Terms & Conditions

Website Terms and Conditions of Use

‍

TERMS & CONDITIONS
(including Website Terms, SaaS / Service Terms, Operational Terms, and Data Privacy Policy)

‍

Table of Contents

Section A — Website Terms (Applies to all Website and App Users)
Covers site and app access, accounts and security, acceptable use, user submissions, third-party websites, geographic restrictions, and Website disclaimers.
Section B — SaaS Terms (Applies to Paying Customers)
Covers core SaaS legal terms including licence scope, customer responsibilities, use restrictions, third-party products, suspension rights, SSC intellectual property, confidentiality, warranties, indemnities, and limitation of liability.
Section C — Operational Terms (Applies to Paying Customers and Authorized Users)
Covers Authorized User Terms of Use, service levels and uptime, scheduled downtime, support services and support schedule, and data backup and recovery.
Section D — Data Privacy Policy (Applies to all Users)
Explains what information SSC collects, how it is used and shared, data security, cross-border processing, retention, and user rights.

Document Structure and Order of Precedence

“Quote” (or “Order Form”) means the most recent signed quote, order form, or statement of work that sets out a customer’s commercial terms, including scope, pricing, fees, billing timing, term, renewal/non-renewal, deposits, and any usage/add-on rules.
“SaaS Agreement” means the most recent StaffScheduleCare Software as a Service (SaaS) Agreement signed by a customer, if any.
This “Agreement” means these Website Terms (Section A), SaaS Terms (Section B), Operational Terms (Section C), the Data Privacy Policy (Section D), and any signed Quote and/or SaaS Agreement.

If there is a conflict between documents forming this Agreement:
(a) the signed Quote prevails for commercial terms;
(b) if no Quote exists for a customer, the signed SaaS Agreement (if any) prevails over these Terms for commercial terms; and
(c) these Website, SaaS, Operational, and Data Privacy Terms prevail for Website and service-use rules.

Your Quote (or SaaS Agreement, if no Quote exists) sets the business deal — including price, term, scope, and billing — and these online Terms set the rules for using the Website and Services.

SECTION A. WEBSITE TERMS (Applies to all Website and App Users)

‍

Acceptance of Website Terms‍

These Website Terms and Conditions of Use (the “Website Terms”) constitute a legal agreement between you, your employer (if applicable), and International Data Technologies Corporation carrying on business as StaffScheduleCare (“SSC,” “Company,” “we,” “us,” “our”). These Website Terms govern your access to and use of SSC’s websites, related domains, portals, and applications (collectively, the “Website”), including any content, functionality, and services offered through the Website.

BY USING THE WEBSITE OR BY CLICKING TO ACCEPT THESE WEBSITE TERMS, YOU ACCEPT AND AGREE TO BE BOUND BY THEM AND BY THE PRIVACY POLICY POSTED ON THIS SITE, WHICH IS INCORPORATED BY REFERENCE. IF YOU DO NOT AGREE, YOU MUST NOT ACCESS OR USE THE WEBSITE.

By using the Website, you represent and warrant that you are of the legal age of majority under applicable law to form a binding contract with SSC. If you do not meet this requirement, you must not access or use the Website.

‍

Changes to Website Terms and Website‍

SSC may revise and update these Website Terms from time to time in its sole discretion. Any changes are effective immediately upon posting and apply to all access to and continued use of the Website. You agree to review these Website Terms periodically; your continued use of the Website after changes are posted constitutes acceptance of the updated Website Terms.

SSC may change, withdraw, suspend, or discontinue any part of the Website at any time without notice. SSC is not liable if all or any part of the Website is restricted or unavailable at any time or for any period. For paying customers, changes to Sections B (SaaS Terms) or C (Operational Terms) will take effect thirty (30) days after SSC provides notice, unless a shorter period is required for legal, security, or safety reasons.

‍

Your Use of the Website; Account Set-Up and Security‍

The security of your personal information is important to SSC. SSC uses physical, electronic, and administrative safeguards designed to secure personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

You are responsible for obtaining and maintaining your own access to the Website. You must ensure that all persons who access the Website through your internet connection are aware of and comply with these Website Terms.

Certain areas of the Website may require registration. It is a condition of your use that all information you provide is correct, current, and complete.

Transmission of information via the Internet is not completely secure. SSC cannot guarantee the security of personal information transmitted to the Website. Any transmission is at your own risk, and SSC is not responsible for circumvention of privacy settings or security measures on the Website.

Any username, password, or credential must be treated as confidential. You must not disclose it to any other person or entity. You must notify SSC immediately of any unauthorized access or use of your credentials or any breach of security. You are responsible for any misuse of your credentials and for all activity that occurs under your account.

SSC may disable or terminate any account, username, password, or identifier at any time in its sole discretion, including for any violation of these Website Terms.

