Privacy Policy

Last updated 8 September 2026

Tarshal is operated by Monolith®, a design studio in Montréal, Québec. This policy describes what Tarshal collects, where it is kept, who can see it, and what happens when you stop using it. It covers the application at app.tarshal.com and this site.

Who the information is about

Two groups, and we hold different things about each:

• People who use Tarshal — staff of a company that holds an account.
• Clients of that company — the businesses and contacts an estimate or invoice is addressed to. They never sign in; their details are entered by the company they work with.

What we collect

From people who use Tarshal:

• Name, work email address, job title and profile photo.
• Employment details recorded by their employer — hiring date, salary, vacation entitlement, contracts and signed agreements. These are entered by the company, not by us.
• Time entries: hours, dates, the project and activity, and any note written against them.
• Expenses and the receipts submitted with them.

From a company’s own records: its clients and contacts, projects, estimates, invoices and payments.

We use no advertising trackers, build no profiles for marketing, and sell information to nobody.

Where it is kept

Application data is stored in a PostgreSQL database hosted by Supabase in Canada, in the Montréal region. The application itself runs on Vercel and is served from the United States. Information is therefore processed in the United States while being stored in Canada.

Who can see it

Access is enforced by the database on every read, not only by the interface. A person sees their own time and expenses; managers and owners see what their role permits; salary and internal cost rates are restricted to owners and super administrators and are never sent to anyone else’s browser. We do not look at a customer’s data except where they ask us to for support, or where the law requires it.

Services we rely on

• Supabase — the database, and sign-in.
• Vercel — application hosting.
• Google — sign-in, and calendar access where a person connects it.
• Stripe — card payments on invoices, where a company enables them. Card details are handled by Stripe and never reach us.
• Intuit — QuickBooks Online, where a company connects its books so invoices and payments can be copied across.
• Anthropic — where a person connects Claude to log time by asking. That connection acts strictly as them, with their permissions and no others.

Each connection is made deliberately, by the company or by the person, and each can be ended at any time from Integrations.

Connected accounts, and disconnecting

When a service is connected we store the tokens needed to talk to it and nothing more. Disconnecting revokes the grant with the provider and deletes the tokens we hold. We read a connected QuickBooks company only for the customers, items, invoices and payments needed to copy documents across, and we read calendar events only to show them on that person’s own timesheet.

How long it is kept

Business records — time, estimates, invoices and expenses — are kept for as long as the company keeps its account, because they are that company’s books. Archiving a person ends their access but keeps the work they did, since removing it would silently change historical totals. On request we will export or delete a company’s data.

Your rights

Under Québec’s Act respecting the protection of personal information in the private sector and Canada’s PIPEDA, you may ask what we hold about you, ask for it to be corrected or deleted, withdraw consent for a connected service, and complain to the Commission d’accès à l’information du Québec. Where the information was entered by your employer, ask them first — they control it and we act on their instructions.

Security

Traffic is encrypted in transit. Credentials for connected services are held server-side and are useless on their own, because redeeming them needs secrets that are never stored in the database. Every read of every record is checked in the database itself.

Changes

If this policy changes materially we will say so here and update the date above.

Contact

Questions about this policy, or a request about your own information: