Last updated: 1 October 2026 (version 1.0)
Scope
This agreement applies to personal data NemiRoute processes for a company ("the controller") when it uses the service. It forms part of the Terms of Service.
Instructions
We process personal data only to provide the service and on the controller's documented instructions, which are the use of the service's features and settings. We tell the controller if we think an instruction breaks the law.
Confidentiality and staff access
Our staff may access a company's data only to support that company, through a recorded, time-limited support session that is read-only by default and visible to the company. Staff are bound by confidentiality.
Security
We apply the measures in the Privacy Policy: encryption in transit and at rest, hashed credentials, role-based access, tenant isolation tested automatically, audit logging, restricted and logged access to sensitive documents, and backups with tested restores.
Subprocessors
The controller authorises the subprocessors on the subprocessors page. We give notice of an addition or replacement by publishing a new version of that page; company administrators are asked to accept it, and a company that objects can export its data and end the agreement.
Helping with people's rights
The service includes export and erasure for customer contacts, staff and drivers, run by the controller or by the person themself. If a person contacts us directly we refer them to the controller unless the law requires otherwise.
Breach notice
We notify the controller without undue delay, and in any case within 72 hours of becoming aware, of a breach of personal data we process, with what we know about its cause, scope and remedy.
Return and deletion
The controller can export all data at any time. When a workspace is deleted we hold it 14 days for restore, then purge the database rows and stored files; backups age out on their normal rotation (see docs/OPERATIONS.md). Records the law requires us to keep (for example our own billing records) stay, without personal data of the controller's people.
Audits
On reasonable notice, once a year, the controller may ask for information needed to show compliance; we answer in writing and, where that is not enough, allow an audit under confidentiality.
Transfers
Where data moves outside Canada or the EEA, it moves only to the subprocessors listed, under their data protection terms.