Prohibited Security and System Misuse‍

You are prohibited from attempting to circumvent or violate the security of the Website, including without limitation:

accessing content or data not intended for you;
attempting to breach, or breaching, security or authentication measures;
restricting, disrupting, or disabling service to users, hosts, servers, or networks;
illicitly reproducing TCP/IP packet headers;
disrupting network services or SSC’s ability to monitor the Website;
using robots, spiders, or automated means to access the Website for monitoring or copying materials;
introducing viruses, trojan horses, worms, logic bombs, or other harmful material;
attacking the Website via denial-of-service or similar attacks; or
otherwise interfering with the proper working of the Website.

Any penetration testing or cyber-security audit actions require SSC’s prior written approval.

Intellectual Property; Website Content‍

The Website and its entire contents, features, and functionality, including all information, software, code, data, text, displays, graphics, photographs, images, video, audio, design, presentation, layout, selection, and arrangement, are owned by SSC or its licensors and are protected by intellectual property laws.

The Company name, StaffScheduleCare trademarks, logos, product and service names, designs, and slogans are trademarks of SSC or its affiliates or licensors. You must not use them without SSC’s prior written consent. Other names and marks are the property of their respective owners.

You may use the Website only for personal, non-commercial use. You must not reproduce, distribute, modify, create derivative works of, publicly display, publicly perform, republish, download, store, or transmit Website materials except:

temporary browser caching;
a reasonable number of copies for lawful personal use only; and
a single user copy downloaded for personal, non-commercial use with notices intact.

If you copy or download Website materials in breach of these Website Terms, your right to use the Website ceases immediately and you must return or destroy copies at SSC’s option. No right, title, or interest in Website content is transferred to you.‍

User Submissions and Content Standards‍

The Website may include interactive features such as applications, chat rooms, email, message boards, forums, bulletin boards, or similar functions (“Interactive Functions”). Any content or material you submit through the Website (“User Submissions”) must comply with all applicable laws and these Website Terms.

Without limiting the foregoing, you agree not to submit material that:

violates laws or regulations, or infringes intellectual property or other rights;
violates terms of use of any third-party site linked to the Website;
is exploitive, obscene, harmful, threatening, abusive, hateful, defamatory, or discriminatory;
involves stalking or exploitation of any person, including minors;
is false, inaccurate, or misleading;
contains material that does not comply with these standards;
impersonates SSC, an SSC employee, or another person/entity;
transmits unsolicited promotions, spam, or similar solicitations;
restricts others’ use or enjoyment of the Website or harms SSC; or
otherwise is objectionable in SSC’s sole discretion.

User Submissions: Licence to SSC‍

User Submissions are not confidential. By submitting User Submissions, you grant SSC, its affiliates, and service providers a worldwide, royalty-free, perpetual, irrevocable, non-exclusive licence to use, reproduce, modify, perform, display, distribute, and disclose such material for any purpose and to incorporate it into any form, medium, or technology, without compensation to you. You waive any moral rights in such User Submissions.

You represent and warrant that you own or have the necessary rights to submit User Submissions and to grant the rights above, and that your User Submissions comply with these Website Terms. You are solely responsible for your User Submissions.

Site Monitoring; Enforcement; Suspension; Termination‍

SSC may, without notice:
• remove or refuse to post User Submissions;
• take any action regarding User Submissions it deems necessary, including for violations;
• refer matters to law enforcement or regulators and cooperate with lawful requests; and
• suspend or terminate your access to any part of the Website for any reason, including violations.

YOU WAIVE AND HOLD HARMLESS SSC AND ITS AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, SERVICE PROVIDERS, CONTRACTORS, LICENSORS, LICENSEES, SUPPLIERS, AND SUCCESSORS FROM CLAIMS RESULTING FROM SUCH ACTIONS.

SSC has no obligation to monitor the Website and does not undertake to review all User Submissions. SSC is not liable for action or inaction regarding user or third-party content, subject to applicable law.‍

No Reliance‍

Website content is provided for general information only and is not advice. SSC does not guarantee Website content is accurate, complete, or up-to-date. Your use of the Website is at your own risk. Third-party content reflects the views of its providers, not SSC.

Privacy and Cookies‍

By using the Website or submitting personal information, you consent to SSC’s collection, use, hosting, transmission, and disclosure of your information in accordance with SSC’s Privacy Policy as posted on the Website.

The Website uses cookies and similar technologies to support functionality and analyze usage. You may adjust browser settings to manage cookies, but disabling them may affect Website performance.

Third-Party Websites‍

The Website may link to or provide access to third-party sites or services. SSC does not control these sites and is not responsible for their content, availability, or any loss or damage arising from your use of them. Your use of third-party sites is at your own risk and subject to their terms.

You may link to SSC’s homepage in a fair and legal way that does not imply endorsement. SSC may withdraw linking permission at any time.

Geographic Restrictions‍

SSC is based in Ontario, Canada. The Website is intended for use only by persons located in Canada, the United States, and Mexico. If you access the Website from outside these regions, you do so at your own risk and are responsible for compliance with local laws.

Disclaimer of Warranties‍

THE WEBSITE, ITS CONTENT, AND ANY SERVICES OR ITEMS OBTAINED THROUGH IT ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT, TO THE FULLEST EXTENT PERMITTED BY LAW. SSC DOES NOT WARRANT THAT THE WEBSITE WILL BE ACCURATE, RELIABLE, ERROR-FREE, OR UNINTERRUPTED, OR THAT DEFECTS WILL BE CORRECTED, OR THAT THE WEBSITE OR SERVERS ARE FREE OF VIRUSES OR HARMFUL COMPONENTS.

YOU ARE SOLELY RESPONSIBLE FOR YOUR COMPUTER, INTERNET, AND DATA SECURITY.

Limitation on Liability‍

TO THE FULLEST EXTENT PERMITTED BY LAW, SSC AND ITS AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, SERVICE PROVIDERS, CONTRACTORS, LICENSORS, LICENSEES, SUPPLIERS, AND SUCCESSORS WILL NOT BE LIABLE FOR ANY DAMAGES OF ANY KIND ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE WEBSITE, INCLUDING ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), BREACH OF PRIVACY, OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Indemnification‍

To the maximum extent permitted by law, you agree to defend, indemnify, and hold harmless SSC and its affiliates, directors, officers, employees, agents, service providers, contractors, licensors, suppliers, successors, and assigns from and against claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable legal fees) arising out of or relating to your breach of these Website Terms or your use of the Website, including your User Submissions and use of third-party sites.‍

Any legal suit, action, or proceeding arising out of or relating to these Website Terms or the Website will be instituted in the courts of the Province of Ontario, and you irrevocably submit to their exclusive jurisdiction.

Governing Law and Choice of Forum‍

These Website Terms and any dispute arising out of or relating to them or the Website are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.

Waiver‍‍

No failure to exercise, or delay in exercising, any right, remedy, power, or privilege arising from these Website Terms operates, or may be construed, as a waiver thereof; and no single or partial exercise of any right, remedy, power, or privilege hereunder precludes any other or further exercise thereof or the exercise of any other right, remedy, power, or privilege.

Severability‍

If any term or provision of these Website Terms is invalid, illegal, or unenforceable in any jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other term or provision of these Website Terms or invalidate or render unenforceable such term or provision in any other jurisdiction.

‍

SECTION B — SAAS TERMS (Applies to Paying Customers)

‍

These SaaS Terms apply to any customer (“Customer”) that purchases StaffScheduleCare subscription services, implementation/professional services, hardware, or add-ons (“Subscription Services”). These SaaS Terms govern Customer’s use of the Subscription Services in addition to the Website Terms in Section A.

Order of Precedence for Paying Customers.‍

the signed Quote / Order Form controls for commercial terms (including scope, pricing, deposits/prepayments, billing timing, term, renewal/non-renewal, termination rights/fees, and usage/add-on rules);
if no Quote exists, the signed SaaS Agreement controls for commercial terms; and
these SaaS Terms control for service-use rules unless the Quote or SaaS Agreement expressly overrides them.

If there is any conflict between: (i) a signed Quote / Order Form, (ii) a signed SaaS Agreement, and (iii) these SaaS Terms, then:

1. Provision of Access; Authorized Users.‍

Subject to Customer’s payment of Fees and compliance with this Agreement, StaffScheduleCare (“SSC”) grants Customer a non-exclusive, non-transferable right to access and use the Subscription Services during the Term solely for Customer’s internal business purposes and only by Authorized Users. SSC will provide Customer with required credentials and access instructions. The number of Authorized Users must not exceed the amount purchased unless otherwise agreed in writing. Each Authorized User must accept and comply with the Authorized User Terms of Use.

2. Documentation Licence.‍

SSC grants Customer a non-exclusive, non-sublicensable, non-transferable licence to use SSC documentation during the Term solely for Customer’s internal business purposes in connection with its authorized use of the Subscription Services.

3. Use Restrictions.‍

Customer and Authorized Users must not, directly or indirectly:

use the Subscription Services or documentation beyond the scope granted;
copy, modify, or create derivative works of the Subscription Services or documentation;
rent, lease, lend, sell, sublicense, assign, distribute, publish, transfer, or otherwise make the Subscription Services or documentation available to any third party other than Authorized Users;
reverse engineer, decompile, disassemble, decode, or attempt to derive source code from the Subscription Services;
remove or obscure proprietary notices; or
use the Subscription Services for competitive analysis, to develop a competing product/service, in a way that is to SSC’s commercial disadvantage, or in violation of law.

