Privacy

Last updated 27 September 2026

toller is owned and operated by Aodhan Murphy Law Inc. (“we”, “us”). This policy explains how we handle personal information in connection with the application at tollerapp.ca, its organisation addresses, and this website. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law.

Our two roles

Organisations subscribe to toller and put their own information into it. For that information, the organisation is responsible, and we process it on its behalf and on its instructions. If you are a client, customer or contact of an organisation that uses toller, please direct privacy questions about your information to that organisation first.

For the information we collect to run our own business, such as account details, billing contacts and messages sent to us, we are responsible.

What we collect

  • Account information: names, email addresses and roles of the people an organisation invites.
  • Organisation content: the information an organisation and its users choose to store.
  • Connected account data: information an organisation authorises us to read from an account it connects.
  • Technical information: log records, IP addresses, browser and device details, needed to operate and secure the service.
  • Correspondence: what you send us.

How we use it

To provide, maintain, secure and support the service; to communicate with the organisations and people who use it; and to meet our legal obligations. We do not sell personal information. We do not use one organisation’s information to serve another.

Google user data

An organisation may connect its own Google account. You choose the account, and Google shows you the exact permissions before you agree. We ask only for the permissions your organisation’s configuration needs, one at a time, and where one has not been granted, toller cannot reach it.

Analytics, read onlyReporting figures for the property you name
Search Console, read onlyReporting figures for the site you name
Send emailSending a message as your own address, at your instruction
Read email, read signatureMessages relating to a record you hold
CalendarReading and creating events
DriveDocument storage

We do not sell what we read, we do not use it to train a model, and we do not share it with another organisation using toller. toller’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we use Google user data only to provide features the user can see and has asked for; we do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or sale with notice to you; we do not use it for advertising; and no person reads it unless you give permission, it is needed for security or to comply with law, or it has been aggregated and made anonymous for internal operations. Reporting figures read from a connected account are used to show the screen you asked for, and no copy is stored.

Disconnect a Google account at any time from within toller. Disconnecting deletes the stored credential. You can also remove access from your Google account settings.

Information sent through an organisation’s website

Some organisations use toller to receive messages sent through their own websites. The organisation is responsible for that information and we process it for them. We record what you send and technical details of the visit, such as your IP address and the page you came from.

Service providers

We use service providers for hosting, email delivery and similar services, under written terms that require them to protect the information and use it only to provide their service to us. A current list is available on request.

Where it is kept

Organisation content is stored in Canada. Some service providers may process information outside Canada, including in the United States. Information processed in another country is subject to that country’s laws.

Security

Information is encrypted in transit and at rest. Each organisation’s data is separated from every other organisation’s, access is limited to people who need it, and connected credentials are held encrypted. If a breach creates a real risk of significant harm, we will notify affected organisations and individuals and the Privacy Commissioner of Canada as the law requires.

How long we keep it

Organisation content is kept for as long as the organisation’s subscription lasts and is then deleted or returned under its agreement. Connected credentials are kept until the connection is removed. Other information is kept only as long as needed for the purpose it was collected for, or as the law requires.

Your rights

You may ask to see the personal information we hold about you, ask us to correct it, and withdraw consent, subject to legal and contractual limits. Where an organisation is responsible for your information, we will refer your request to it and help it respond. toller is not directed at children.

Changes

We will post any change here and update the date above. A material change is also sent to the organisations that use toller.

Contact

Our privacy officer: privacy@tollerapp.ca. For anything else, write to support@tollerapp.ca or see Support. If we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada.