Margin Calculator.
Personal information you or your employer's tenant administrator put into the FrontLine platform (employee records, schedules, QA evaluations, national identifiers, etc.) is processed under your organization's Master Subscription Agreement and Data Processing Addendum with FrontLine. We act as a data processor for that data, not a controller, and we do not use it to train models, run marketing, or for any purpose outside what your organization has authorized.
What we collect#
Visitor analytics. Google Analytics 4 records anonymized page views, traffic sources, device type, and approximate geographic region (city-level). We do not collect a precise IP address or persistent advertising identifiers. You can decline analytics via your browser's Do Not Track signal or a tracker-blocking extension — the site works either way.
Form submissions. The Early Access form asks for your name, work email, company name, role, BPO size band, operating countries, current tools, modules of interest, and an optional message. Anyone using the BPO Margin Calculator can voluntarily submit their inputs along with the same identifying fields to start a sales conversation.
Conversational notes. If you book a demo, attend a discovery call, or exchange email with our team, we record the substance of that conversation in our CRM so we can follow up sensibly.
Cookies. We set a small number of cookies: a session cookie that remembers your locale (en or fr), the Google Analytics cookies (`_ga`, `_ga_*`), and — if you sign in to the candidate portal or platform — authentication cookies. We do not set advertising or cross-site tracking cookies.
How we use it#
Respond to your inquiry. The most common use is the one you'd expect: someone fills the Early Access form, we read it, and we reply.
Assess product fit. We use the company size, operating countries, current tools, and modules of interest to decide whether a sales call is worth your time — and ours.
Improve the site. Aggregated analytics tell us which pages are useful and which aren't. We never connect those aggregates back to a named visitor.
Transactional email. If you ask for the calculator results or the early-access confirmation, we email it. We do not send marketing newsletters from the website unless you've explicitly subscribed to one.
Legal basis for processing#
Under PIPEDA (Canada) and Quebec's Law 25, we rely on a combination of express consent (when you fill in a form) and reasonable purposes / legitimate interests (when you simply browse the site). Where Quebec residents are involved, you may withdraw consent at any time by emailing privacy@frontlinehq.io.
Under the GDPR (visitors reaching the site from the EU/EEA), we rely on Article 6(1)(b) — performance of pre-contractual measures at your request — for form submissions, and Article 6(1)(f) — legitimate interest in running the marketing site — for analytics. We do not process special-category data through the marketing site.
Under the CCPA/CPRA (California residents), we treat marketing site data as “personal information” and do not sell or share it for cross-context behavioral advertising.
Third parties we share with#
Google Analytics 4. Hosted by Google in the United States. We've enabled IP anonymization and disabled advertising features. You can opt out using Google's opt-out browser add-on.
Email transport. Transactional emails (replies, confirmations) are sent through Amazon Simple Email Service (Amazon SES) in the `ca-central-1` region. The email content is the content of your message; metadata (delivery, bounce, spam) is logged for 90 days.
Hosting. The marketing site is hosted in Canada on infrastructure operated by FrontLine Software Inc. There is no third-party content-delivery network with access to the request body of your form submissions.
We do not resell, license, or transfer personal information to advertising networks, data brokers, or unrelated third parties.
Data residency#
Marketing site data — form submissions and analytics events — is stored in Canada. Google Analytics 4 data is processed by Google in the United States; we cannot move that to Canada without changing analytics vendors.
Platform data — anything inside your FrontLine tenant — lives in the data residency zone your organization chose at provisioning (NA-CANADA or NA-US in Wave 1.5). The platform does not move tenant data across zones.
How long we keep it#
Early Access form submissions and calculator-share submissions: 24 months from your last contact with us, then purged. If you ask us to delete sooner, we do.
Sales-conversation notes in our CRM: 36 months from your last contact, then archived for 24 months in a restricted-access bucket, then deleted.
Analytics: Google Analytics retains user-level data for 14 months by default; aggregate reports persist indefinitely.
Transactional email logs: 90 days for delivery metadata; the email body is not retained beyond the send.
Your rights#
You can ask us to: confirm what personal information we hold about you; correct it if it's wrong; delete it; export it in a portable format; restrict how we use it; or withdraw a consent you previously gave.
To exercise any of these rights, email privacy@frontlinehq.io with enough information to verify your identity (typically the work email you used to contact us). We respond within 30 days under PIPEDA. Under the GDPR or CCPA, we respond within the timelines required by those laws (one month under GDPR, 45 days under CCPA — extendable by 30 days if the request is complex).
If you believe we've mishandled your personal information, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), or — if you're in the EU/EEA — your national data protection authority.
Security#
The marketing site runs on HTTPS only (TLS 1.2+). Form submissions are transmitted over TLS and stored in an encrypted Canadian-region database. Access to that database is limited to a small number of named employees on a least-privilege basis and logged.
Platform security details — encryption at rest with AES-256, multi-tenant Row-Level Security, audit-event immutability, optional MFA gates — are documented in our Security Posture spec available on request to customers.
Children#
FrontLine is a business-to-business product. We do not knowingly collect personal information from anyone under 16. If you believe a minor has submitted information to us, email privacy@frontlinehq.io and we will delete it.
International visitors#
If you are outside Canada and use this site, your information is transferred to and processed in Canada. Canada is recognized by the European Commission as providing an adequate level of data protection (Commission Implementing Decision 2002/2/EC). We do not transfer marketing-site personal information outside Canada except as needed to run Google Analytics 4 (United States) and Amazon SES (Canada).
Changes to this policy#
We may revise this policy from time to time. Material changes will be flagged in an in-page notice and, where we have an email address for you, communicated directly. The “Last updated” date at the top of this page always reflects the current version. You can view prior versions on request.
How to reach us#
Privacy questions, rights requests, or complaints: privacy@frontlinehq.io.
Postal address: available on request to the same email. FrontLine Software Inc. is registered in Prince Edward Island, Canada.