Privacy Policy — On Call Scheduler
Last updated: November 14, 2026
Infocentric Inc. ("Infocentric", "we", "us"), 83 McCarty Crescent, Markham, Ontario, L3P 4R5, operates On Call Scheduler (the "Service") — a web application that helps medical and other organizations build, publish, and manage on-call and shift schedules.
This Privacy Policy explains how we handle personal information when you use the Service. It is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where an organization that uses the Service is a health information custodian under Ontario's Personal Health Information Protection Act (PHIPA), to describe our role as that organization's service provider.
Contact: Support@thisisps.com
1. What we store (and what we don't)
The Service stores operational scheduling information only: accounts, contact details, availability, restrictions, shift assignments, and schedule configuration. It is not a medical records system. It is not designed to store personal health information, patient information, or clinical records, and you must not enter patient information into the Service. If an organization considers any scheduling information it submits to be health information under PHIPA, that organization remains the health information custodian and Infocentric acts solely as its service provider, processing the information on its instructions and for no other purpose.
2. Information we collect
Account and profile information — name, email address, phone number, and job/role label. Collected when an administrator adds you to a schedule or when you create your account.
Authentication information — sign-in credentials and identity data are managed by Clerk, our authentication provider. If you sign in with Google, we receive your name, email address, and Google account identifier from Google.
Scheduling information — your availability and blackout dates, shift restrictions, schedule assignments (which shifts you are assigned), schedule shares/weights, and schedule configuration (dates, times, time zone).
AI-generated schedule proposals — during schedule generation, the Service sends scheduling inputs (shift slots, member names, availability, and constraints) to an external AI model service (Z.ai, model GLM), which uses them only to propose a draft assignment of shifts. An administrator reviews and approves any draft before it is published. This is a general use of AI for scheduling logic only — no other purpose.
Google Calendar information — if you connect your Google Calendar, we access it only as follows:
- We receive an OAuth access/refresh token (managed by our authentication provider, Clerk) with the scopes
calendar.eventsandcalendar.readonly. - We read only the list of your calendars (names and IDs) so you can choose which calendar to sync.
- We create, update, and delete only the events our Service created on the calendar you select. Each event we create is tagged so we can identify it. We do not read, store, or use the content of your other calendar events, and we do not use Calendar data for advertising.
Notification and delivery information — email address for transactional notifications (schedule published, availability flags, trade offers), sent through our email provider (Sender.net).
Technical information — standard server logs (IP address, timestamps, request details) kept by our hosting provider for security and operations.
We do not knowingly collect information about individuals under 16. We do not use personal information for advertising, and we do not sell personal information.
3. How we use information
- To provide the Service: accounts, schedules, availability, generation, publishing, trades, notifications, and calendar sync.
- To operate security: authentication, session management, abuse prevention, service logs.
- To communicate: transactional service emails related to your schedules.
- To improve the Service: aggregated, de-identified usage analysis.
We use personal information only for the purposes set out here or as required by law, and we obtain meaningful consent (or act as your organization's service provider) for each purpose.
4. Disclosure to service providers (sub-processors)
We disclose personal information only to the following providers, each bound by contract to protect it and use it only on our instructions:
| Provider | Service | Location |
|---|---|---|
| Neon | Database hosting (encrypted Postgres) | AWS, US East (Ohio) |
| Vercel | Application hosting and delivery | Global CDN, United States |
| Clerk | Authentication and OAuth token management | United States |
| Sign-in with Google; Google Calendar API | Global | |
| Sender.net | Transactional email delivery | European Union |
| Z.ai | AI schedule-proposal model (during generation only) | Global (cloud AI service) |
Cross-border transfer: information is stored and processed on servers located in the United States and Canada. Under PIPEDA we ensure these transfers are protected by contractual, technical, and organizational measures offering a comparable level of protection, and under PHIPA such information is handled in accordance with the organization's instructions.
Legal disclosure: we may disclose information where required by law, court order, or to protect the rights, property, or safety of others, in which case we notify the affected organization unless legally prohibited.
5. Google Calendar data — Limited Use disclosure
On Call Scheduler's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Retention
- Active scheduling data is retained for as long as your organization's account is active.
- Deleted items (a schedule, a member, an assignment) are first moved to a recoverable "soft-deleted" state and are then retained indefinitely in that state until you or your organization request permanent deletion or the account is closed, at which point they are purged.
- Connected-calendar records and sync mappings are deleted when you disconnect your calendar or close your account; events we created on your calendar can be removed on request (see §7).
- Server logs are retained by our hosting provider for a limited operational period.
7. Your rights (access, correction, deletion)
PIPEDA and PHIPA give you the right to access, correct, and withdraw consent to the collection, use, and disclosure of your personal information, subject to legal exceptions.
- Schedule content (availability, restrictions, assignments): manage directly in the Service, or contact your organization's administrator.
- Access, correction, deletion, or calendar-event removal requests: email Support@thisisps.com. We respond within 30 days. Requests about information an organization considers health information may be directed to us or to that organization as custodian.
- Withdraw consent: you may disconnect your Google Calendar at any time from Settings (which stops all calendar syncing), and you can ask us to delete the events we created on your calendar.
- Complaints: you may complain to us at Support@thisisps.com, and to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Information and Privacy Commissioner of Ontario (ipc.on.ca) if you are not satisfied with our response. We never retaliate against a complainant.
8. Security
The Service protects information with: TLS encryption in transit; encryption at rest at the database layer; role-based access (schedule data is visible to schedule members; administrative functions are restricted to schedule administrators); OAuth tokens stored and managed by Clerk rather than by us; least-privilege database roles; and audit logging of administrative access. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
9. Changes to this policy
We will post any changes here and update the "Last updated" date. If a change materially affects how we handle personal information already collected, we will notify your organization's administrators (and, where required, obtain fresh consent) before it takes effect.
10. Contact
Infocentric Inc. 83 McCarty Crescent, Markham, Ontario, L3P 4R5 Email: Support@thisisps.com