Data Processing Terms
Data-processing terms for business customers using GarageOS and Renvori Payroll.
These Data Processing Terms supplement the Terms of Service when Renvori processes personal information supplied by a business Customer in order to provide GarageOS or Renvori Payroll.
1. Customer instructions
The Customer determines the business purposes for Customer-controlled personal information and instructs Renvori to process that information as necessary to provide, secure, support, and maintain the Services and as otherwise permitted by the Terms or required by law.
2. Confidentiality and access
Renvori limits access to personnel and service providers who require access for authorized purposes and who are subject to appropriate confidentiality obligations.
3. Security
Renvori will maintain safeguards appropriate to the sensitivity of Customer-controlled personal information. Customers remain responsible for user permissions, endpoint security, lawful collection, and avoiding sensitive information in fields not designed for it.
4. Service providers
Renvori may use subprocessors to provide infrastructure, authentication, billing, communications, and other necessary services. Current core categories are described in the Service Providers & Subprocessors notice.
5. Requests and assistance
Where reasonably required and permitted, Renvori will assist the Customer with access, correction, deletion, or regulatory requests relating to Customer-controlled information, taking into account the nature of the processing and information available to Renvori.
6. Security incidents and confidentiality events
Renvori will assess suspected unauthorized access, use, disclosure, or attempted violations of confidentiality obligations involving Customer-controlled personal information. Where applicable law requires it, Renvori will notify the affected Customer without delay of a violation or attempted violation of a confidentiality obligation and will otherwise notify the affected Customer without undue delay after confirming a material security incident. Security concerns may be reported to security@renvori.ca.
7. Verification and cooperation
On reasonable request, and subject to confidentiality and security limits, Renvori will provide information reasonably necessary to verify compliance with these Data Processing Terms and will reasonably cooperate with legally applicable verification requirements.
8. Return and deletion
At the end of service, Customer access may cease. Renvori will return, delete, or de-identify Customer-controlled personal information as required by applicable law and the parties' written arrangement and will not retain it for unrelated purposes. Limited copies may persist only where required by law, legitimate legal or security records, or technically necessary recovery media until overwritten or deleted in the ordinary cycle; while retained, the protections in these Data Processing Terms continue to apply. Customers should export records they are legally required to retain before termination.
9. International processing
Authorized service providers may process information outside Canada. Renvori remains responsible for its own compliance obligations concerning information under its control and provides transparency through the Privacy Policy and service-provider notice.
10. Privacy contact
Questions about these Data Processing Terms or Renvori's handling of Customer-controlled personal information may be sent to the Privacy Officer at privacy@renvori.ca.