Data Processing Addendum

This Addendum forms part of the Terms of Service between 1000595837 Ontario Inc. o/a Inlabs("RunPayroll") and the business customer. It governs the workforce personal information the customer submits to the Service about its employees and contractors.

The customer instructs RunPayroll to process customer personal information to provide the subscribed services. The customer warrants that it has the authority to provide that information, including Social Insurance Numbers, and to give these instructions for each employer account it administers. RunPayroll processes the information only to deliver the services and for related support, security, and legal purposes.

RunPayroll treats customer personal information as confidential, limits access to personnel and providers who need it to deliver the services, and binds them to confidentiality obligations.

RunPayroll may use subprocessors under written obligations no less protective than this Addendum. The current list is published at /subprocessors. We give notice of changes to the list; continued use after notice constitutes acceptance.

RunPayroll maintains safeguards appropriate to the sensitivity of payroll data, as described in the Security Overview. We notify affected customers of a confidentiality or security incident involving their personal information without undue delay, with reasonable detail about the nature of the incident and the measures taken.

Where an employee or contractor makes an access, correction, deletion, or portability request to the customer, RunPayroll assists as legally required and commercially reasonable, through the Service's features or on written request.

On termination, RunPayroll deletes or returns customer personal information, subject to records we must retain by law, backup cycles, and the append-only audit log the Service maintains by design. Payroll records carry statutory retention periods; the customer remains responsible for retaining its own copies as the law requires of an employer.

RunPayroll may disclose information where a law, court, or regulator requires it, and will notify the customer where legally permitted.

On reasonable written request, RunPayroll provides information and documentation demonstrating compliance with this Addendum, and cooperates with regulator inquiries. On-site audits are not offered by default.

For personal information subject to Quebec law, this Addendum is intended to satisfy the written-agreement requirements for service providers, including limited use, confidentiality, retention after expiry, incident notification, and verification.