Sheaf Corporation Privacy Policy

Last Updated: May 1, 2025

Sheaf Corporation (“Sheaf”) have prepared this privacy policy to explain the manner in which we collect, use and disclose personal information, including personal information that we collect through sheaf.ca (the “Website”) and information we processes on behalf of our customers in connection with the use of our services.

Express Consent

By visiting our Website, clicking “I Consent” in the onboarding flow, or otherwise using our services, you expressly consent to our collection, use and disclosure of your personal information as described in this privacy policy. If you do not consent to this privacy policy, please do not use the Website or use any of our services. As noted below, this policy is subject to change from time to time and we recommend that you review the privacy policy each time you visit our Website or use our services to stay informed of our privacy practices.

Children under the Age of 13

Sheaf services are made available to users that are at least the age of majority in their province of residence. Our Website is not intended for children under 13 years of age. No one under age 13 may provide any information to the Website or receive our services. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website. If we learn we have collected or received personal information from a child under 13, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at the information provided in the “Contact Us” section of this privacy policy.

As a User, you may withdraw your consent by contacting info@Sheaf.ca. Please be advised that upon withdrawal, your Primary Administrator will receive a notification, and your access to the Sheaf product suites will be terminated.

Collection and use of personal information

Information we collect and use on behalf of our customers: Sheaf provides an online SaaS management platform through which our customers can input, track, and manage information related to their companies’ SaaS subscriptions, licenses, and contracts. Our core functionality includes monitoring usage of these subscriptions, tracking renewal dates, and providing analytics on license utilization to help customers optimize their tech stack investments..
Information required to provide the Platform: In order to provide the platform to our customers, we collect, use, and disclose information of individuals, including employees who have access to each of their company’s SaaS subscription. The information we collect, use, and disclose includes business contact information such as name, job title, and company email address, as well as SaaS subscription usage information. We use this information to provide SaaS management services on behalf of our customers. All personal information collected or derived from an employee may be shared with our customer. We do not use this information for any other purpose except as set out in this privacy policy, customer’s agreement with us, or as required or permitted by applicable laws.
Support Services: We may collect certain information (such as name, email address and nature of the inquiry) when we provide user support services by phone, email or within the platform, including to send you technical notices, updates, security alerts, information regarding changes to our policies, and support administrative messages.
Use of the Platform: We may monitor use of the platform by our customers’ employees or other authorized users in order to detect, investigate or prevent any actual or potential violation of our terms and conditions. We may also generate aggregated, non-identifiable data and use such information to monitor the performance, use and stability of the platform and to improve our services.

Information we collect and use through our Website, platform, and other interactions

Account Information: We collect and use customer information in order to create an account that can be used to access and use the platform. This information includes customer name, billing address and other business contact information (email addresses, phone numbers), as well as a username and password that you create. We use this information to create and administer user accounts, authenticate users, process payments, and manage access and control rights. We ask that you do not disclose your password to anyone, and you are responsible for keeping your password confidential. We will never ask you for your password in any unsolicited communication (such as letters, phone calls or email messages). If you become aware of any unauthorized access to or use of your account, you are required to notify us immediately.
Booking a Demo: If you request a free consultation or demo, we may collect your name, job title, and business contact information (including company email and phone number), and certain information about your company. We use this information to contact you and otherwise facilitate or provide you with your consultation or demo.
Marketing communications: We may send you communications (including by mail and email). We collect your email address as well as other information to help us tailor communications to you regarding our platform and other products and services that we believe are of interest to you. You can unsubscribe at any time by clicking the “unsubscribe” link included at the bottom of each email. Alternatively, you can opt-out of receiving email marketing communications by contacting us at the contact information provided in the “Contact Us” section below. Please note that you may continue to receive transactional or account-related communications from us.
Employment: If you apply for a job with us, we may collect certain personal information about you (such as information that would be contained in a resume, cover letter, or other employment-related materials). We use this information for the purpose of processing, evaluating and responding to your application.
Surveys: From time to time, we may offer our customers the opportunity to participate in one of our surveys. The information obtained through our surveys is used in an aggregated, de-identified form. We use this information to help us understand our users and to enhance our Website.
Contact Us: When you contact us with a comment, question or complaint through email, telephone, or the Website, you may be asked for information that identifies you, such as your name, email address, and a telephone number, along with additional information we need to help us promptly answer your question or respond to your comment. We may retain this information to assist you in the future and to improve our customer service and service offerings.

Business Customer Data

When Sheaf processes personal information on behalf of its business customers, we do so in accordance with the instructions of our customers as outlined in our Services Agreement. Sheaf acts as a data processor or service provider with respect to such information, and our customers remain responsible as data controllers for their compliance with applicable privacy laws.

Sharing of personal information

We do not sell or disclose personal information to third parties without your consent, except as set forth below or as required or permitted by law.

Legal and Compliance: We and our Canadian, U.S. and other foreign service providers may provide personal information in response to a search warrant to other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise may be required or permitted by applicable Canadian, U.S. or other law or legal process, which may include lawful access by U.S. or foreign courts, law enforcement or other government authorities. Your personal information may also be disclosed where necessary for the establishment, exercise or defence of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.
Sale of Business: We may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Sheaf Corporation or as part of a corporate reorganization or other change in corporate control.
Subsidiaries and Affiliates: We may disclose personal information that we collect or you provided as described in this privacy policy to our subsidiaries and affiliates.