4. Suspension.‍

SSC may temporarily suspend Customer’s and/or any Authorized User’s access to any or all Subscription Services if SSC reasonably determines there is a security threat, unlawful/fraudulent/abusive use, a material risk to SSC systems or other customers, Customer insolvency or cessation, legal prohibition, or a required third-party vendor suspension affecting delivery. SSC will use commercially reasonable efforts to provide notice and resume access once cured. SSC has no liability for losses resulting from a permitted suspension.

5. Changes to Subscription Services.‍

SSC may make changes to the Subscription Services or documentation that SSC deems necessary or useful to maintain/enhance quality, competitiveness, performance, cost-efficiency, or to comply with law.

6. Customer Responsibilities.‍

Customer is responsible and liable for all use of the Subscription Services and documentation through its accounts, including all acts and omissions of Authorized Users. Any Authorized User breach is deemed a Customer breach.

7. Third-Party Products; Customer Systems.‍

SSC may make third-party products or services available to Customer (“Third-Party Products”). Third-Party Products are governed by their own terms. If Customer does not agree to those terms, Customer must not install or use them. SSC is not responsible for Third-Party Products.
Customer is responsible to ensure Authorized Users have compatible devices and internet connectivity, and that Customer’s systems, tools, vendors, storage, APIs, and business processes work with the Subscription Services. SSC is not responsible for incompatibility or errors caused by Customer systems or third-party vendors. Delays or failures caused by Customer are a Customer failure, and SSC is not liable for them.

8. Hardware (If Purchased or Rented).‍

Hardware provided by SSC is described in the applicable Quote or Annex. If Customer rents Hardware, SSC will supply replacement Hardware if rented Hardware is non-functional, up to two replacement units per year. SSC will make support personnel available to troubleshoot rented or purchased Hardware by phone or email with one (1) day’s notice.
If Customer fails to return rented Hardware within thirty (30) days of SSC’s request, SSC may continue to charge subscription fees and/or bill Customer for the replacement cost of the unreturned Hardware, and Customer is responsible for SSC’s reasonable enforcement and collection costs.

9. SSC Payroll Services.‍

Users who access and utilize payroll software offered through SSC’s platform agree to abide by the terms and conditions set forth by SSC’s third-party payroll service provider. By using payroll functionality, Customer and its users acknowledge that they have read, understood, and agree to be bound by those third-party terms.

10. Service Levels, Support, and Backups (High-Level).‍

SSC will use commercially reasonable efforts to make Subscription Services available in accordance with published service levels. Support is provided in accordance with the support level purchased by Customer. Detailed service levels, downtime windows, support schedule, and backup terms are set out in Section C (Operational Terms).

11. Fees, Payment, Taxes, and Adjustments.

Customer will pay all Fees as set out in the signed Quote (or if no Quote exists, the signed SaaS Agreement or applicable annex), without set-off or deduction, by the stated due dates.
Past-due amounts may incur interest at the rate set out in the Quote (or if not stated there, at fifteen percent (15%) per annum or the maximum permitted by law, whichever is lower). SSC may suspend services if payment remains outstanding for 30 days. Customer is responsible for SSC’s reasonable collection costs.
Fees exclude taxes. Customer is responsible for all applicable taxes on fees, excluding taxes on SSC’s income.
Billing start timing, deposits, professional services fees, annual prepayment discounts, and any usage/add-on pricing are as set out in the signed Quote. If a Quote does not address billing timing, monthly subscription Fees begin on the first day of the month following the start of implementation, and the deposit (if any) will be applied at that time.
SSC may increase subscription Fees only after Fees have been paid for one (1) year. Any increase will reasonably reflect increased costs, inflation, new available features, and other commercially reasonable factors. SSC will give 30 days’ notice of any fee increase.

12. Intellectual Property; Feedback.‍

SSC and its licensors retain all right, title, and interest in the Subscription Services, documentation, and SSC intellectual property. Customer receives no rights except those expressly granted. Any feedback Customer provides may be used by SSC without restriction or compensation.

13. Confidentiality.‍

Each party will keep the other party’s Confidential Information in strict confidence, use it only to perform this Agreement, restrict disclosure to personnel/subcontractors who need to know and are bound by confidentiality obligations, and notify/cooperate if unauthorized disclosure is discovered. (If you want confidentiality limited only to payroll/personnel data, revise this section to match the SaaS Agreement.)

14. Warranty Disclaimer.‍

The Subscription Services and SSC intellectual property are provided “as is” and “as available,” with all faults. SSC disclaims all warranties and conditions (express, implied, statutory), including merchantability, fitness for a particular purpose, title, and non-infringement. SSC does not warrant uninterrupted, error-free, or secure operation. Third-Party Products are also provided “as is.”

