Privacy Policy

FORTRESS WORKSPACE

A product of Fortress Technical Solutions Inc.

Effective Date: June 1, 2026

fortressworkspace.ca | support@fortresstechsolutions.ca

Your privacy matters to us — and not just as a legal obligation. Fortress Workspace was built specifically to protect your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have. It applies to all subscribers and visitors to fortressworkspace.ca.

Fortress Technical Solutions Inc. (“Fortress,” “we,” “us,” or “our”) is the operator of Fortress Workspace and the organization responsible for your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. The Short Version

We know privacy policies can be long. Here is the plain-language summary:

We collect your name, email address, and payment information to run your subscription.
We collect basic device and enrollment data to manage your MDM profile.
We do not access your personal photos, personal messages, personal contacts, personal email, personal browsing history, or personal apps. Ever.
We do not sell your personal information to anyone.
We do not use your information for advertising.
You can ask us to access, correct, or delete your information at any time.

The sections below explain each of these points in full detail.

2. Information We Collect

2.1 Information You Provide to Us

When you subscribe to Fortress Workspace, we collect:

Your name and email address, used to create and manage your account and send you service communications
Payment information (credit or debit card details), processed securely by our payment processor; we do not store your full card number on our systems
Any information you include when you contact our support team

2.2 Information Collected Automatically Through the Service

When you enroll your device in Fortress Workspace, our mobile device management (MDM) platform collects limited technical information necessary to deliver the Service:

Device identifiers (such as device model, operating system version, and MDM enrollment status)
Enrollment and unenrollment events
Whether managed apps are installed and active on your device
VPN connection data processed through Cloudflare WARP, including connection timestamps and aggregate data volumes, used for service delivery and security monitoring

This technical data is used solely to manage your enrollment, ensure the Service is functioning correctly, and provide support.

2.3 Information We Do Not Collect

Fortress Workspace is architected so that we have no visibility into your personal device activity. We do not collect, access, or process:

Your personal photos or videos
Your personal text messages or iMessages
Your personal email accounts or their contents
Your personal contacts
Your personal browsing history or activity in non-managed apps
Your personal app usage or data
Your physical location

This is not just a policy commitment — it reflects how the technology works. The MDM enrollment type used by Fortress Workspace (User Enrollment on iOS, Work Profile on Android) is specifically designed to create a separation between the managed business environment and your personal device. We have access only to the managed side.

2.4 Website Visitors

When you visit fortressworkspace.ca, our website host (Wix) may collect standard web analytics data such as your IP address, browser type, pages visited, and time spent on the site. This data is used to understand how visitors use the site and to improve it. It is governed by Wix’s own privacy policy.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

To process and manage your subscription, including billing and renewal
To deliver the Service — enrolling your device, pushing managed apps, and maintaining your MDM profile
To send you service communications, including setup instructions, receipts, renewal notices, and support responses
To provide technical support when you contact us
To notify you of changes to the Service, these Terms, or this Privacy Policy
To comply with our legal obligations under applicable Canadian law

We do not use your personal information for marketing to third parties, advertising profiling, or any purpose beyond delivering and supporting the Service.

4. Who We Share Your Information With

We do not sell your personal information. We share it only as described below.

4.1 Service Providers

We use the following third-party providers to deliver the Service. Each receives only the information necessary for their specific role:

Cloudflare (cloudflare.com) — provides the WARP per-app VPN. Cloudflare processes VPN connection data in accordance with their privacy policy and Zero Trust data processing terms.
Mosyle Business (mosyle.com) — provides iOS mobile device management. Mosyle processes device enrollment and management data for iOS subscribers.
Samsung Knox Manage (samsungknox.com) — provides Android mobile device management. Knox Manage processes device enrollment and management data for Android subscribers.
Wix (wix.com) — hosts fortressworkspace.ca and processes subscription payments. Wix handles billing data in accordance with their privacy policy and PCI-DSS standards.

We take reasonable steps to ensure that our service providers maintain appropriate security and privacy practices. However, their processing of your data is governed by their own privacy policies, which we encourage you to review.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect the rights or safety of Fortress, our subscribers, or the public, or prevent fraud or illegal activity.

4.3 Business Transfers

If Fortress Technical Solutions Inc. is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you by email if such a transfer occurs and your information will remain subject to this Privacy Policy.

5. Data Retention

We retain your personal information for as long as your subscription is active and for a reasonable period afterward as required by law or legitimate business purposes. Specifically:

Account and subscription records are retained for a minimum of 7 years following the end of your subscription, as required for tax and financial record-keeping under Canadian law
Support communications are retained for 3 years
MDM enrollment data is removed from our systems within 30 days of your subscription ending and your device being unenrolled
VPN connection logs are retained by Cloudflare in accordance with their data retention policies

You may request deletion of your personal information at any time (see Section 7). We will honour deletion requests to the extent permitted by law, noting that certain records must be retained for legal compliance.

6. Data Security

We implement industry-standard administrative, physical, and technical safeguards to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These include:

Encrypted transmission of data between your device and our service providers (TLS/HTTPS)
Secure, certificate-based authentication for VPN connections (no passwords transmitted)
Access controls limiting who within Fortress can access subscriber data
Regular review of our security practices as the threat landscape evolves

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If we become aware of a security breach affecting your data, we will notify you as required by applicable law.

7. Your Privacy Rights

Under PIPEDA and applicable provincial privacy laws, you have the right to:

Access — request a copy of the personal information we hold about you
Correction — ask us to correct inaccurate or incomplete personal information
Deletion — request that we delete your personal information, subject to legal retention requirements
Withdrawal of consent — withdraw your consent to our collection and use of your personal information at any time, noting that this may affect our ability to provide the Service
Complaint — file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe we have not handled your personal information appropriately

To exercise any of these rights, contact us at support@fortresstechsolutions.ca. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Children’s Privacy

Fortress Workspace is intended for use by adults operating as self-employed professionals or small business owners. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us at support@fortresstechsolutions.ca and we will delete it promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. If we make material changes, we will notify you by email at least 30 days before the changes take effect. The updated policy will also be posted at fortressworkspace.ca with the revised effective date.

Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

10. Contact Us — Privacy Inquiries

IIf you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:

Fortress Technical Solutions Inc.

Email: support@fortresstechsolutions.ca

Website: www.fortressworkspace.ca

Subject line: Privacy Inquiry — Fortress Workspace

We are committed to addressing your privacy concerns promptly and transparently.

11. Regulatory Authority

Fortress Workspace is operated by Fortress Technical Solutions Inc., a Canadian corporation subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with our response to a privacy concern, you have the right to contact:

Office of the Privacy Commissioner of Canada

Website: www.priv.gc.ca

Phone: 1-800-282-1376

Fortress Workspace is a product of Fortress Technical Solutions Inc. — a proudly Canadian company.

Business protected. Privacy respected.