This policy applies to Ralli's website and workforce platform. A job, payroll, employment, client-service or assignment document may provide additional notices for a specific relationship or transaction.
1. Scope and accountability
In this policy, “Ralli,” “we,” “us” and “our” refer to Ralli Workforce Inc., operating as Ralli, and the Ralli service. This policy applies to workers, worker applicants, employers, employer team members, prospective customers and website visitors in Canada.
Ralli's Privacy Officer is responsible for our personal-information practices and can be reached using the contact information at the end of this policy. We handle personal information in accordance with applicable Canadian privacy laws, which may include British Columbia's Personal Information Protection Act and the federal Personal Information Protection and Electronic Documents Act.
2. Information we collect
Account and contact information
Name, email address, phone number, account identifiers, login and account status, preferred language and communications with Ralli.
Worker profile and availability
Profile photo, approximate or provided location, service area, skills, work history, job preferences, availability, certifications, ratings and other information a worker adds to a profile.
Identity, eligibility and onboarding information
Date of birth, current residential/home address, emergency contact, government identification, work-authorization information, certifications and other documents needed to review eligibility or meet legal, payroll, safety and client requirements. For workers employed and paid through Ralli in Canada, we collect the worker’s Social Insurance Number (SIN) and applicable tax forms for payroll administration, statutory deductions, tax reporting and employment recordkeeping.
Employer and workplace information
Company and contact details, business number, billing information, worksite addresses, team-member roles, job descriptions, schedules, safety requirements and information about labour requests and assignments.
Payment, payroll and transaction information
Payment-method status, limited account or card details such as the last four digits, payroll instructions, timesheets, hours, rates, invoices, fees, refunds and transaction records. Payment providers may collect full payment-card information directly from you; Ralli generally receives a token, status and limited card details rather than the full card number.
Use, device and technical information
IP address, browser and device information, session and authentication data, pages or features used, timestamps, diagnostic information and security events. If a location feature is enabled, we may process location information with your permission to support nearby work, worksites or timekeeping.
3. How we collect information
We collect information directly from you when you register, complete onboarding, upload a document, post or accept work, track time, make a payment, contact us or otherwise use Ralli. We also collect information automatically from the website and service.
We may receive information from an employer or worker involved in an assignment, an invited employer team member, payment and identity-service providers, references, public or professional sources, or government and regulatory bodies where authorized by law. If you provide information about someone else, you must have authority to do so.
4. How we use information
We collect, use and disclose personal information for purposes a reasonable person would consider appropriate in the circumstances, including to:
- create, secure, administer and support accounts;
- review worker identity, eligibility, qualifications and onboarding status;
- match workers with suitable opportunities based on role, qualifications, location and availability;
- send and manage offers, assignments, schedules, reminders and service communications;
- help employers administer worksites, teams, time records and completed assignments;
- process payments, payroll, fees, refunds, tax records and related administration;
- support workplace safety, investigate incidents and resolve complaints or disputes;
- detect, prevent and investigate fraud, abuse, unauthorized access and other security risks;
- operate, maintain, measure and improve Ralli; and
- meet legal, regulatory, accounting, insurance and recordkeeping obligations.
Where consent is required, we ask for consent and allow it to be withdrawn, subject to legal and contractual limits and reasonable notice. We may also process information without consent where applicable law permits or requires it.
6. Service providers and processing locations
Ralli uses service providers that currently include Supabase for core database, authentication and file-storage services, Vercel for website hosting and delivery, and AI model providers such as Inception for optional support chat. Other providers may support communications, mapping, security or business operations as features are introduced.
Our core Supabase database, authentication and file storage are configured in Canada. Some providers and their subprocessors may process or access personal information in other provinces, the United States or other countries. When information is processed elsewhere, it may be subject to the laws and lawful-access rules of that jurisdiction. We use contractual and technical measures appropriate to the nature of the service and information.
Ralli Assistant support chat. When you submit a question, your message and a limited recent conversation are sent through Vercel AI Gateway to the AI model provider to generate a reply. These providers may process messages outside Canada under their applicable data-handling policies. Do not include identity documents, Social Insurance Numbers, banking information, passwords or sign-in codes. The assistant provides general guidance and has no access to your private onboarding documents or authority to approve accounts, change jobs or move money. Chat history is held in the current page rather than saved in Ralli’s database. We keep short-lived usage counters with hashed network identifiers to limit abuse. You can choose to email support@ralliinc.com instead.
7. Retention and deletion
We retain personal information only as long as reasonably needed for the purposes described in this policy and to meet legal, tax, payroll, accounting, safety, fraud-prevention and dispute-resolution obligations. Retention periods vary by record type, account status, assignment history and applicable law.
When information is no longer required, we delete it, anonymize it or securely restrict further use, as appropriate. Closing an account does not always result in immediate deletion: we may retain records where required or permitted by law, to complete a transaction, preserve legitimate business records, investigate abuse or resolve a dispute.
8. How we protect information
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information. These include role-based access controls, private file-storage rules, encrypted network connections, authentication controls, data minimization, restricted access to onboarding records and encryption for stored Social Insurance Numbers.
No website, transmission or storage system can be guaranteed completely secure. Users should choose a unique password, protect their sign-in information, sign out of shared devices and contact us immediately if they suspect unauthorized access. If a privacy or security incident creates a real risk of significant harm, we will investigate and provide notices as required by applicable law.
9. Your choices and privacy rights
Subject to applicable law and limited exceptions, you may ask to access personal information Ralli holds about you, request correction of inaccurate information, ask a question about our practices, challenge our compliance or withdraw consent for optional uses.
You can update certain account and profile information in Ralli. For access, correction, account closure or deletion requests that are not available in the website, email our Privacy Officer. We may need to verify your identity before acting. Withdrawing consent may mean we cannot provide a feature or continue an account where the information is necessary for that service.
You may opt out of promotional communications using the unsubscribe method provided. We may still send non-promotional messages needed to administer an account, assignment, payment, safety matter or legal obligation.
11. Age requirement
Ralli is intended for people who are at least 18 years old and legally able to work or enter business agreements. We do not knowingly collect personal information from children under 18. Contact our Privacy Officer if you believe a child has provided information to Ralli.
12. Changes to this policy
We may update this policy as Ralli, our providers or legal requirements change. We will post the updated policy with a new “last updated” date and provide additional notice where a change is material or consent is required.
13. Contact the Privacy Officer
Questions, concerns and access or correction requests can be sent to:
Privacy Officer, Ralli Workforce Inc.
privacy@ralliinc.com
British Columbia, Canada
If we cannot resolve a privacy concern, you may have the right to contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, depending on which law applies.