15. Indemnification.‍

a) SSC will indemnify Customer against third-party claims that Customer’s authorized use of the Subscription Services infringes Canadian intellectual property rights, subject to prompt notice, cooperation, and SSC control of the defense. SSC may modify/replace services or obtain rights to continue use; if neither is feasible, SSC may terminate affected services.
b) Customer will indemnify SSC for third-party claims arising from Customer Data, unauthorized use, negligence or wilful misconduct, Customer modifications, or Customer’s combination of Subscription Services with non-SSC products/services.
c) These indemnities are each party’s sole and exclusive remedies for infringement-type claims, and Provider liability for indemnity claims is subject to Section 16 (Limitation of Liability).

16. Limitation of Liability.‍

SSC is not liable for indirect, incidental, special, consequential, exemplary, aggravated, or punitive damages; or for lost profits/revenue, loss of goodwill, data loss, security breach consequences, or replacement costs, even if foreseeable. SSC’s aggregate liability is capped as set out in the signed Quote; if not stated there, it is capped at the lesser of amounts paid in the three (3) months before the claim or one hundred dollars ($100).

17. Term; Renewal; Termination.‍

The Term, renewal/non-renewal, termination for convenience/early termination rights, notice periods and commercial effects of termination are governed by the signed Quote / Order Form. If no Quote exists for a Customer, the signed SaaS Agreement governs those commercial terms. Either party may also terminate this Agreement for material breach by the other party or for insolvency, in each case in accordance with applicable law and any process set out in the Quote or SaaS Agreement.

Early Termination by Customer.‍

Unless the signed Quote / Order Form expressly states otherwise, Customer may terminate this Agreement before the end of a Term only by providing one hundred twenty (120) days’ written notice and paying: (a) all fees due during the notice period, (b) any outstanding fees, and (c) fifty percent (50%) of any other subscription fees that would have been payable through the remainder of the then-current Term if the Agreement had not been terminated early. Any waived implementation fees become due as stated in the Quote / Order Form.

18. General Terms.‍

Notices must be in writing and are effective when received. Neither party is liable for failure or delay due to events beyond reasonable control. Amendments and waivers must be in writing and signed. If any provision is invalid, the remainder remains enforceable. Ontario law governs, and Ontario courts have exclusive jurisdiction. Customer may not assign this Agreement without SSC’s prior written consent; SSC may assign freely. SSC may seek equitable relief for breaches of use restrictions, confidentiality, or SSC intellectual property rights.

SECTION C — OPERATIONAL TERMS (Applies to Paying Customers and Authorized Users)

These Operational Terms describe how the Subscription Services are delivered and supported in practice. They apply to paying customers and their Authorized Users and form part of the Agreement.

1. Authorized User Terms of Use.‍

Each Authorized User’s access to and use of the Software is governed by the Authorized User Terms of Use posted on this page. Authorized Users must comply with those terms at all times. Customer is responsible for ensuring its Authorized Users comply, and any breach by an Authorized User is deemed a breach by Customer.

2. Service Levels (Uptime).‍

SSC will use commercially reasonable efforts to make the Services available at least ninety-nine percent (99%) of the time measured over each calendar month during the Term (each a “Service Period”), excluding unavailability due to any of the Exceptions below (the “Availability Requirement”). “Service Level Failure” means a failure to meet the Availability Requirement. “Available” means the Services are available for access and use by Customer and Authorized Users over the internet. Availability will be measured using SSC’s internal service monitoring and logs.

3. Exceptions to Availability Requirement.‍

The Services will not be considered unavailable, and no Service Level Failure will be deemed to occur, if access is impaired due in whole or in part to:
a) any act or omission by Customer or an Authorized User that does not strictly comply with the Agreement;
b) a Customer Failure;
c) Customer or Authorized User internet connectivity;
d) a Force Majeure Event;
e) failure, interruption, outage, or other problem with any software, hardware, system, network, facility, or other matter not supplied by SSC (including hosting/cloud services not supplied by SSC);
f) Scheduled Downtime; or
g) disabling, suspension, or termination of Services under the Agreement.

“Customer Failure” means any failure, delay, degradation, or unavailability caused by Customer systems, Customer Data, Customer’s network or connectivity, third-party vendors engaged by Customer, or any act or omission of Customer or Authorized Users.

4. Service Failure and Remedies.‍

If a Service Level Failure occurs, SSC will issue a credit equal to one month of the monthly Fees for the Service Period in which the Service Level Failure occurred (a “Service Credit”), provided that:
a) Customer notifies SSC of the Service Level Failure promptly after becoming aware of it and requests the Service Credit in writing within three (3) business days after the end of the applicable Service Period;
b) in no event will a Service Credit for any Service Period exceed one month of Fees that would otherwise have been payable for that Service Period.
Service Credits are issued in the calendar month following the affected Service Period. Service Credits are Customer’s sole remedy and SSC’s sole obligation and liability for any Service Level Failure. Service Credits are not refundable and may only be applied against future Fees for Subscription Services.

5. Scheduled Downtime.‍

SSC will use commercially reasonable efforts to schedule routine maintenance between 11:00 p.m. and 5:00 a.m. Eastern time (“Scheduled Downtime”) and to provide reasonable prior notice of Scheduled Downtime when practical. SSC may perform emergency maintenance outside this window if necessary to address security, stability, or legal compliance issues.

6. Service Support.‍

The Services include SSC’s standard customer support services (“Support Services”) at the support levels purchased by Customer in accordance with the Support Schedule below. SSC may amend the Support Schedule from time to time. Customer may purchase enhanced support separately at SSC’s then-current rates. Only Authorized Users are entitled to request support from SSC. Response times are initial response targets and do not guarantee resolution time. Response timing may vary based on ticket severity, volume, and whether the issue arises from an Exception in Section 3.

7. Hardware Support.‍

Hardware is described in the applicable Quote/Annex. If Customer rents Hardware, SSC will supply new Hardware if non-functional, up to two (2) replacement units per year. If Customer requires troubleshooting with rented or purchased Hardware, SSC will make a support employee available by phone or email to troubleshoot within one (1) day’s notice. SSC is not responsible for damage or losses caused by Hardware malfunction or delivery delays except to the extent resulting from SSC’s gross negligence or willful misconduct, and in all cases subject to Section 16 (Limitation of Liability).

8. Failure to Return Rented Hardware.‍

If Customer fails to return rented Hardware, SSC may do any combination of the following:
a) continue to charge subscription fees, even if Services are not being provided; and/or
b) bill Customer for replacement cost if Hardware is not returned within thirty (30) days, with Customer responsible for SSC’s legal and enforcement costs to recover amounts owed.

9. Data Backup.‍

SSC backs up Customer data every fifteen (15) minutes. Backup retention is as follows:
• Daily backups are kept for one week.
• Weekly backups (Sunday backups) are kept for three months.
• Monthly backups (first day of each month) are kept for one year.
Backups consist of a full copy of the Customer database, including historical and current data accessible within Customer’s instance of the Services. Backups are stored using industry-standard encryption at an off-site Canadian cloud storage location.

10. Data Restoration Remedy.‍

In the event of loss, alteration, destruction, damage, or corruption of Customer data caused by SSC systems or Services, SSC will use commercially reasonable efforts to restore data from SSC’s most current backup in accordance with SSC’s then-current backup practices. This restoration obligation is SSC’s sole obligation and liability, and Customer’s sole remedy, for such data issues. SSC has no obligation or liability for any loss, alteration, destruction, damage, corruption, or recovery of Customer data beyond this restoration effort.

11. Support Schedule.‍

SSC will be reachable by phone or email according to the following schedule. “1st response” means initial acknowledgment by SSC after a support ticket is received through SSC’s designated support channels.

Standard Support – 1st response within 15 minutes
• Business days, Monday to Friday (excluding holidays) from 8 a.m. – 5 p.m. Eastern
‍

Emergency Technical Support (ETS) – 1st response within 60 minutes
• Business days, Monday to Friday from 5 p.m. – 8 p.m. Eastern
• Statutory holidays from 8 a.m. – 8 p.m. Eastern
• Weekends, Saturday and Sunday from 9 a.m. – 5 p.m. Eastern

‍

The support team will respond based on priority and severity of support tickets submitted by all customers. ETS is limited to system-down or critical severity issues, as reasonably determined by SSC.

‍

SECTION D — StaffScheduleCare Privacy Policy

‍

Last Updated: December 2025

StaffScheduleCare (“SSC”, “we”, “us”, “our”) provides workforce management, scheduling, communication, and related subscription services (the “Services”) to organizations. We are committed to protecting the privacy, confidentiality, and security of personal information entrusted to us.

This Privacy Policy describes how SSC collects, uses, discloses, retains, and protects personal information when individuals access our websites, applications, or Services.

By accessing or using the Services, you agree to the practices described in this Privacy Policy.

1. Who This Policy Applies To

This Privacy Policy applies to:

Visitors to SSC websites or applications
Individuals who create or use SSC accounts (“Authorized Users”)
Individuals whose personal information is entered into the Services by an SSC customer, such as employees, contractors, or staff of a customer organization

Where SSC provides Services to an organization, SSC processes personal information as a service provider on behalf of that organization. The customer organization controls the personal information within its SSC environment and is responsible for obtaining any necessary authority or consent to submit that information to SSC.

SSC is the controller of personal information we collect directly for our own business purposes (for example, website visitors, sales and marketing contacts, and customer administrator contact details).

