Last updated: April 14, 2026
ABA Timesheet ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
We collect the following categories of personal information to operate the platform:
Identity Information: Full name, email address, phone number, and home address.
Payroll & Tax Information: Social Insurance Number (SIN), hourly rate, pay dates, and bank account details (when connected via Plaid or Stripe).
Work Records: Timesheet entries including session dates, client codes, service codes, hours worked, start/end times, travel kilometres, and expense receipts.
Account Information: Login credentials, role (e.g. therapist, BCBA, admin), and account activity timestamps.
Technical Information: Browser type, IP address, and usage logs for security and diagnostic purposes.
Your information is used solely for the following purposes:
We take the security of your personal and financial information seriously.
Encryption: All data is encrypted in transit using TLS/HTTPS and at rest using industry-standard encryption.
Access Controls: Sensitive payroll data (SIN numbers, home addresses, hourly rates) is only accessible to authorized admin accounts. Regular employees can only access their own records.
Banking Integrations: When using Plaid, employees connect their bank accounts through Plaid's regulated open-banking flow. Raw account numbers are never stored on our servers. Stripe payouts are processed through Stripe's PCI-compliant infrastructure.
Data Retention: Timesheet and payroll records are retained for a minimum of 7 years to comply with Canadian tax and employment record-keeping requirements.
We do not sell, trade, or rent your personal information to third parties. Information may be shared only in the following limited circumstances:
Your Organization: Administrators within your ABA organization can access your timesheet data and payroll records for the purpose of payroll processing and compliance.
Payment Processors: Plaid and Stripe receive limited financial data necessary to facilitate payroll disbursements. Both services are bound by their own privacy policies and security standards.
Legal Obligations: We may disclose information if required by law, regulation, or court order, including Canada Revenue Agency (CRA) requirements.
Service Providers: Trusted third-party service providers (e.g. email delivery, cloud hosting) may process data on our behalf under strict confidentiality agreements.
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the following rights:
To exercise any of these rights, please contact us at support@abatimesheet.com.
We use essential cookies and session tokens to authenticate users and maintain secure sessions. We do not use advertising or tracking cookies. No third-party analytics or ad networks are embedded in the platform.
ABA Timesheet is a professional platform intended for use by adults (18+) employed by ABA therapy organizations. We do not knowingly collect personal information from individuals under the age of 18.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of material changes by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or how your personal information is handled, please contact our privacy officer: