The best payroll record
to protect is one we never receive.
Version 1.1 · effective July 30, 2026.
1. The preparation workspace
Payroll files, names, Social Insurance Numbers, employee addresses, earnings, hours and form answers are processed in your web browser. The workspace does not transmit those values to a roe.help application database.
2. Optional private project storage
Work is temporary unless you explicitly enable device saving. A saved project is encrypted in IndexedDB using AES-GCM and an Argon2id key derived from your passphrase. The passphrase is kept only in memory while the page is open; roe.help cannot recover it. Saved copies expire after 30 days and can be deleted from the workspace.
3. Portable and export files
Portable .roehelp project files are encrypted before download. Each .BLK file is created on your device and released only after its final bytes pass the checksum-pinned published XSD. It contains protected payroll information and remains under your control.
4. Website operations
Hosting providers may process ordinary request information such as IP address, browser type, requested page, timestamp and security event to deliver and protect the website. Employee form values and uploaded file contents are not intentionally placed in those logs.
5. Analytics and advertising
The preparation workspace does not use employee form values for analytics, profiling or advertising. roe.help does not sell employee payroll information.
6. Service Canada
roe.help is independent from Service Canada. Government privacy notices and terms apply after you follow an official link or upload a file in ROE Web. roe.help never asks for or receives a GCKey, banking sign-in or ROE Web credential.
7. Employee guidance
Employee message and guidance tools run in the browser. They do not send a request or application. The user decides whether to copy text into another service or follow an official link.
8. Authorization
Do not enter or upload payroll information unless you are authorized to handle it. Employee guidance is for people seeking information about their own records.
9. Changes
If a future version adds accounts, cloud storage, paid services or provider connections, this notice must be updated before that collection begins. Material changes are dated and recorded in the changelog.