Relationship to Customer Agreements. If you are using the Services under a signed Quote/Order Form, SaaS Agreement, or data protection addendum, that agreement may include additional privacy and security terms. If there is a conflict, the signed agreement prevails.

2. Personal Information We Collect

SSC collects personal information only as needed to provide the Services and fulfill contractual or legal obligations. The specific information collected depends on how each customer configures and uses the Services.

2.1 Information You or Your Organization Provide

Depending on configuration, SSC may collect:

Identity and contact details (e.g., name, email address, phone number, work address)
Role, job-related data, and work location
Scheduling, time and attendance, and communication information
Messages sent through SSC’s SMS, mobile app, or push notification features
Customer-defined HRIS fields such as training records, grievance or disciplinary history, and other employment-related information

For payroll-enabled configurations, SSC processes only customer-supplied fields needed to support time and attendance workflows. SSC does not store full banking information for employees unless explicitly provided by the customer as part of a specific, documented integration.

2.2 Account, Support, and Communication Data

We also collect:

Account credentials and profile settings
Communications with SSC teams (support tickets, emails, and phone logs)
Implementation, onboarding, and training records
Feedback about the Services

2.3 Automatically Collected Usage and Device Data

When you use our websites or Services, SSC automatically collects:

IP address and general geographic region
Device and browser details
Authentication events, access logs, and security logs
Pages and features accessed in the application
Performance metrics and usage analytics
Error or diagnostic information (which may be routed to tools such as DataDog on a limited, need-to-know basis for troubleshooting)

2.4 Cookies and Similar Technologies

SSC uses cookies and similar technologies to support:

Session management
Authentication
Security
Application performance
Basic analytics on our marketing website

SSC does not use advertising or remarketing cookies. A high-level description of cookie types is provided in Section 9.

3. How We Use Personal Information

SSC uses personal information to:

Provide, operate, and support the Services
Create and manage user accounts and roles
Facilitate scheduling, communication, and workforce management functionality
Deliver SMS, automated calls, and push notifications where enabled
Provide support, implementation, and customer success services
Improve platform performance, security, usability, and reliability
Conduct analytics using de-identified or aggregated data
Detect and prevent fraud, misuse, and security threats
Meet contractual, legal, and regulatory obligations

SSC does not engage in targeted advertising and does not sell personal information.

4. Legal Basis / Authority to Process

SSC processes personal information based on:

Contractual necessity (to provide the Services to a customer organization and perform our agreements)
Compliance with legal obligations
SSC’s legitimate interests (such as securing our systems, ensuring service reliability, improving our Services, and preventing misuse)
Consent, where required by law (for example, certain optional cookies or marketing communications)

Customers are responsible for ensuring they have appropriate authority or consent to submit personal information to SSC and configure their SSC environments.

5. How We Share Personal Information

SSC does not sell personal information.

We may share personal information only as described below.

5.1 Subprocessors Who May Receive Customer Data

SSC uses a limited set of subprocessors that may access customer personal information to provide communication or platform functionality. These subprocessors operate under confidentiality and data protection obligations. SSC limits the information provided to subprocessors to only the necessary information required to perform the operation.

Current subprocessors include:

Esendex — SMS delivery for schedule and shift notifications
Expo.dev — Push notification delivery for SSC mobile applications
Microsoft 365 — Email processing for system-generated messages and certain support communications
Microsoft Clarity — Analytics on SSC’s website and application (configured to obfuscate content and avoid collecting directly identifiable information)
DataDog (limited use) — Error logging and diagnostic data, accessed only on a need-to-know basis when troubleshooting customer-reported issues

5.2 Vendors That Do Not Access Customer Records

SSC also uses vendors that support internal security and operations but do not receive customer HR or workforce records from the SSC application, such as:

Security operations partner
Security information and event management (SIEM) provider
Endpoint detection and response (EDR) provider
Endpoint management and patching tools
Password vault and employee security training providers
Hosting infrastructure provider (Canadian Tier-1 data centres)

These vendors may receive system logs or metadata related to SSC’s internal infrastructure, not customer HR/HRIS data.

5.3 Within Customer Organizations

Within a customer environment, personal information is available to users with appropriate permissions, such as administrators, managers, or HR personnel designated by the customer. SSC does not control how customers choose to grant or manage this access.

5.4 Legal, Compliance, and Safety

SSC may disclose personal information:

To comply with applicable laws, regulations, or legal processes
To respond to valid court orders or regulatory requests
To protect SSC, our customers, Authorized Users, or the public from harm, fraud, or security threats

5.5 Business Transactions

If SSC undergoes a merger, acquisition, financing, reorganization, or sale of all or part of the business, personal information may be transferred to the acquiring or successor entity under appropriate confidentiality safeguards.