Information collected through automatic data collection technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, as described in this section.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). For information about how you can opt out of behavioural tracking from many providers, see Choices About How We Use and Disclose Your Information.

The Website does not respond to do not track signals.

Visiting our Website: We collect the IP (Internet protocol) addresses of all visitors to our Website and other related information such as page requests, browser type, operating system and average time spent on our Website. We use this information to help us understand our Website activity and to monitor and improve our Website.
Cookies: Our Website uses a technology called “cookies.” A cookie is a tiny element of data that our Website sends to a user’s browser, which may then be stored on the user’s hard drive so that we can recognize the user’s computer or device when they return. You may set your browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies from our Website, you may not be able to take advantage of all of the Website features.
Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
Analytics: We may also use a third party such as Google Analytics to help us gather and analyze information about the areas visited on the Website (such as the pages most read, time spent, search terms and other engagement data) in order to evaluate and improve the user experience and the Website. For more information or to opt-out using the Google Analytics opt-out browser add-on, see “How Google uses data when you use our partners’ sites or apps” and “Google Analytics and Privacy.”
Biometric Data: We do not use, store, or retain any biometric data.
Third Party Links: Our Website may contain links to other websites that Sheaf does not own or operate. We provide links to third party websites as a convenience to the user. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy policies, notices and terms of use. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose, secure and otherwise treat personal information. We encourage you to read the privacy policy of every website you visit.

Safeguards and retention

Safeguarding your personal information is very important to us. We have implemented reasonable administrative, technical and physical measures in an effort to safeguard the personal information in our custody and control against theft, loss and unauthorized access, use, modification and disclosure. We restrict access to personal information on a need-to-know basis to employees and authorized service providers who require access to fulfill their job requirements. While we make our best efforts to protect this information, data breaches, though unlikely, may still occur.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws or contractual obligations. For customer account information, we generally retain the information for the duration of the customer relationship plus a reasonable period thereafter for record-keeping purposes. For personal information we process on behalf of our customers, we retain such information in accordance with our customers’ instructions and our contractual obligations, generally for the duration of our service agreement with the customer plus a reasonable period thereafter for compliance and business continuity purposes. Our record retention processes include destroying information once retention is no longer required or prescribed by law by deleting it from the cloud or destroying physical information. This retention process does not apply to personal information that has been aggregated or anonymized such that it does not identify you personally.

Data Breach Notification

In the event of a security breach that affects your personal information, we will take reasonable steps to investigate the situation and, where appropriate, notify affected individuals in accordance with applicable laws. If the breach involves information we process on behalf of our customers, we will notify the affected customers in accordance with our contractual obligations and applicable laws.

Cross-Border Transfers

Sheaf is based in Canada and may process personal information in Canada, the United States, or other countries where we or our service providers operate. If you are located outside of Canada, your information may be transferred to, stored, and processed in a country different from your country of residence, which may have different data protection laws. By using Sheaf’s services, you consent to such transfers, storage, and processing. When we transfer personal information across borders, we implement appropriate safeguards to ensure your information is protected.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
Promotional Offers from the Company. If you do not wish to have your contact information used by us to promote our own products or services, you can unsubscribe at any time by clicking the “unsubscribe” link included at the bottom of each email or by contacting us at the contact information provided in the “Contact Us” section below. Please note that you may continue to receive transactional or account-related communications from us after you unsubscribe.

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

Right to Access: You may request access to the personal information we maintain about you.
Right to Correction: You may request that we correct inaccurate or incomplete personal information.
Right to Deletion: You may request that we delete your personal information in certain circumstances.
Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
Right to Opt-Out: You may opt-out of certain data processing activities, including the sale or sharing of your personal information (if applicable).

To exercise these rights, please contact us using the information in the “Contact Us” section. We may request certain personal information to verify your identity before fulfilling your request.

If we receive a request from an individual to access or update personal information we maintain on behalf of a customer, we will direct that individual to the relevant customer. We will assist our customers wherever possible in responding to individual access requests. Subject to applicable law, you may have the right to access, update and correct inaccuracies in your personal information in our custody or control. You may request access, updating and corrections of inaccuracies in your personal information in our custody or control by emailing or writing to us at the contact information set out below. We may request certain personal information for the purpose of verifying the identity of the individual seeking access to his or her personal information records.

Updates to this privacy policy

We may update this privacy policy periodically to reflect changes to our privacy practices. We encourage you to periodically review this page to ensure you are familiar with those changes. We will indicate at the top of this privacy policy when it was most recently updated.

Compliance with Privacy Laws

Sheaf complies with applicable privacy laws in the jurisdictions where we operate, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and applicable state privacy laws in the United States. Depending on your location, you may have specific rights under these laws, as described in the “Your Privacy Rights” section of this policy.

If you have any questions or comments about this privacy policy or the manner in which we or our service providers treat your personal information, or to request access to our collection of your personal information, please contact us at:

Hello@sheaf.ca