6. Data Location and Residency

All customer data is stored and processed exclusively in Canada.

Primary hosting: Canadian Tier-1 data centres, on physical servers dedicated to SSC
Backups: Backups are taken frequently (for example, every 15 minutes for active customer data) and stored in a Canadian region (e.g., Montreal)
Backup services: SSC uses trusted backup and storage providers with locations geofenced to Canada

SSC does not operate staging or development environments outside Canada that contain customer data.

7. Data Retention

SSC retains personal information only as long as necessary to:

Provide the Services
Meet contractual commitments
Satisfy legal, audit, or regulatory requirements
Support continuity, troubleshooting, and disaster recovery

7.1 Customer Account Retention

Customer account data is typically retained for up to one (1) year after subscription termination, unless otherwise agreed in writing or required by law. Customers may request export or deletion of data, subject to technical feasibility and legal retention requirements.

7.2 Backups

Backups are retained for limited periods in accordance with SSC’s backup retention schedules (daily, weekly, monthly cycles). Data in backups is not always individually editable and may persist until backups are cycled and overwritten.

8. Security

SSC maintains administrative, physical, and technical safeguards aligned with internal security policies and industry best practices, taking into account the sensitivity of the data and the risks of processing.

Controls include, among others:

8.1 Access Controls

Role-Based Access Control (RBAC)
Unique user accounts
Mandatory multi-factor authentication (MFA) for SSC staff
MFA options for customer accounts as determined by customers
Periodic access reviews

8.2 Data Protection

Encryption in transit using modern TLS
Network and infrastructure segmentation
Strict access controls for databases and management interfaces
No third-party access to raw customer data except subprocessors described in Section 5.1 acting under SSC’s instructions

8.3 Monitoring and Threat Protection

Security alerting and log monitoring
SIEM-based event correlation
Endpoint detection and response (EDR) on SSC-managed systems
Automated and manual threat detection workflows

8.4 Vulnerability Management

Regular automated vulnerability scanning and web application scanning
Remediation based on severity and risk
Review of client-supplied penetration tests
Periodic third-party penetration testing as part of SSC’s security maturity roadmap

8.5 Incident Response

SSC maintains internal procedures for responding to suspected or actual security incidents and works with its security operations partners for detection, triage, and remediation. Where required by law or contract, SSC will notify affected customers of security incidents within appropriate timeframes.

No security program is perfect, but SSC strives to continuously improve its controls and practices.

9. Cookies and Tracking Technologies

9.1 Marketing Website

On SSC’s public marketing website, we use:

Essential cookies — to operate the site and provide core functionality
Optional analytics cookies — such as Microsoft Clarity, configured to obfuscate content and avoid collecting directly identifiable information

We do not use advertising, remarketing, or cross-site profiling cookies.

9.2 SSC Application

Within the SSC application, we use:

Session cookies — for authentication and session continuity
Optional analytics cookies — such as Microsoft Clarity, configured to obfuscate content and avoid collecting directly identifiable information
Security cookies — to protect login flows and detect misuse
Preference cookies — to remember user interface preferences

We do not use advertising or marketing cookies inside the application. Diagnostic logs (which may be processed by tools such as DataDog) are used on a limited, need-to-know basis to troubleshoot errors and improve reliability.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

Access personal information held about you
Request correction of inaccurate or incomplete data
Request deletion of personal information (subject to contractual or legal retention limits)
Restrict or object to certain processing activities
Withdraw consent where processing is based on consent

For data entered by your employer or organization, requests should be directed first to your administrator or HR representative. SSC will support the customer’s response as required by law and our agreements.

11. Marketing Communications (CASL)

SSC may send commercial electronic messages (for example, emails) to customers and website visitors only with express consent or where Canadian anti-spam laws (such as CASL) permit implied consent. Each marketing message includes SSC’s identification and a functional unsubscribe mechanism.

You may opt out of marketing communications at any time by using the unsubscribe link in the message or contacting us. We will honor your request in accordance with applicable law. Operational and transactional messages (such as service notices, security alerts, and system notifications) may still be sent where permitted.

12. Children

The Services and SSC websites are not directed to children. SSC does not knowingly collect personal information from children. If you believe a child’s personal information has been entered into the platform improperly, please contact both the relevant customer organization and SSC so the situation can be addressed.

13. Changes to This Privacy Policy

SSC may update this Privacy Policy periodically. Changes will be posted with a revised “Last Updated” date. Where changes are material, SSC may also notify customer administrators or post additional notices in the Services.

14. Contact Us

For questions about this Privacy Policy or SSC’s privacy practices, please use:

StaffScheduleCare – Privacy Office
1310 Kerrisdale Blvd, Suite 200
Newmarket, Ontario, L3Y 8V6
Email: privacy@staffschedulecare.com
Phone: 1-888-758-5810

‍